
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e3235322e302f32322d3232203d3e203633353339.roa
File: 3130332e3130362e3235322e302f32322d3232203d3e203633353339.roa (raw, json)
Hash identifier: +T58P5mxobh7jbfRCXoFhi8Jj31pQ63DY42YYoVTo/g=
Subject key identifier: C1:45:E9:99:C3:8F:14:44:8A:F8:8E:45:5C:27:4A:E7:96:0E:D8:6F
Certificate issuer: /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial: 3A98B2443BB15873A62A2D0DA6BBDB06BE01FA6E
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e3235322e302f32322d3232203d3e203633353339.roa
Signing time: Thu 16 Apr 2026 02:55:38 +0000
ROA not before: Thu 16 Apr 2026 02:50:38 +0000
ROA not after: Thu 15 Apr 2027 02:55:38 +0000
asID: 63539
IP address blocks: 103.106.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:98:b2:44:3b:b1:58:73:a6:2a:2d:0d:a6:bb:db:06:be:01:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Validity
Not Before: Apr 16 02:50:38 2026 GMT
Not After : Apr 15 02:55:38 2027 GMT
Subject: CN=C145E999C38F14448AF88E455C274AE7960ED86F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:f5:3f:ea:8b:f1:a9:06:d3:63:e1:b2:2e:
76:85:7d:af:ab:fb:a7:98:48:dc:ef:30:92:20:31:
f0:8e:c8:a6:bf:ce:7e:10:ad:58:08:fc:07:a0:3a:
91:32:d3:51:8d:69:c8:e5:d6:ea:dd:69:6d:da:ac:
3f:c9:62:a5:69:06:da:27:d7:e3:55:27:46:89:42:
95:fe:48:e9:79:8f:f8:53:67:9e:50:3a:2a:66:78:
5b:94:06:77:5c:a9:7d:26:6f:1f:ae:20:96:f7:57:
d3:da:dd:1f:03:6e:96:b0:83:8f:0c:f7:08:63:ab:
11:ba:d2:43:fe:87:fb:8c:a4:69:cc:57:0e:e6:7e:
7f:1e:e3:0e:b8:60:c1:50:be:31:18:f3:ab:48:62:
66:60:5d:e5:e7:fc:c2:c4:0f:22:6c:22:60:f5:7a:
79:38:31:f7:f7:9f:95:b4:1c:51:b9:f9:fc:85:96:
2c:4c:e3:9c:96:97:24:66:33:86:31:ea:44:fe:e8:
c2:7a:0f:da:dc:71:66:68:c3:54:0f:84:94:60:b2:
9e:cb:5b:9c:6f:8a:b0:06:17:28:aa:5f:bd:93:7b:
e6:42:c5:fd:eb:82:e3:7a:c0:07:88:e2:3e:3e:9a:
1e:da:32:be:bd:88:61:64:8d:87:a2:38:be:5f:af:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:E9:99:C3:8F:14:44:8A:F8:8E:45:5C:27:4A:E7:96:0E:D8:6F
X509v3 Authority Key Identifier:
keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e3235322e302f32322d3232203d3e203633353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.106.252.0/22
Signature Algorithm: sha256WithRSAEncryption
14:d2:51:07:c5:8c:e7:0d:52:45:91:9e:ab:fe:9f:cb:83:d5:
64:93:05:76:31:ef:37:ef:22:8a:8f:da:e0:1d:68:34:09:7f:
fe:0c:17:0a:7b:ba:96:d5:be:6d:72:ad:07:bd:54:9e:55:20:
41:0b:01:05:f9:5c:b2:da:6f:a9:ef:2f:6e:4b:89:07:97:ab:
cc:99:80:04:ec:7a:51:2d:fc:a2:00:7f:b4:f2:de:c8:74:8b:
31:f3:da:bf:2a:38:d8:9f:92:21:6d:15:13:95:21:01:62:a4:
71:6b:04:0f:47:d4:7c:19:5d:8f:89:28:67:f8:53:b4:a4:8a:
5c:0c:a0:a7:44:4f:71:c4:49:d2:60:9a:3e:c5:c0:a9:c9:69:
f9:70:65:b9:ff:a6:b8:4b:92:78:e6:99:f7:e7:20:8f:03:37:
ef:2e:10:4e:4c:d5:00:65:d1:e7:90:fe:56:08:22:f9:76:67:
94:01:b9:a2:e5:e0:f7:61:2f:e1:58:e9:3b:32:0b:27:45:22:
3e:9f:62:ae:39:ee:b1:d1:13:03:8e:ab:23:ba:a3:75:f6:0d:
9c:19:fd:72:f3:ca:94:f3:ac:55:b6:57:e8:a8:df:91:ec:d9:
3f:b7:0b:6a:12:a9:59:e1:18:c5:07:c4:56:60:ba:65:73:14:
32:84:58:42
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUOpiyRDuxWHOmKi0NprvbBr4B+m4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5
NDMzODgxNTAeFw0yNjA0MTYwMjUwMzhaFw0yNzA0MTUwMjU1MzhaMDMxMTAvBgNV
BAMTKEMxNDVFOTk5QzM4RjE0NDQ4QUY4OEU0NTVDMjc0QUU3OTYwRUQ4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgPU/6ovxqQbTY+GyLnaFfa+r
+6eYSNzvMJIgMfCOyKa/zn4QrVgI/AegOpEy01GNacjl1urdaW3arD/JYqVpBton
1+NVJ0aJQpX+SOl5j/hTZ55QOipmeFuUBndcqX0mbx+uIJb3V9Pa3R8Dbpawg48M
9whjqxG60kP+h/uMpGnMVw7mfn8e4w64YMFQvjEY86tIYmZgXeXn/MLEDyJsImD1
enk4Mff3n5W0HFG5+fyFlixM45yWlyRmM4Yx6kT+6MJ6D9rccWZow1QPhJRgsp7L
W5xvirAGFyiqX72Te+ZCxf3rguN6wAeI4j4+mh7aMr69iGFkjYeiOL5fr/PtAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUwUXpmcOPFESK+I5FXCdK55YO2G8wHwYDVR0j
BBgwFoAUvB+cu1/2BjIw1FtZby0ObZQziBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4NDE4NzI1NDE0NTAyNi8wL0JDMUY5Q0JCNUZGNjA2MzIzMEQ0NUI1OTZGMkQw
RTZEOTQzMzg4MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5NDMzODgxNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY5ODQxODcyNTQxNDUwMjYvMC8zMTMwMzMyZTMx
MzAzNjJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzMzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdq/DANBgkqhkiG9w0BAQsFAAOCAQEAFNJRB8WM5w1SRZGeq/6f
y4PVZJMFdjHvN+8iio/a4B1oNAl//gwXCnu6ltW+bXKtB71UnlUgQQsBBflcstpv
qe8vbkuJB5erzJmABOx6US38ogB/tPLeyHSLMfPavyo42J+SIW0VE5UhAWKkcWsE
D0fUfBldj4koZ/hTtKSKXAygp0RPccRJ0mCaPsXAqclp+XBluf+muEuSeOaZ9+cg
jwM37y4QTkzVAGXR55D+Vggi+XZnlAG5ouXg92Ev4VjpOzILJ0UiPp9irjnusdET
A46rI7qjdfYNnBn9cvPKlPOsVbZX6KjfkezZP7cLahKpWeEYxQfEVmC6ZXMUMoRY
Qg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:40 2026 by rpki-client