
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e33362e302f32322d3232203d3e203633353339.roa
File: 3130332e3130362e33362e302f32322d3232203d3e203633353339.roa (raw, json)
Hash identifier: TfOhEbexXYJJvm89fhZ3yx6HmJ4i7wpiNwJhA/cKnVc=
Subject key identifier: 56:25:9A:51:E3:6B:CD:9F:46:E7:7A:8D:52:AE:49:1C:19:C1:0D:5D
Certificate issuer: /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial: 7BC0CACC01FAC02D1472D4823FD426C23D35E482
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e33362e302f32322d3232203d3e203633353339.roa
Signing time: Thu 16 Apr 2026 02:55:37 +0000
ROA not before: Thu 16 Apr 2026 02:50:37 +0000
ROA not after: Thu 15 Apr 2027 02:55:37 +0000
asID: 63539
IP address blocks: 103.106.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c0:ca:cc:01:fa:c0:2d:14:72:d4:82:3f:d4:26:c2:3d:35:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Validity
Not Before: Apr 16 02:50:37 2026 GMT
Not After : Apr 15 02:55:37 2027 GMT
Subject: CN=56259A51E36BCD9F46E77A8D52AE491C19C10D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:29:4e:07:46:ac:80:21:c7:ef:67:54:5e:
22:53:aa:c4:ec:ea:fa:c8:7d:ff:ab:f6:8f:51:76:
8f:13:ba:7f:95:5d:f1:92:7a:68:d2:c8:75:d8:a5:
fa:74:ee:f1:1e:23:ac:32:7c:58:68:8c:d3:e7:91:
14:05:12:6d:c8:9d:70:b2:8d:b3:ba:39:9c:f5:6e:
86:98:de:3a:42:0f:d9:7d:88:43:89:93:b1:29:40:
ee:cf:0b:46:e3:63:d5:07:4b:e3:40:fb:71:dd:74:
a4:3a:ec:94:d2:d3:cc:ac:32:f5:fa:da:68:68:d5:
d0:0d:5d:d6:52:c6:aa:a8:5f:cf:f7:76:48:87:77:
5a:c3:f8:98:a2:3a:3a:4d:09:7f:93:bb:80:93:96:
48:c5:b5:e4:56:c4:c7:93:db:7e:80:d9:f9:30:ce:
c5:15:b9:f6:25:44:8d:2f:d8:3c:32:d0:45:f0:70:
fb:c0:fc:95:f3:7e:6a:b5:ec:85:bc:ce:36:df:7c:
33:48:3f:2b:86:4f:82:83:c2:52:69:52:85:5d:76:
43:e8:ac:eb:7f:54:ef:8d:bb:55:93:26:be:72:ac:
5a:fa:27:3d:08:69:cc:84:67:04:c9:ad:4a:f8:94:
9e:a6:fc:26:c6:fd:17:6a:1f:16:2d:81:86:b4:83:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:9A:51:E3:6B:CD:9F:46:E7:7A:8D:52:AE:49:1C:19:C1:0D:5D
X509v3 Authority Key Identifier:
keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e33362e302f32322d3232203d3e203633353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.106.36.0/22
Signature Algorithm: sha256WithRSAEncryption
af:9b:99:bb:f0:dd:4f:51:e5:85:a5:c9:60:fa:e0:b8:4a:60:
87:2d:44:46:c7:7f:4b:0e:9c:55:bb:c0:ca:89:7e:79:42:c4:
9d:ec:2e:5d:9b:fa:f8:8b:de:b0:5c:03:9d:df:28:68:f9:18:
06:58:3f:65:78:1e:5e:76:3c:c0:39:b3:22:a2:0b:34:8b:b5:
99:82:21:46:5a:8c:3e:01:22:f1:85:fd:0b:e6:87:11:51:8d:
4d:ac:d6:d5:6b:fe:99:98:47:b6:c0:62:3c:25:f5:54:d5:be:
7a:0f:1e:c3:03:da:59:56:6f:3c:78:42:d6:10:83:4e:03:21:
8a:82:4a:cc:32:dc:70:48:7d:fa:c9:14:da:c4:77:12:32:f0:
7c:48:19:b3:f9:ee:c7:d8:b2:b4:a9:04:bf:a2:3d:94:2e:b7:
86:74:42:a9:72:68:bf:5f:e7:87:15:ef:0a:79:6f:df:39:38:
97:b0:c9:82:eb:ff:ee:74:36:ba:5b:65:5a:c9:a1:3f:9d:de:
15:5e:f9:b6:5d:de:99:24:06:61:45:cc:0b:bf:f2:ff:bd:aa:
e8:ed:00:0a:86:b6:01:e1:9d:bc:bb:25:06:ee:f6:c4:10:63:
96:61:94:0b:ea:19:5a:b4:ad:55:f8:a6:9e:3f:4b:f3:58:e0:
44:33:69:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:41 2026 by rpki-client