
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39352e302f32342d3234203d3e203633363331.roa
File: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=
Subject key identifier: BF:58:D3:B8:C5:79:E3:2A:ED:80:B4:33:B4:36:D6:68:42:32:05:14
Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Certificate serial: 3ED389951AC45061F0F239DC77A3E25A9C5D9E09
Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39352e302f32342d3234203d3e203633363331.roa
Signing time: Thu 16 Apr 2026 05:55:33 +0000
ROA not before: Thu 16 Apr 2026 05:50:33 +0000
ROA not after: Thu 15 Apr 2027 05:55:33 +0000
asID: 63631
IP address blocks: 103.77.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 23:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d3:89:95:1a:c4:50:61:f0:f2:39:dc:77:a3:e2:5a:9c:5d:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Validity
Not Before: Apr 16 05:50:33 2026 GMT
Not After : Apr 15 05:55:33 2027 GMT
Subject: CN=BF58D3B8C579E32AED80B433B436D66842320514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:ec:79:96:55:93:8c:6d:9b:ae:94:c0:bc:
4d:64:13:3e:1c:b1:8d:bf:cd:b9:3c:15:29:13:d1:
35:aa:10:67:6f:37:0a:b0:ff:7d:04:9e:89:89:13:
c7:e1:06:26:32:94:13:29:3c:06:ac:07:ce:7b:5f:
62:ce:c8:32:01:48:2c:58:dc:33:6e:be:43:21:59:
d9:d1:79:b3:f4:73:41:f5:2e:2f:87:07:c0:eb:1b:
d0:69:ac:9d:4a:d9:b0:1d:c6:84:03:18:00:90:96:
7d:9e:30:ce:62:f4:15:a5:37:05:f7:29:75:fc:86:
60:4c:80:de:26:6c:e0:af:77:54:15:1c:1b:3a:eb:
2d:72:a5:63:0d:e3:b3:ae:52:34:3a:ea:67:97:81:
f5:7f:dc:3d:04:46:89:8c:76:38:75:0d:4e:22:fc:
48:db:72:f4:d7:2f:76:58:cb:e1:69:73:9a:a7:5f:
92:3f:04:be:a3:67:23:34:80:2e:29:11:57:92:9a:
10:b1:f6:f1:9a:9d:cc:92:31:62:11:ad:84:0b:61:
1f:07:91:6f:01:4b:1c:c0:82:7b:80:77:ed:29:2c:
99:fc:43:89:89:7f:49:70:6c:2d:76:7e:c2:dd:2e:
31:b1:34:69:fb:4f:ec:cf:90:6d:95:c5:43:80:9a:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:D3:B8:C5:79:E3:2A:ED:80:B4:33:B4:36:D6:68:42:32:05:14
X509v3 Authority Key Identifier:
keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39352e302f32342d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d9:27:7a:b5:5e:12:cb:d5:20:aa:d2:9f:17:d5:9c:4b:ec:
b3:8c:ba:1a:ca:f0:04:1d:5e:9f:10:c6:2d:ca:57:9c:df:e5:
db:c5:93:f7:c0:cc:66:f8:1d:6a:a6:42:4b:d9:f4:11:04:f4:
e7:fc:e6:57:33:73:30:6a:26:3e:9e:1a:0e:c8:5f:d4:5d:cf:
70:50:8e:65:f8:2a:dc:0b:ae:90:e9:bb:0f:7e:7c:95:55:fd:
22:2d:2f:c4:49:27:4d:20:ea:ca:ac:a4:35:50:f7:12:94:cb:
35:fa:93:8f:c9:65:54:5e:90:42:76:8a:35:f4:cc:49:aa:c1:
7a:99:43:22:44:cc:03:96:c9:f9:9b:d5:59:5f:1a:ed:77:c9:
4e:46:06:fa:9f:e5:a7:7c:f1:61:3e:da:82:86:17:83:07:93:
81:21:44:8e:77:cf:a7:86:98:fc:cf:54:83:7c:56:e0:73:63:
3b:6b:3a:64:c2:e1:3b:82:f7:37:29:fb:a8:59:0d:91:05:17:
96:b2:b2:03:58:d9:22:b4:c5:08:2e:fe:38:f5:07:64:81:43:
58:c4:78:64:9a:3e:8b:84:24:29:ac:48:c0:60:77:cf:a3:98:
18:78:f2:55:b3:78:b2:f6:bb:16:6a:b5:02:00:8f:a8:b5:8f:
90:20:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:54 2026 by rpki-client