
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35362e302f32342d3234203d3e2034383337.roa
File: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=
Subject key identifier: C1:69:EC:52:82:82:F3:93:CF:79:68:E7:56:04:7D:DA:39:45:D3:D8
Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial: 31453C77EC68C65F8398567F7128EF3F2B50288C
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35362e302f32342d3234203d3e2034383337.roa
Signing time: Thu 16 Apr 2026 06:55:30 +0000
ROA not before: Thu 16 Apr 2026 06:50:30 +0000
ROA not after: Thu 15 Apr 2027 06:55:30 +0000
asID: 4837
IP address blocks: 103.234.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 03:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:45:3c:77:ec:68:c6:5f:83:98:56:7f:71:28:ef:3f:2b:50:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Validity
Not Before: Apr 16 06:50:30 2026 GMT
Not After : Apr 15 06:55:30 2027 GMT
Subject: CN=C169EC528282F393CF7968E756047DDA3945D3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:d4:f6:fd:1c:72:d9:cf:d4:c6:db:86:6a:
53:40:f6:9c:27:7d:16:06:4c:63:ff:2c:1b:5f:0a:
7e:f6:0c:50:94:44:88:99:79:04:7d:26:a9:37:33:
0b:76:fd:ac:c0:d5:2e:b3:22:1a:32:83:93:86:00:
60:a2:57:4b:19:67:47:b6:bf:62:62:ef:a6:6b:46:
3e:c6:cf:30:34:35:5c:24:46:b8:cd:ff:a4:22:1d:
d7:fe:35:4a:59:33:f7:f3:1b:97:9b:0c:c7:1c:15:
ff:63:9d:07:8b:72:3a:c4:1f:d6:f4:5d:98:0e:b8:
ae:2c:83:e1:da:fd:d7:74:4a:0a:06:82:6b:d5:44:
17:d7:20:d6:14:56:96:e8:70:d7:11:15:cc:0f:f0:
e8:11:64:79:8d:c5:e9:88:f6:64:8e:c0:e4:11:a9:
33:a9:1c:c2:41:75:c7:b1:ef:67:eb:1b:9a:b9:86:
8e:09:73:3a:83:a2:d5:eb:92:67:17:30:09:3e:14:
c7:52:39:8e:01:d4:4f:76:e6:1c:64:c9:38:c9:3d:
6f:7a:c3:74:b8:b0:ed:cf:07:52:30:1b:1f:f0:fb:
ec:f9:bd:4c:b9:f5:1d:db:25:b1:74:13:c9:2a:5a:
8e:ae:8f:72:58:85:44:35:f9:0b:b2:e3:5e:3c:16:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:69:EC:52:82:82:F3:93:CF:79:68:E7:56:04:7D:DA:39:45:D3:D8
X509v3 Authority Key Identifier:
keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35362e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:74:7c:30:fd:7e:07:74:01:b9:f4:65:b6:46:98:c7:f3:14:
1b:07:7d:35:f7:4a:71:2b:a1:2c:ad:1f:e4:8d:67:09:ad:5c:
a5:a9:a2:e8:d2:49:f1:e9:ff:cd:d8:ef:cc:18:ba:a7:8c:cf:
94:a9:c6:db:c0:6b:19:7b:98:15:3d:2b:23:bf:19:37:72:94:
12:67:e6:b0:b2:3e:2b:b4:19:f6:50:b6:ae:58:27:79:12:40:
41:cb:0a:7e:c4:c6:93:52:ad:bd:2f:67:99:e4:fb:d5:2e:66:
99:6c:62:f2:8d:29:55:ab:c8:93:dc:be:1b:b3:98:1e:eb:cf:
a7:7c:ef:6e:39:6d:67:c9:09:b6:ca:76:6c:3e:29:24:84:9b:
0f:be:ee:45:cd:ba:9b:2b:bd:da:ab:da:cc:67:cd:3b:4a:64:
28:a6:b6:67:61:39:b7:4d:37:cf:ce:25:7c:0e:85:83:40:d4:
a2:4e:f6:7a:20:d2:6d:35:74:4c:06:2b:4e:46:e5:18:15:ff:
ed:11:96:d2:ce:56:e8:98:48:27:96:bc:23:d5:fc:34:9a:63:
1f:24:76:d4:53:a1:cf:26:89:0d:30:e0:e3:ad:90:30:06:00:
4a:26:66:23:71:eb:78:de:82:c8:66:59:a6:75:08:84:96:c5:
18:52:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:31 2026 by rpki-client