
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e3133322e302f32322d3232203d3e203233363530.roa
File: 3130332e3231332e3133322e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier: ESgFXUoHLmeD/1MmjOK5HL0GGjyAwlrciQoEdTsCJHE=
Subject key identifier: C6:50:96:76:E2:1E:1F:55:75:5F:F0:C5:DF:5A:C7:EF:F8:92:68:DB
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 40100D3D24E8EBEFCC42AE0699AB96F3FC578541
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e3133322e302f32322d3232203d3e203233363530.roa
Signing time: Fri 12 Jun 2026 06:33:27 +0000
ROA not before: Fri 12 Jun 2026 06:28:27 +0000
ROA not after: Fri 11 Jun 2027 06:33:27 +0000
asID: 23650
IP address blocks: 103.213.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:10:0d:3d:24:e8:eb:ef:cc:42:ae:06:99:ab:96:f3:fc:57:85:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:28:27 2026 GMT
Not After : Jun 11 06:33:27 2027 GMT
Subject: CN=C6509676E21E1F55755FF0C5DF5AC7EFF89268DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:3d:64:d9:5a:d6:2f:ab:0d:68:15:c8:0b:
bf:26:db:7b:bf:73:d6:16:cb:f8:22:98:49:f0:c9:
b9:01:f2:6a:68:38:4e:4a:e8:26:38:07:5f:c6:bb:
f8:b2:3c:6b:b6:bb:6f:89:76:57:93:c0:1e:51:9c:
e9:6d:13:67:8f:a0:20:5a:2a:99:a4:79:57:c1:0d:
20:38:70:8e:ba:9a:eb:82:39:f3:5d:14:e3:59:76:
8e:be:95:65:3c:b7:11:e6:57:a2:ee:53:a7:d3:3e:
bc:77:c5:8f:62:2c:9b:2e:8b:ed:3c:eb:b4:c8:7a:
2b:6b:c8:13:e7:14:ca:a1:24:ab:f8:02:55:fc:e5:
1c:3c:88:44:ec:30:09:e0:a4:9f:03:a3:e5:df:8d:
15:3d:fd:1a:98:46:e4:d9:31:03:71:07:9e:d6:cd:
de:2c:eb:60:f2:63:ff:f6:f3:9c:4e:13:2d:9a:02:
de:a3:47:10:9e:44:b2:8d:c5:71:22:60:19:b7:57:
77:c5:9d:85:d4:80:65:51:43:c8:23:5b:8f:14:a5:
bd:34:7c:2d:10:fb:53:9b:d1:08:a7:80:e3:4f:ee:
a7:14:a4:fc:8a:e3:3e:4e:0c:ff:9b:51:db:65:9f:
27:82:a9:1f:10:7b:9a:6c:35:a3:4a:6e:73:61:d9:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:96:76:E2:1E:1F:55:75:5F:F0:C5:DF:5A:C7:EF:F8:92:68:DB
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e3231332e3133322e302f32322d3232203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:11:60:cb:74:a9:74:c1:5f:24:ee:33:1f:d4:fa:19:a1:12:
11:09:a0:b8:bd:c8:e0:a6:50:34:f2:63:3a:07:35:95:54:9b:
2e:14:7d:89:07:45:94:f5:8e:f2:9d:26:8d:88:92:6e:30:76:
f1:2e:30:8c:3f:75:06:eb:cd:14:31:10:9a:dd:b0:54:7b:ac:
17:69:9b:98:3d:9a:bf:a5:2c:b7:b5:bd:a9:81:8b:c4:fd:f1:
68:a7:c1:82:11:a7:dc:94:fc:b0:81:62:a9:3e:ca:05:da:7a:
8c:cc:a6:ac:f9:c0:2a:87:0f:23:eb:b6:74:1e:c5:a6:d5:34:
0d:9b:1d:ee:cc:6d:a7:9a:b3:7c:18:56:05:2d:d6:90:b4:8c:
d9:cb:53:0b:75:f7:e7:ed:4c:77:e0:64:7e:e4:d7:f8:01:1b:
59:08:43:e3:dc:57:2c:cf:db:c0:9e:95:55:37:ee:09:26:59:
66:d7:c6:f8:c6:18:59:c2:17:d8:18:b1:76:3d:bb:ec:a6:2b:
ba:32:c1:a9:13:92:45:d3:80:4d:53:be:db:e0:c0:62:a9:aa:
c2:2f:10:2d:a0:4e:e3:fd:48:76:a8:f6:d9:f3:bb:2c:00:d6:
89:cd:47:39:89:a5:1b:74:30:35:f8:29:dc:6b:b2:e0:c2:eb:
97:09:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:47:28 2026 by rpki-client