
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235322e302f32322d3232203d3e203233363530.roa
File: 3130332e392e3235322e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier: NFaVwOUojmnQe2N0Upk3J84FCT/hpOIR7ndkhmK7yX0=
Subject key identifier: 9A:EC:40:6A:0D:66:9C:6A:13:7A:12:34:B2:EE:85:70:D9:92:B5:03
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 01A3E1667DEEF97E2740C696AEAC5E3FFB321734
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235322e302f32322d3232203d3e203233363530.roa
Signing time: Fri 12 Jun 2026 06:33:27 +0000
ROA not before: Fri 12 Jun 2026 06:28:27 +0000
ROA not after: Fri 11 Jun 2027 06:33:27 +0000
asID: 23650
IP address blocks: 103.9.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a3:e1:66:7d:ee:f9:7e:27:40:c6:96:ae:ac:5e:3f:fb:32:17:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:28:27 2026 GMT
Not After : Jun 11 06:33:27 2027 GMT
Subject: CN=9AEC406A0D669C6A137A1234B2EE8570D992B503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:68:10:8c:ae:43:fa:af:03:a3:95:ef:67:
0e:82:f2:c9:0d:4e:f3:62:62:10:ef:55:ff:4d:05:
3d:97:3e:b9:43:e4:94:a0:cd:f9:75:df:76:0a:c1:
d1:22:2f:03:df:51:39:b5:6e:3f:80:2b:46:60:ad:
ee:af:7a:09:8c:9c:f0:11:9f:15:09:8f:d2:dc:63:
b6:a3:fb:4d:eb:f4:9f:52:eb:93:f7:ae:58:f1:e4:
2b:b6:bd:fe:9d:93:99:f3:8e:95:06:02:6b:4d:02:
4b:37:bc:38:97:f3:a9:29:2a:79:77:67:17:a3:ea:
15:1c:0f:68:c9:f2:b3:75:8c:ba:fd:76:8c:42:a7:
90:f7:c1:d4:53:00:85:85:2c:da:f8:89:d5:19:dd:
dc:4d:2c:18:3f:6f:6d:c0:ce:fd:aa:49:0e:d9:a1:
09:b9:87:9f:c3:e9:82:83:eb:ab:b2:5a:97:91:d7:
40:7d:db:03:3c:d4:f0:d0:23:15:d1:e7:8a:ca:0c:
34:f7:6a:02:5b:4d:d3:ef:2e:5f:0b:f2:e0:fd:d6:
e0:18:07:17:ec:59:4f:d4:92:e0:a6:5a:53:39:3c:
4a:76:f0:cb:e3:37:bb:18:ee:75:a3:62:d4:62:cb:
a2:77:64:bd:45:1c:1e:79:cd:02:0d:65:24:c8:ed:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:40:6A:0D:66:9C:6A:13:7A:12:34:B2:EE:85:70:D9:92:B5:03
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3130332e392e3235322e302f32322d3232203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.9.252.0/22
Signature Algorithm: sha256WithRSAEncryption
31:01:e6:8d:86:e0:5b:e2:d0:20:31:8b:d6:11:61:f3:6b:6e:
07:ba:17:cc:13:d2:2b:43:49:6e:7c:40:83:5b:92:6b:d7:81:
c0:6b:76:80:3e:a2:75:37:c7:76:c4:79:6b:da:e1:a1:1b:92:
d8:2b:3a:64:68:13:44:cc:4b:83:87:92:29:f1:3f:c9:53:14:
fc:e6:1b:a3:8f:dd:3f:70:6c:30:6f:56:12:b3:b0:0a:2c:d9:
13:73:26:83:cc:82:54:f7:a5:42:88:c4:66:67:aa:ec:ce:4f:
2f:4e:8f:b2:14:44:9d:6b:36:9e:6b:d8:c6:b8:23:a4:ff:32:
da:68:08:93:55:24:18:0f:b4:c5:9e:7a:21:19:fb:a8:ca:ca:
3f:7a:cb:38:3b:5c:66:cb:d4:56:d5:5e:b8:e7:ab:e4:1e:a1:
78:8a:d3:92:2d:96:fa:bb:48:4c:35:ed:c7:e4:36:a4:19:6c:
e0:a8:09:81:69:dc:de:cf:06:99:85:5e:49:ef:08:28:7d:af:
d7:3c:98:88:47:d0:d6:78:52:7f:93:08:5b:e8:a7:69:7f:ac:
e5:73:13:8b:f2:ed:28:66:6b:51:6a:a5:d9:49:02:3e:c7:d4:
c7:f2:c0:ae:0d:23:48:e6:60:d2:c3:e9:aa:4f:fa:c6:4e:3e:
0d:55:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:49 2026 by rpki-client