
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233352e3133372e302f32342d3234203d3e203539303039.roa
File: 3130332e3233352e3133372e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier: 6Pa/6eI2cG0qIbbcI1SZRNQ62Tl9M5nJwRgFAckt2ME=
Subject key identifier: AA:0E:81:EE:24:70:24:A6:1A:6D:66:16:B5:F6:B2:4D:58:2D:5D:07
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 30989AF7C8C85101B3E892862CFA1AB41BF9DE06
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233352e3133372e302f32342d3234203d3e203539303039.roa
Signing time: Thu 02 Jul 2026 01:35:31 +0000
ROA not before: Thu 02 Jul 2026 01:30:31 +0000
ROA not after: Thu 01 Jul 2027 01:35:31 +0000
asID: 59009
IP address blocks: 103.235.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:98:9a:f7:c8:c8:51:01:b3:e8:92:86:2c:fa:1a:b4:1b:f9:de:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jul 2 01:30:31 2026 GMT
Not After : Jul 1 01:35:31 2027 GMT
Subject: CN=AA0E81EE247024A61A6D6616B5F6B24D582D5D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:e7:0b:a3:c9:5a:cf:c2:5e:d4:75:37:16:
96:8c:45:4e:fd:63:ca:9c:88:b5:1b:c1:0e:14:c5:
33:b4:86:c6:b3:f2:14:a8:71:4e:a5:f0:6d:bf:8a:
aa:58:49:06:4b:0a:e9:fe:f6:13:b9:a5:3a:54:7f:
59:a8:2d:1c:9a:da:cd:7e:63:55:e7:e1:a1:27:6f:
27:5e:c8:cf:07:04:92:47:6a:98:ce:bd:43:a6:72:
fb:ea:8d:8d:f4:30:1a:eb:98:ad:e0:27:9a:fa:7f:
fd:42:27:96:5d:48:e9:57:6a:2b:00:f5:f1:54:90:
05:78:de:be:84:b4:31:b7:df:5a:16:f0:b2:d1:7f:
26:ad:32:0b:94:8d:59:3e:47:e3:58:66:3f:53:dd:
39:42:95:5b:9a:57:f3:5f:72:59:ea:d0:f3:3f:0b:
1b:b2:fb:b6:d7:f1:d4:2c:d1:88:5f:8d:73:ab:7d:
27:69:c4:7f:40:33:72:56:c9:ff:6a:c4:79:0d:41:
89:93:34:c8:e6:16:81:c1:4b:e4:7f:61:55:4b:97:
15:1f:b1:8a:c7:8f:8e:8c:07:4e:13:80:1f:7e:7d:
bd:d4:6a:7d:70:44:ea:e5:42:4a:fa:8f:cc:e7:d4:
30:46:66:45:2d:a8:8b:33:f6:18:ae:53:12:31:c0:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:81:EE:24:70:24:A6:1A:6D:66:16:B5:F6:B2:4D:58:2D:5D:07
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233352e3133372e302f32342d3234203d3e203539303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5d:0d:ea:3c:c5:c6:63:30:76:3d:cc:10:86:de:52:56:73:
7a:76:5a:8e:04:72:cd:3b:16:7a:25:9f:ae:0d:82:15:e5:fc:
be:9d:e7:e3:79:32:29:22:ce:70:d9:f6:b9:3e:61:ad:08:42:
5d:8f:01:08:e0:c3:ce:b2:dd:5a:27:4f:f8:51:df:c7:5f:35:
de:d1:11:69:82:b7:e1:39:99:fb:75:14:22:e6:4a:af:d7:fe:
f6:d0:65:32:6b:b2:54:43:ac:50:32:eb:bc:d3:2b:23:74:39:
bc:bb:e0:ae:a1:75:c9:4b:3b:5d:0f:e1:74:96:76:15:1d:7c:
cb:72:ce:3e:88:33:c9:6c:db:a1:13:5b:9a:e4:6e:ee:c4:68:
50:15:87:4d:1e:84:df:c5:e4:5d:d5:98:d0:7a:4d:cb:4a:2b:
c1:57:bf:bc:13:80:0d:75:e0:af:d8:dc:fa:84:cb:15:8b:0f:
4b:74:ad:12:ff:c4:d5:df:34:63:63:05:5f:50:04:bc:c7:47:
38:45:c6:f9:50:57:01:6d:11:f4:8d:10:c2:ff:6e:1f:bc:7f:
c9:82:70:67:0c:fc:df:92:38:0d:96:01:15:26:1f:fb:f3:5a:
c9:f1:02:3c:40:0f:4f:86:c7:d3:62:d9:de:d8:cb:02:7b:09:
d0:76:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:48 2026 by rpki-client