
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37362e302f32322d3232203d3e203539303039.roa
File: 3130332e3235342e37362e302f32322d3232203d3e203539303039.roa (raw, json)
Hash identifier: EdYL6p9cznWIStM+C+8tcUKK6VZzDdjnP4emrXR8oC4=
Subject key identifier: 8E:38:A8:02:A2:E9:BD:D1:9F:21:08:E2:CE:B0:5E:79:DE:5D:11:F2
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 2990FCE82701374F10273E27F57D89A6A7DAA6D8
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37362e302f32322d3232203d3e203539303039.roa
Signing time: Wed 01 Jul 2026 09:27:44 +0000
ROA not before: Wed 01 Jul 2026 09:22:44 +0000
ROA not after: Wed 30 Jun 2027 09:27:44 +0000
asID: 59009
IP address blocks: 103.254.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:90:fc:e8:27:01:37:4f:10:27:3e:27:f5:7d:89:a6:a7:da:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jul 1 09:22:44 2026 GMT
Not After : Jun 30 09:27:44 2027 GMT
Subject: CN=8E38A802A2E9BDD19F2108E2CEB05E79DE5D11F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:53:9a:50:af:0b:77:71:cd:17:08:6e:69:
ab:a6:a3:18:58:77:bf:60:14:70:1e:9d:92:70:15:
75:ef:78:4b:42:4e:d3:1b:dd:c8:5f:ca:f4:60:9d:
e9:7d:cb:6b:bd:7a:7e:37:2c:c7:ad:76:15:0f:87:
2c:a4:fb:46:d7:5b:27:5f:5d:f1:2c:28:e9:36:68:
01:ee:8f:a1:dd:b3:67:8f:37:28:7e:5a:90:bb:f9:
fc:8f:ac:69:e2:5f:9a:22:77:db:f6:10:9f:04:25:
ef:c6:f2:f3:09:e9:0d:56:29:89:d1:d6:df:46:48:
3e:37:74:06:2c:3c:48:fc:5f:7d:a5:63:c4:cc:36:
97:8c:bc:59:d6:df:7a:96:7e:a5:30:07:f0:d5:b8:
aa:d8:c2:b9:7e:e9:98:5d:28:90:d7:95:7c:fa:c0:
6f:60:e7:77:ce:dd:51:84:9d:5b:32:91:0d:03:84:
ec:02:8a:65:62:d6:a0:0b:50:26:3d:3f:28:70:7a:
d3:8f:1a:2c:cc:e2:2b:e4:86:69:64:9c:a4:65:1c:
be:f4:dc:91:a5:eb:07:cd:c8:08:6d:64:56:97:44:
50:55:87:e4:7f:c6:84:83:27:1a:da:2f:cf:af:11:
35:3d:4c:bb:58:ad:4a:53:74:ef:19:4f:80:b2:d2:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:A8:02:A2:E9:BD:D1:9F:21:08:E2:CE:B0:5E:79:DE:5D:11:F2
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37362e302f32322d3232203d3e203539303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.76.0/22
Signature Algorithm: sha256WithRSAEncryption
54:eb:2a:a7:de:c3:54:a0:3c:00:d0:eb:01:55:08:93:8c:69:
4f:4e:c4:1c:a5:16:bd:0c:35:c8:a1:42:68:a9:7b:fa:19:e4:
6d:0f:71:36:c2:16:d4:62:85:bb:b0:b2:48:0e:8b:b1:e8:b0:
56:b4:5c:02:e3:63:a4:c1:0a:c0:91:16:4a:72:25:29:72:47:
d5:61:30:2d:61:75:ce:86:4f:6b:97:ad:1c:6f:c6:11:4f:26:
5b:cc:a8:c9:39:47:da:e8:3f:3c:54:bc:4f:7f:57:60:24:d4:
34:13:ba:63:a4:1b:a9:95:6d:86:ac:9f:b0:bb:4b:fb:2b:7f:
5d:a9:67:33:a0:7e:2c:e9:5c:3e:d5:ea:0f:16:37:76:aa:45:
c9:2b:20:83:3b:1a:ff:ca:4e:19:c0:e7:68:5d:f3:74:12:9d:
0a:49:45:00:a8:18:d5:0b:26:7d:db:e8:c2:8c:d5:a9:59:f8:
fe:9b:03:ac:77:77:c7:93:a1:e0:83:0e:41:6b:17:13:c6:82:
d2:a9:2d:14:ca:8a:a6:a2:39:f3:11:45:44:03:55:ac:b1:81:
ca:88:75:fd:a9:4d:dc:d8:52:e2:e2:ce:1c:bf:d3:0c:38:20:
49:7b:b0:a9:42:63:b8:16:a1:bc:05:fe:28:db:70:08:8c:84:
78:cf:30:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:54 2026 by rpki-client