
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e33362e3232302e302f32322d3234203d3e203538353139.roa
File: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (raw, json)
Hash identifier: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=
Subject key identifier: B9:3E:1D:D8:D2:20:01:9B:E4:43:8D:8E:76:6F:67:43:49:6F:DD:C5
Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial: 31D96D0615688DBF34999C546725FB0E077C0472
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e33362e3232302e302f32322d3234203d3e203538353139.roa
Signing time: Thu 09 Apr 2026 05:09:20 +0000
ROA not before: Thu 09 Apr 2026 05:04:20 +0000
ROA not after: Thu 08 Apr 2027 05:09:20 +0000
asID: 58519
IP address blocks: 103.36.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 22:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d9:6d:06:15:68:8d:bf:34:99:9c:54:67:25:fb:0e:07:7c:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Validity
Not Before: Apr 9 05:04:20 2026 GMT
Not After : Apr 8 05:09:20 2027 GMT
Subject: CN=B93E1DD8D220019BE4438D8E766F6743496FDDC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:fa:c7:bb:2f:70:58:47:0d:db:18:4f:10:
7d:81:75:53:cc:f6:d7:3f:33:eb:65:c5:ad:1d:70:
ac:e7:c3:d9:75:4d:86:1d:b8:34:21:89:c2:a8:9e:
f9:48:25:83:3e:52:57:e2:57:17:df:c4:65:3d:8b:
75:ef:58:36:cb:09:e8:4c:74:8a:75:48:86:a4:17:
83:21:2e:63:ec:b3:0c:64:a9:55:61:4b:1e:7e:aa:
03:bf:65:75:63:4e:40:94:4b:52:92:02:fd:82:68:
8e:b4:0e:f9:f7:36:dc:52:b0:5b:cf:4e:bc:b2:3f:
be:ba:a8:ac:e4:65:7a:da:6b:f3:d6:7e:e0:13:b9:
7b:cc:30:07:56:c5:52:bc:e2:18:af:11:19:44:9e:
97:16:b2:68:40:8f:27:42:cd:81:71:4c:74:40:2c:
1e:ec:26:86:f2:d3:02:9b:01:58:8d:cc:5a:7c:0e:
7c:91:fc:a3:22:db:1d:4d:8c:71:4f:ba:9f:ec:21:
0b:78:6b:7b:83:fa:72:0b:b9:7a:5f:42:7a:6a:37:
eb:49:ed:64:34:6c:e8:20:2c:a5:84:ad:ba:6c:a6:
68:c4:a6:30:f8:7f:6f:96:3f:d3:16:8c:44:f9:2a:
1e:12:5c:95:e3:3b:73:30:42:e5:dd:70:38:bf:04:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3E:1D:D8:D2:20:01:9B:E4:43:8D:8E:76:6F:67:43:49:6F:DD:C5
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e33362e3232302e302f32322d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:db:01:19:3e:86:cb:52:9b:4b:e3:85:59:c4:8a:b7:b6:c4:
73:05:7c:fd:95:53:33:9b:8a:78:55:cd:31:02:04:73:09:80:
2e:ea:15:51:45:e4:5c:9f:0b:b6:7d:1c:98:a3:e9:8b:59:d0:
fc:ca:0f:fb:94:7b:c8:00:ed:a7:5a:e8:b9:af:a6:26:f5:10:
51:53:28:d0:f5:61:80:c4:ac:4c:34:ed:7c:1d:cc:33:a0:3b:
b7:c4:45:c1:4b:47:11:8f:f1:02:eb:2f:fe:d0:3c:59:ae:4c:
79:f2:85:23:59:b5:0c:45:08:e8:80:aa:f2:4e:80:35:4f:4b:
24:6b:06:5e:57:4d:ca:ed:b7:9a:2d:09:01:a7:d7:97:55:d0:
82:11:bf:e4:8a:e1:8c:a5:a3:5a:bb:77:3d:b6:18:a8:2f:25:
68:34:0d:44:cb:ed:d9:3c:b8:94:b4:d8:9b:b2:37:5a:d3:bc:
01:a7:7a:08:d8:18:bd:12:0f:8e:9c:9f:2d:8e:df:b5:04:97:
91:45:53:ce:ab:d5:dd:9f:9f:17:92:f7:4a:cb:a4:94:00:85:
59:81:a1:79:24:87:6a:12:55:08:d0:78:5e:4e:5f:48:20:ea:
ef:e7:7c:4f:f9:21:03:22:c0:95:cb:98:1a:97:a8:36:75:cf:
7f:ba:c1:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:30 2026 by rpki-client