
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39332e302f32342d3234203d3e203536303430.roa
File: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=
Subject key identifier: 3A:59:AB:E0:47:D6:B0:51:41:67:48:12:77:C5:0B:8D:18:60:7D:07
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 5C20140CAD9485780430604FB4AFFCABE7F759AE
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39332e302f32342d3234203d3e203536303430.roa
Signing time: Fri 10 Apr 2026 02:24:00 +0000
ROA not before: Fri 10 Apr 2026 02:19:00 +0000
ROA not after: Fri 09 Apr 2027 02:24:00 +0000
asID: 56040
IP address blocks: 103.219.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:20:14:0c:ad:94:85:78:04:30:60:4f:b4:af:fc:ab:e7:f7:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Apr 10 02:19:00 2026 GMT
Not After : Apr 9 02:24:00 2027 GMT
Subject: CN=3A59ABE047D6B0514167481277C50B8D18607D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:d4:74:be:f1:0c:1d:36:12:7a:f2:e9:22:
d6:0c:eb:b8:54:c4:53:b9:fb:6a:37:cb:e7:24:84:
a8:f1:a2:2c:dd:0d:33:66:5b:d3:07:6b:23:7c:f0:
28:3b:3d:d6:a3:28:73:fc:ba:2b:f3:5c:60:9c:2e:
78:2b:a7:4e:44:06:de:80:e9:78:fd:4b:cf:36:8c:
a4:fd:b5:5a:f2:74:f7:11:38:76:99:e2:5b:0e:fb:
a4:c1:66:85:61:7f:e7:a3:2e:64:0f:41:8b:0a:25:
18:8d:02:21:1c:68:45:05:68:2e:9e:0e:25:ac:f2:
50:78:0d:0f:bd:e7:17:db:e0:e4:22:36:46:e2:04:
cb:19:28:51:1f:d2:86:38:9c:7f:74:9f:c4:77:f7:
ce:24:53:7e:f4:0e:39:2d:66:97:41:06:59:d3:d8:
6f:9e:81:1b:5f:d4:65:9f:ba:63:e9:f3:d6:f9:dd:
5f:05:c6:c0:95:d3:5e:b2:c6:0c:e6:d4:f4:f2:08:
6e:d8:3b:9f:ee:07:be:3b:cd:d5:39:d6:fa:4b:ca:
da:01:95:49:ea:4d:57:92:61:07:c5:e5:5b:c3:3b:
c0:a9:9d:9d:72:9f:ef:74:7d:da:ee:5b:c9:02:83:
5b:24:c4:9d:03:2d:64:87:f2:86:95:c2:42:f2:c6:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:AB:E0:47:D6:B0:51:41:67:48:12:77:C5:0B:8D:18:60:7D:07
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39332e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ec:84:5a:e8:d0:c4:84:4f:d9:ae:7c:06:b9:47:25:fe:fa:
d6:96:e7:55:4f:1f:67:1e:79:7e:8d:30:09:6a:df:2d:28:1e:
f6:55:bb:f8:1f:2f:94:0d:3e:17:2b:af:67:c5:9e:66:5a:fb:
93:ba:fc:d0:d0:c6:77:20:9d:7a:a4:57:e2:ca:2a:36:17:48:
a5:e0:03:08:08:25:06:16:3e:15:95:8a:ec:50:90:51:ea:9d:
d8:df:f2:d1:5f:06:a6:a6:c8:55:2a:16:03:66:d2:a5:23:89:
ab:cc:dc:15:13:1b:d4:a4:76:b7:b9:df:5d:be:e2:5e:76:4f:
a9:85:8a:6d:2b:8e:6c:0f:61:55:40:26:a4:2d:26:bc:c5:8c:
be:d8:1f:74:cb:bb:63:7b:72:9a:b3:eb:7b:84:fc:48:fd:00:
11:f3:77:7c:d1:1d:1f:94:03:91:1b:a5:4e:37:39:d1:dd:48:
46:fa:05:af:a3:61:b2:59:7c:b9:48:90:c7:da:28:f8:61:df:
d9:0f:c0:e6:27:61:bb:d2:99:ce:cf:34:79:6a:de:b3:ab:62:
bb:80:36:25:b5:ef:45:ef:d0:10:63:3a:24:67:be:fd:ef:24:
72:41:bb:33:1f:04:b7:6f:d1:8c:54:e7:c4:73:1e:23:f2:41:
cf:6f:85:39
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUXCAUDK2UhXgEMGBPtK/8q+f3Wa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0
NDU4RkJFRjAeFw0yNjA0MTAwMjE5MDBaFw0yNzA0MDkwMjI0MDBaMDMxMTAvBgNV
BAMTKDNBNTlBQkUwNDdENkIwNTE0MTY3NDgxMjc3QzUwQjhEMTg2MDdEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OdR0vvEMHTYSevLpItYM67hU
xFO5+2o3y+ckhKjxoizdDTNmW9MHayN88Cg7PdajKHP8uivzXGCcLngrp05EBt6A
6Xj9S882jKT9tVrydPcROHaZ4lsO+6TBZoVhf+ejLmQPQYsKJRiNAiEcaEUFaC6e
DiWs8lB4DQ+95xfb4OQiNkbiBMsZKFEf0oY4nH90n8R3984kU370DjktZpdBBlnT
2G+egRtf1GWfumPp89b53V8FxsCV016yxgzm1PTyCG7YO5/uB747zdU51vpLytoB
lUnqTVeSYQfF5VvDO8CpnZ1yn+90fdruW8kCg1skxJ0DLWSH8oaVwkLyxsuTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUOlmr4EfWsFFBZ0gSd8ULjRhgfQcwHwYDVR0j
BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE
NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDgwODQwOTQ0Nzg1ODE3OS8wLzMxMzAzMzJlMzIz
MTM5MmUzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGfbXTANBgkqhkiG9w0BAQsFAAOCAQEAtuyEWujQxIRP2a58BrlHJf76
1pbnVU8fZx55fo0wCWrfLSge9lW7+B8vlA0+FyuvZ8WeZlr7k7r80NDGdyCdeqRX
4soqNhdIpeADCAglBhY+FZWK7FCQUeqd2N/y0V8GpqbIVSoWA2bSpSOJq8zcFRMb
1KR2t7nfXb7iXnZPqYWKbSuObA9hVUAmpC0mvMWMvtgfdMu7Y3tymrPre4T8SP0A
EfN3fNEdH5QDkRulTjc50d1IRvoFr6Nhsll8uUiQx9oo+GHf2Q/A5idhu9KZzs80
eWres6tiu4A2JbXvRe/QEGM6JGe+/e8kckG7Mx8Et2/RjFTnxHMeI/JBz2+FOQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:27 2026 by rpki-client