
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3139362e302f32322d3232203d3e203233363530.roa
File: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=
Subject key identifier: 4D:FC:FE:49:6A:44:EB:13:42:3D:BE:72:A2:D6:EE:45:20:0D:DB:D6
Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Certificate serial: 315DAB6602AD4FF8D454D245B0E2E959E3F18C8A
Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3139362e302f32322d3232203d3e203233363530.roa
Signing time: Tue 19 May 2026 01:25:08 +0000
ROA not before: Tue 19 May 2026 01:20:08 +0000
ROA not after: Tue 18 May 2027 01:25:08 +0000
asID: 23650
IP address blocks: 103.36.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5d:ab:66:02:ad:4f:f8:d4:54:d2:45:b0:e2:e9:59:e3:f1:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Validity
Not Before: May 19 01:20:08 2026 GMT
Not After : May 18 01:25:08 2027 GMT
Subject: CN=4DFCFE496A44EB13423DBE72A2D6EE45200DDBD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:71:c0:e4:57:3e:89:0b:9c:35:ec:9d:fc:
4a:53:11:c4:c0:ce:ed:5b:b2:34:20:f6:cf:a8:68:
95:22:44:7b:30:4b:d9:91:bb:be:ec:56:17:71:df:
5b:9e:31:41:02:d7:42:85:95:88:99:40:f9:b8:5c:
fa:1c:2a:e6:08:d4:ca:26:94:6b:5a:ce:52:f7:3a:
3e:66:2b:80:d8:2f:b5:bf:95:47:69:fd:1f:18:be:
42:14:a6:0b:6b:30:7c:9a:d8:cf:74:b6:03:3e:d5:
98:98:1d:41:81:eb:79:f5:07:4a:38:3a:ee:9a:52:
0b:f7:57:16:1b:69:6e:c7:8c:13:f9:40:58:a6:3c:
8a:9b:7d:73:72:44:95:1e:66:20:2c:4c:7c:39:1b:
b3:f5:22:e0:1a:5c:e7:b9:00:60:c8:15:bc:52:94:
b7:be:02:a1:e1:23:f5:11:05:58:65:d2:04:07:3e:
d9:10:bc:65:15:24:32:9a:7e:7f:aa:ef:e7:a3:2c:
0c:5b:0b:d3:55:40:f0:95:c4:53:1d:06:5a:4d:83:
5a:f4:33:d0:49:ac:7f:7a:61:e7:5f:05:a3:07:12:
f3:5b:a1:1d:0d:2b:a1:1f:41:ac:63:c9:c3:84:9c:
fd:90:3b:d2:f3:dc:75:aa:dd:16:48:32:e4:0a:5a:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:FE:49:6A:44:EB:13:42:3D:BE:72:A2:D6:EE:45:20:0D:DB:D6
X509v3 Authority Key Identifier:
keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3139362e302f32322d3232203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.196.0/22
Signature Algorithm: sha256WithRSAEncryption
62:72:1f:8c:fc:a1:c7:a2:00:86:08:d2:0b:6f:1c:4a:a5:2c:
23:6e:3f:4e:d6:dc:38:34:19:cd:46:7b:c6:05:d8:3a:18:84:
0b:9e:85:8a:36:04:3f:9e:b8:8b:01:5c:21:f2:7f:6b:5b:fc:
0c:ae:11:ea:81:9f:6e:a6:63:f4:11:a3:a0:70:a6:f6:e2:92:
3b:33:ee:5f:fc:b7:75:47:22:e5:1c:74:33:2a:57:a5:91:77:
2d:5a:84:9b:8e:6f:ff:c8:ef:0f:e4:b0:24:16:4c:b1:89:26:
d1:e1:dc:1e:ca:b8:11:4c:53:55:d7:60:86:d5:40:ad:90:bf:
93:d3:b7:fe:86:b9:1e:8c:87:dc:61:bb:fc:7f:d6:94:61:b7:
55:1b:88:46:a4:90:72:a6:86:5c:c6:1a:f2:47:77:aa:ee:14:
08:a1:0c:48:a8:14:08:32:6a:39:64:d0:0e:f5:6c:fd:88:0b:
af:f4:52:5e:00:1f:28:d7:b6:f7:e9:9c:71:e1:45:2f:68:17:
f8:eb:e7:f4:f9:b0:2d:43:50:fc:ca:95:ba:69:28:25:31:67:
30:d0:55:2a:02:7b:40:18:63:18:43:14:0e:13:7b:ef:2c:f7:
13:f9:a4:36:a9:ea:08:2c:c6:bf:35:c7:ac:fd:46:15:b3:43:
0e:a1:99:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:35 2026 by rpki-client