
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34332e3138342e302f32332d3233203d3e2034383038.roa
File: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=
Subject key identifier: 77:EE:79:25:20:5D:B2:2B:AF:6E:0A:18:70:17:01:3E:D8:DA:F8:92
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 5456A53FDC659207CF05BE3A40DE9E7A3DBC2674
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34332e3138342e302f32332d3233203d3e2034383038.roa
Signing time: Tue 26 May 2026 09:24:00 +0000
ROA not before: Tue 26 May 2026 09:19:00 +0000
ROA not after: Tue 25 May 2027 09:24:00 +0000
asID: 4808
IP address blocks: 103.43.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:56:a5:3f:dc:65:92:07:cf:05:be:3a:40:de:9e:7a:3d:bc:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: May 26 09:19:00 2026 GMT
Not After : May 25 09:24:00 2027 GMT
Subject: CN=77EE7925205DB22BAF6E0A187017013ED8DAF892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0d:b9:e2:a8:f3:cc:a8:81:0f:3f:9b:be:c7:
89:f2:e6:b6:0e:0a:f5:57:16:8b:ff:35:97:ca:95:
b4:f8:41:22:05:bd:44:57:9c:d0:f7:c8:22:53:51:
95:28:89:3d:8b:88:13:ea:b5:53:a4:8f:e6:c3:b4:
f6:12:cb:c8:4e:ba:95:d5:de:de:6d:c4:2a:c7:4e:
8b:39:b3:53:c5:cb:d6:70:99:1f:39:93:09:fe:cd:
3f:04:af:ad:70:da:fc:7b:f2:5d:33:92:c9:cb:5e:
e1:f3:86:c4:b5:50:e2:38:52:49:d6:8b:cb:76:00:
14:c8:f7:5a:11:79:cb:f3:d3:b6:88:7a:4f:64:34:
fc:80:66:ec:50:20:33:a6:f9:ca:16:75:fc:db:4a:
49:d1:06:6a:df:34:fa:97:fb:5a:13:a1:80:a6:68:
70:b9:e9:42:14:7b:70:08:a8:4e:77:c2:6c:61:02:
84:eb:89:fb:75:38:92:8b:24:e5:74:00:d2:fe:3f:
b7:bf:b5:6e:a0:83:6d:61:79:23:e2:4d:69:f7:53:
24:4a:bc:c2:4e:02:f4:6a:bb:1c:08:75:10:9a:24:
ad:45:ec:d0:5b:ff:b3:45:f1:98:1a:91:62:51:3a:
ed:4b:4a:b8:e9:6d:4d:52:be:43:49:15:b7:7d:65:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:79:25:20:5D:B2:2B:AF:6E:0A:18:70:17:01:3E:D8:DA:F8:92
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34332e3138342e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:61:39:97:a7:69:ec:8f:51:0f:85:e0:a8:d9:83:3d:1d:10:
2b:01:ee:db:4c:0a:5a:0f:71:32:01:f6:d4:53:9d:89:f2:4c:
a2:35:29:7d:b6:cb:2d:4b:61:96:c4:43:e4:99:f5:7c:13:34:
df:a4:99:65:14:0d:18:41:c0:10:e0:c7:ec:95:18:2a:b6:a2:
dc:81:9c:9f:2b:a9:96:be:80:54:61:e0:d1:1a:88:50:1f:53:
31:82:f2:8c:d5:ac:08:37:19:78:e6:f1:34:30:d0:32:1a:6d:
7e:8d:93:92:c3:2b:67:8d:8b:54:75:c4:39:22:34:64:e8:d9:
ce:8e:6a:e9:d9:13:9e:29:02:99:37:a3:f2:75:3a:5b:f1:02:
5a:52:66:45:41:27:25:9a:01:97:6e:84:b0:cb:f4:06:4a:53:
2f:9b:c1:f9:29:ec:77:16:70:e3:73:f2:91:06:af:7d:0b:11:
4d:cc:9d:e9:07:ad:62:a7:62:30:7d:d8:05:a8:6b:22:f9:1f:
bc:2d:79:61:31:b4:02:28:02:a2:b1:59:dc:4b:cc:a0:a3:27:
8e:39:c7:93:d0:e9:43:72:07:29:fe:41:ae:99:76:1f:ea:3d:
7e:4d:03:f9:75:3b:38:e3:0c:e7:2c:80:b8:93:68:95:6d:90:
97:53:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:39 2026 by rpki-client