
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34332e3138362e302f32332d3233203d3e2034383038.roa
File: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=
Subject key identifier: 75:D3:2D:50:D3:CD:E5:A9:42:54:A3:56:29:93:96:DE:6C:1B:3C:6E
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 592ECC79B662399373078E960A712B91EC01AA00
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34332e3138362e302f32332d3233203d3e2034383038.roa
Signing time: Tue 26 May 2026 09:24:00 +0000
ROA not before: Tue 26 May 2026 09:19:00 +0000
ROA not after: Tue 25 May 2027 09:24:00 +0000
asID: 4808
IP address blocks: 103.43.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2e:cc:79:b6:62:39:93:73:07:8e:96:0a:71:2b:91:ec:01:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: May 26 09:19:00 2026 GMT
Not After : May 25 09:24:00 2027 GMT
Subject: CN=75D32D50D3CDE5A94254A356299396DE6C1B3C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:19:83:37:81:d9:c5:c0:cb:35:82:1c:71:
22:42:55:f1:06:18:ee:e3:1f:69:8f:0d:25:db:64:
2b:6a:44:b8:4a:9d:0f:61:bf:6f:aa:82:57:9f:34:
0e:b3:66:b3:5a:d9:ac:67:2f:09:0a:2d:5c:9b:2c:
7f:ef:86:10:16:59:8c:15:67:17:aa:16:33:94:45:
52:5c:64:02:92:a0:f9:71:8a:50:a2:ec:70:1f:01:
bd:2d:77:e7:9e:cc:61:bd:cf:30:70:35:53:d3:f7:
bc:ea:ad:46:7a:b6:9f:16:ef:e0:9d:ba:c3:6a:e2:
1a:e5:54:dc:5c:39:1f:51:54:09:4d:9c:b0:da:fa:
73:a7:c9:71:fa:bf:b8:fd:bd:9b:44:c1:b0:20:1b:
76:4b:80:2f:27:a4:22:68:fa:7e:b1:2d:c1:47:16:
91:47:34:2c:bc:48:77:2f:8e:a0:4e:9b:24:60:4f:
f0:15:e5:ac:cd:e9:4a:60:1a:0a:4b:02:44:6d:f9:
b8:a3:ee:6b:e9:6a:e7:4d:fa:7d:46:61:ba:c2:e4:
97:6e:f9:96:a9:7f:e5:dc:a6:f9:9c:75:a0:f6:a4:
41:a2:01:a8:f5:b9:63:a5:77:16:14:da:48:a5:55:
c8:26:72:de:b7:79:27:cc:c1:84:0b:6b:90:f3:5a:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:2D:50:D3:CD:E5:A9:42:54:A3:56:29:93:96:DE:6C:1B:3C:6E
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34332e3138362e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.186.0/23
Signature Algorithm: sha256WithRSAEncryption
27:1f:b3:ab:aa:53:bb:1f:35:1c:38:d1:11:77:6d:1b:d4:43:
cd:1c:f0:c8:16:62:0a:a6:0c:c6:62:02:98:e8:1f:70:79:78:
1b:c9:59:80:a2:cd:83:8a:de:da:49:b4:14:21:33:27:46:93:
08:27:93:47:99:f9:6d:e7:e5:99:a4:66:17:cf:73:66:df:79:
06:19:1b:3d:49:75:df:51:ad:61:83:e7:d4:55:5f:ff:a4:c8:
3d:ac:6b:8d:45:d7:10:0c:39:6a:e0:00:29:8a:44:62:34:79:
5a:10:3b:7a:d0:55:5d:b8:d2:34:dd:0e:7d:b5:1d:05:b0:13:
a5:0b:de:ea:8a:49:05:2f:ca:72:b9:9b:a2:b3:da:23:8a:96:
76:8c:13:4c:ab:4e:9f:cd:bd:53:1c:97:aa:12:bd:25:3f:b8:
d2:90:39:e8:26:10:67:1e:35:62:e6:eb:6f:bf:e6:72:8e:40:
52:e9:2d:39:23:31:95:37:07:4e:af:bd:b5:c5:bb:bc:ee:ab:
3b:a1:d2:f5:4e:75:f7:74:96:d9:3e:ae:f1:14:6e:6d:f6:bc:
79:ab:bb:79:aa:b8:74:e2:58:3a:0f:ad:aa:98:73:7b:eb:d7:
c4:76:4d:9c:32:6e:10:dd:f8:d9:70:15:63:37:6f:90:56:f0:
b1:cf:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:35 2026 by rpki-client