
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34372e302f32342d3234203d3e2034383337.roa
File: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=
Subject key identifier: 1D:E1:AF:2A:9B:24:75:BF:03:D5:EE:47:13:2F:B0:52:C9:C8:78:4F
Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
Certificate serial: 2D294DD94D479DC9BE705E352793F6CF5D03934A
Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34372e302f32342d3234203d3e2034383337.roa
Signing time: Sat 30 May 2026 01:57:38 +0000
ROA not before: Sat 30 May 2026 01:52:38 +0000
ROA not after: Sat 29 May 2027 01:57:38 +0000
asID: 4837
IP address blocks: 103.98.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:29:4d:d9:4d:47:9d:c9:be:70:5e:35:27:93:f6:cf:5d:03:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
Validity
Not Before: May 30 01:52:38 2026 GMT
Not After : May 29 01:57:38 2027 GMT
Subject: CN=1DE1AF2A9B2475BF03D5EE47132FB052C9C8784F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:44:21:60:b8:bb:be:7c:12:3f:7b:68:b1:
e7:b2:48:1c:1e:0c:46:1a:53:7d:94:69:1f:26:47:
7e:84:58:af:29:1b:dd:9b:6a:ac:1b:c0:b9:11:11:
15:2e:6f:fc:28:b6:6a:cb:d7:72:d9:8f:9e:54:c2:
4b:57:df:21:1a:8d:12:0f:48:e6:98:90:25:87:22:
fb:64:3d:26:16:a5:1d:49:58:65:a3:cd:db:6f:3e:
16:cb:5f:0e:0c:68:08:17:be:8f:19:f5:7b:ee:69:
af:5f:32:5c:3b:22:83:91:90:59:9c:71:3d:49:bb:
2d:17:20:20:98:d1:08:c0:2d:d9:77:5b:94:27:89:
06:5d:19:79:f6:04:fc:0f:c1:e1:b5:ee:21:75:09:
77:5e:d2:1c:b0:0e:b2:cf:53:88:07:72:1e:c7:35:
a5:19:e7:94:15:5d:45:a9:68:b6:00:65:fa:71:0e:
9c:6d:d0:36:40:33:e8:cb:84:eb:aa:cc:27:11:8a:
c7:74:89:b4:11:21:43:ab:fd:75:4b:08:6d:f4:44:
81:a6:1c:a1:eb:db:cd:f8:d5:33:e3:a8:1b:bb:a3:
fd:81:fb:de:e7:f8:21:36:42:c7:18:b3:39:82:d0:
61:be:e2:92:e9:74:6b:6e:85:12:c0:60:c6:fe:54:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:AF:2A:9B:24:75:BF:03:D5:EE:47:13:2F:B0:52:C9:C8:78:4F
X509v3 Authority Key Identifier:
keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34372e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.47.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8d:b4:0d:db:0e:76:05:d4:6f:53:67:1a:d4:a3:d1:9d:f3:
10:47:e7:30:3a:6a:91:7c:28:13:df:17:a8:49:4d:02:ed:41:
dd:50:64:da:aa:c9:18:b7:f9:48:a0:1b:fe:58:0d:1a:c5:c4:
d0:e8:dc:70:9a:1d:f1:46:94:ab:a0:46:b1:7b:c0:e9:42:dc:
f9:1e:ac:e0:17:00:78:b3:3e:e1:a1:29:1a:68:c5:27:30:57:
15:b5:83:a8:8f:e6:d1:88:f2:19:e2:35:c8:36:e5:fa:4c:2c:
ea:50:32:dd:b9:3c:00:73:34:87:a9:b9:aa:65:d4:2c:ff:fd:
8f:33:41:f9:8e:2b:4d:eb:60:04:29:7e:76:7f:e2:2f:4b:a5:
2f:5b:8a:b6:8c:33:3d:d3:30:ec:9e:e3:63:69:a8:cd:e2:af:
e9:01:30:bb:44:bc:48:f3:96:c4:04:96:ea:9a:f1:92:bb:b6:
9a:da:92:5f:2c:5b:d7:fe:a4:bb:72:3a:4f:90:a6:c9:1c:36:
fb:1c:95:f8:63:d3:a0:ee:a1:22:68:61:05:25:3e:f6:f8:fe:
39:b7:2c:e0:7e:6a:62:2e:62:25:a7:b2:e8:57:07:65:4c:9e:
a8:47:e8:d6:45:d2:ee:b5:4e:58:c1:7d:d0:96:ff:fb:0e:42:
8f:15:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client