
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa
File: 3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa (raw, json)
Hash identifier: xNgJ3gV9o1r6D3ANw23YPUw2L/9/jc69Llz4ccRKPUY=
Subject key identifier: A6:C7:0D:56:02:12:C1:1A:95:A2:DE:C8:5E:AA:70:FA:D7:1D:23:86
Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial: 3939450B7275F5610D324BCCD18E990B89E544AD
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa
Signing time: Wed 20 May 2026 06:51:21 +0000
ROA not before: Wed 20 May 2026 06:46:21 +0000
ROA not after: Wed 19 May 2027 06:51:21 +0000
asID: 134771
IP address blocks: 103.36.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:39:45:0b:72:75:f5:61:0d:32:4b:cc:d1:8e:99:0b:89:e5:44:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Validity
Not Before: May 20 06:46:21 2026 GMT
Not After : May 19 06:51:21 2027 GMT
Subject: CN=A6C70D560212C11A95A2DEC85EAA70FAD71D2386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:08:d2:d5:52:a1:7a:c5:6b:86:b7:77:a3:
bc:42:ad:6f:48:b1:f0:28:b1:05:89:f9:f2:37:6a:
f8:f7:c4:4e:0e:46:47:54:79:cd:85:f3:d0:ba:6c:
49:96:7c:1e:05:b6:fc:22:dc:cd:91:c9:13:fa:a4:
ab:fa:c4:50:f1:f3:45:9e:b8:9a:fa:b8:44:24:8c:
85:6b:95:0d:66:5b:9e:5d:50:1e:73:e7:11:d0:f8:
24:b4:79:ca:9d:b2:3a:d2:ff:78:3b:a0:f6:70:59:
12:0d:9e:e5:8c:ca:c6:1d:84:a4:e3:2d:d4:a7:83:
7d:ba:30:4e:48:fc:81:9c:f2:c0:b7:a8:f0:4d:3d:
b3:32:2d:cd:e0:d1:88:3e:d9:59:3a:43:a2:b0:1f:
92:6b:1c:21:f4:d7:18:2f:ae:29:24:62:62:ea:da:
dc:c6:8a:c8:fd:f9:ce:38:6d:86:fe:15:d3:c1:1e:
4e:ff:7d:55:ed:15:fb:69:48:f6:a4:43:8f:67:1e:
e7:ba:e4:40:f2:a9:e1:f3:86:1c:db:88:7a:ba:e0:
56:72:24:88:c8:4a:46:6d:ee:d6:59:7f:ee:87:c3:
83:4f:ae:04:23:b6:38:be:28:e6:63:49:3c:cb:80:
ee:20:96:57:14:20:3d:4f:b0:f2:cf:5d:4c:8b:8b:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:0D:56:02:12:C1:1A:95:A2:DE:C8:5E:AA:70:FA:D7:1D:23:86
X509v3 Authority Key Identifier:
keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.164.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:dd:02:f8:32:6a:ef:e7:2a:a0:3d:7c:42:e9:78:77:a0:6c:
5b:ae:58:30:7d:d0:45:23:6b:d0:72:0c:a7:aa:af:a1:6f:53:
1b:d1:29:88:e5:3c:f2:68:40:d8:17:4c:eb:b1:71:4f:83:98:
05:e9:60:60:71:69:c1:fa:e6:18:23:12:93:11:50:3f:cb:69:
38:69:68:12:59:fd:84:f4:29:fa:51:77:ad:8e:51:4e:48:54:
f8:da:bd:54:c8:95:b3:19:6f:4e:1c:b4:d4:f8:40:2e:d6:45:
c8:c7:1b:60:4e:ba:a4:39:39:dc:8e:1a:a7:cf:4c:57:90:0a:
b4:36:c1:02:5d:17:f7:4a:10:95:fb:a0:92:eb:93:62:75:83:
10:70:63:fc:33:58:71:64:e0:9f:46:9a:42:00:76:e5:72:a9:
bf:07:d8:8b:42:09:a0:5f:0a:c6:48:44:1f:a8:22:30:92:9d:
d8:ae:56:64:55:16:3f:e2:37:d9:02:e7:f4:ad:cc:1f:47:f5:
20:c3:79:f6:de:e7:7e:02:77:52:a8:c4:a1:25:71:52:f7:5f:
c0:8b:5f:bd:44:0a:a5:54:a6:e1:20:24:2c:c5:b0:57:f8:fc:
16:8d:78:83:a5:0d:ad:e5:76:e9:6b:d2:06:7c:f1:7e:01:14:
cc:48:38:d7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUOTlFC3J19WENMkvM0Y6ZC4nlRK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5
MTcxQzc5NjAeFw0yNjA1MjAwNjQ2MjFaFw0yNzA1MTkwNjUxMjFaMDMxMTAvBgNV
BAMTKEE2QzcwRDU2MDIxMkMxMUE5NUEyREVDODVFQUE3MEZBRDcxRDIzODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8gjS1VKhesVrhrd3o7xCrW9I
sfAosQWJ+fI3avj3xE4ORkdUec2F89C6bEmWfB4Ftvwi3M2RyRP6pKv6xFDx80We
uJr6uEQkjIVrlQ1mW55dUB5z5xHQ+CS0ecqdsjrS/3g7oPZwWRINnuWMysYdhKTj
LdSng326ME5I/IGc8sC3qPBNPbMyLc3g0Yg+2Vk6Q6KwH5JrHCH01xgvrikkYmLq
2tzGisj9+c44bYb+FdPBHk7/fVXtFftpSPakQ49nHue65EDyqeHzhhzbiHq64FZy
JIjISkZt7tZZf+6Hw4NPrgQjtji+KOZjSTzLgO4gllcUID1PsPLPXUyLizG1AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUpscNVgISwRqVot7IXqpw+tcdI4YwHwYDVR0j
BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC
QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY2ODY3MzA4MjU3NjA3NzEvMC8zMTMwMzMyZTMz
MzYyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzczMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGckpDANBgkqhkiG9w0BAQsFAAOCAQEA090C+DJq7+cqoD18Qul4
d6BsW65YMH3QRSNr0HIMp6qvoW9TG9EpiOU88mhA2BdM67FxT4OYBelgYHFpwfrm
GCMSkxFQP8tpOGloEln9hPQp+lF3rY5RTkhU+Nq9VMiVsxlvThy01PhALtZFyMcb
YE66pDk53I4ap89MV5AKtDbBAl0X90oQlfugkuuTYnWDEHBj/DNYcWTgn0aaQgB2
5XKpvwfYi0IJoF8KxkhEH6giMJKd2K5WZFUWP+I32QLn9K3MH0f1IMN59t7nfgJ3
UqjEoSVxUvdfwItfvUQKpVSm4SAkLMWwV/j8Fo14g6UNreV26WvSBnzxfgEUzEg4
1w==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:31 2026 by rpki-client