
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136362e302f32332d3233203d3e20313334373731.roa
File: 3130332e33362e3136362e302f32332d3233203d3e20313334373731.roa (raw, json)
Hash identifier: VB+bWR5w/uyJ4IKJSDuYz6dafBC8liBhxJoNohyMPGs=
Subject key identifier: 01:46:78:70:C5:EF:33:79:CF:45:2F:D9:8C:F8:27:59:CF:25:DA:4C
Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial: 1F237CFC38A558F253AF1EE6EDF44266EF8392C8
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136362e302f32332d3233203d3e20313334373731.roa
Signing time: Wed 20 May 2026 06:50:16 +0000
ROA not before: Wed 20 May 2026 06:45:16 +0000
ROA not after: Wed 19 May 2027 06:50:16 +0000
asID: 134771
IP address blocks: 103.36.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:23:7c:fc:38:a5:58:f2:53:af:1e:e6:ed:f4:42:66:ef:83:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Validity
Not Before: May 20 06:45:16 2026 GMT
Not After : May 19 06:50:16 2027 GMT
Subject: CN=01467870C5EF3379CF452FD98CF82759CF25DA4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e1:8d:17:bf:63:54:75:57:fb:2c:2d:24:3f:
0d:eb:12:3a:1d:64:47:3e:55:51:b5:6d:e3:35:b8:
e6:81:2f:3f:97:91:1c:c4:22:e8:16:75:ce:57:c8:
6d:81:86:a8:4b:d6:91:6c:ab:67:77:f4:c7:af:bb:
aa:72:66:6e:35:bb:34:03:2b:7f:8b:16:8d:d9:ed:
bd:6a:e2:f4:c2:25:f5:98:96:11:93:40:7a:00:c0:
42:62:81:cd:13:79:5f:ea:7b:a8:bb:85:e2:4b:77:
8a:fe:d5:6a:bd:9b:69:33:f5:73:7f:84:68:43:e9:
0b:42:04:5b:99:e2:52:ef:fa:a0:95:ab:78:72:d0:
18:25:39:3d:bf:3d:6a:0c:48:3a:e6:02:c8:de:37:
eb:1e:c5:40:e7:42:92:d3:74:e2:3d:bc:91:9c:37:
b5:c4:a4:12:b4:61:52:ea:aa:c7:6f:41:1a:c2:a1:
3a:e2:11:8d:6c:f0:26:7e:59:33:8e:e6:6d:d5:a8:
ac:70:62:48:c3:ce:01:bf:51:7c:b1:ca:ab:8e:d0:
23:fa:9d:ce:7f:43:ec:c5:5c:29:a8:01:6f:fe:c2:
a1:ff:18:73:a1:49:71:27:fd:44:ea:6a:30:e8:9c:
a1:b6:27:24:06:ed:96:cd:40:50:ab:3a:43:0c:e1:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:78:70:C5:EF:33:79:CF:45:2F:D9:8C:F8:27:59:CF:25:DA:4C
X509v3 Authority Key Identifier:
keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136362e302f32332d3233203d3e20313334373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.166.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:55:9d:91:5a:71:df:7f:6c:41:ee:cf:31:f6:4a:91:de:a7:
fb:c9:bf:cb:95:02:29:b6:90:a0:54:e0:03:35:9e:86:de:5e:
7b:7b:27:db:15:a2:1c:68:d0:e6:b7:a7:7a:97:3d:63:5f:d6:
57:91:9e:da:84:06:e6:7f:39:c9:25:3a:2e:55:d8:33:dc:37:
cc:0c:ee:22:f0:a0:fb:62:78:11:71:7d:61:c5:31:eb:82:63:
ab:e1:c1:86:bb:d5:ca:7e:c0:41:58:34:de:3d:df:c4:82:ee:
9a:88:d5:2c:ff:a9:f8:8a:a6:c7:2b:fa:0a:7d:89:4f:67:0c:
fc:5f:d5:74:3a:2e:2f:17:42:5a:41:63:2b:05:ca:a1:ea:69:
92:f9:e4:1f:41:0a:03:2e:67:24:b7:44:eb:ec:8b:7c:c1:c2:
9a:37:a4:c1:d4:c0:7f:c2:22:30:af:6a:13:09:a6:22:fe:6a:
4e:23:84:65:22:25:30:e7:52:f0:e8:68:62:67:21:bc:09:eb:
83:27:58:21:47:1f:02:ec:a5:0a:a5:81:90:e1:bc:fe:4e:5a:
51:db:e5:a5:80:11:52:70:eb:c3:46:90:65:a7:c5:66:4a:92:
fb:10:7f:c7:24:df:1b:7c:aa:e7:e7:49:1c:04:4f:ec:14:f7:
9c:82:33:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:52:43 2026 by rpki-client