
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36312e302f32342d3234203d3e20313334373731.roa
File: 3130332e33362e36312e302f32342d3234203d3e20313334373731.roa (raw, json)
Hash identifier: z8DY57i9OehDi7ebpZyrdNWzcV2//g4+AFn3Lo5pMJw=
Subject key identifier: 6F:69:D3:84:15:D4:52:77:64:6C:08:EB:5C:F4:A4:96:39:E9:63:81
Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial: 6B0B735800F44AEC6AC6FE35A993B87BF5B1F052
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36312e302f32342d3234203d3e20313334373731.roa
Signing time: Wed 20 May 2026 06:51:21 +0000
ROA not before: Wed 20 May 2026 06:46:21 +0000
ROA not after: Wed 19 May 2027 06:51:21 +0000
asID: 134771
IP address blocks: 103.36.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0b:73:58:00:f4:4a:ec:6a:c6:fe:35:a9:93:b8:7b:f5:b1:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Validity
Not Before: May 20 06:46:21 2026 GMT
Not After : May 19 06:51:21 2027 GMT
Subject: CN=6F69D38415D45277646C08EB5CF4A49639E96381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:d1:c8:e8:02:93:26:17:cb:6a:6d:c4:fd:
c6:43:b4:df:82:c7:cd:ff:da:d3:43:2e:98:1e:f3:
fa:4f:ba:93:1e:28:97:3a:7b:a9:21:1e:b2:79:37:
69:0a:e0:aa:27:8c:40:5c:91:d0:01:85:7b:b4:56:
11:fb:b8:30:08:40:02:0d:8d:9d:36:eb:c9:9e:36:
30:b1:62:8d:04:ee:30:ce:fa:db:1a:f8:b3:3a:df:
59:7d:c2:21:26:ad:a5:09:70:2b:de:47:40:eb:3c:
8b:00:07:05:f3:b8:ce:8d:c4:13:18:64:bd:98:4b:
b1:2c:f1:f5:1f:6d:84:6d:01:26:25:11:ac:ef:21:
d7:d8:a8:a3:2f:fd:aa:3f:31:27:2c:32:9b:89:c2:
2d:ac:8a:c2:3c:25:74:92:0d:8c:de:ab:05:d5:4f:
a3:86:f0:8c:a6:d8:31:11:6e:22:69:cb:26:24:2b:
f4:f7:bf:2a:1a:c1:b6:3b:f6:3d:1a:c6:11:aa:ea:
47:65:8f:8c:2b:83:69:8e:d8:13:4a:bc:00:15:1a:
a8:ba:7c:2c:c4:fb:d0:54:01:6a:4e:7f:ae:69:5b:
76:cf:aa:7a:a3:ab:47:b5:fe:32:ac:b7:67:e8:cb:
bd:12:53:f5:94:f7:8f:df:39:43:f8:0f:c1:00:df:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:D3:84:15:D4:52:77:64:6C:08:EB:5C:F4:A4:96:39:E9:63:81
X509v3 Authority Key Identifier:
keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36312e302f32342d3234203d3e20313334373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:d4:b6:f1:5a:10:c3:d1:f9:50:4d:06:3d:1f:34:47:b7:da:
3f:26:10:d7:a1:f2:c9:9d:5d:49:a5:f7:17:59:7f:7f:9c:bd:
98:b9:3f:75:95:7e:37:11:a9:68:f9:1c:ca:92:2b:f6:c0:ce:
a1:fe:55:e2:34:54:9d:cb:b4:d2:41:45:b0:12:cf:34:2a:e9:
ca:3e:bf:69:3e:2a:a2:7b:7b:9d:7f:7c:77:1e:c3:5d:96:73:
cc:84:7c:08:0d:bc:c7:e2:d4:4e:a0:5e:24:e1:be:a5:19:73:
78:8c:1a:62:56:04:b6:91:d7:8f:80:72:12:47:a1:7e:31:e8:
8d:39:d4:c2:23:52:fb:a4:31:dc:89:0b:b4:60:69:be:17:6d:
b1:da:b2:f8:85:1a:23:84:b9:17:52:77:b3:35:fe:5d:a8:7e:
70:b0:85:be:4f:e5:42:ee:9e:f0:b9:39:96:9d:b3:88:33:ff:
49:25:1c:66:a0:0a:42:2a:ff:06:87:2d:d0:28:a6:f5:8e:43:
7c:f4:78:77:c3:b0:51:f0:0f:d8:a8:31:94:c2:cb:bc:5c:2f:
ed:a4:35:61:e1:ab:b5:07:34:0b:fd:49:27:7f:83:4e:f3:9c:
c4:21:9d:07:b4:4f:8a:da:10:1a:d5:1c:3d:3b:09:60:7d:56:
69:8b:75:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:52:42 2026 by rpki-client