
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38362e302f32332d3233203d3e20313334373731.roa
File: 3130332e33382e38362e302f32332d3233203d3e20313334373731.roa (raw, json)
Hash identifier: mu/l8yjhPKatjhlzFVofGC+jYz2MEHU+ZBSSSLma3us=
Subject key identifier: 06:E3:38:F3:7B:3E:C4:17:2A:41:5B:C1:9A:15:A2:4E:14:95:80:89
Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial: 76F84DB4729B4B4F1AF155E3E00B57F1E4F17E1D
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38362e302f32332d3233203d3e20313334373731.roa
Signing time: Wed 20 May 2026 06:49:13 +0000
ROA not before: Wed 20 May 2026 06:44:13 +0000
ROA not after: Wed 19 May 2027 06:49:13 +0000
asID: 134771
IP address blocks: 103.38.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f8:4d:b4:72:9b:4b:4f:1a:f1:55:e3:e0:0b:57:f1:e4:f1:7e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Validity
Not Before: May 20 06:44:13 2026 GMT
Not After : May 19 06:49:13 2027 GMT
Subject: CN=06E338F37B3EC4172A415BC19A15A24E14958089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:db:ad:fa:ac:c3:4b:6b:ee:ed:e1:da:7d:
c9:f8:08:be:67:f9:4c:56:75:29:a3:c0:60:dd:d1:
4d:c6:7e:bb:61:74:d3:53:8d:7d:cd:8c:29:63:61:
57:82:44:b8:c2:dc:0a:d4:16:4b:34:34:d3:1b:c9:
e8:d6:45:49:1d:3f:0a:71:05:46:64:6a:cf:0a:3e:
e1:ee:57:60:96:05:0d:8a:86:a9:8a:f0:3d:a6:a9:
41:41:89:b5:83:fe:c9:1d:9b:19:3b:f8:20:22:84:
b1:15:69:f1:99:3b:ca:a3:b0:34:28:a2:3d:30:b4:
2b:7b:c2:e1:c2:5f:41:bd:81:40:b9:9a:84:2e:e5:
7b:01:a9:70:0a:b7:ae:ec:3e:83:3b:b0:ea:ad:33:
60:ee:81:30:98:f8:4a:31:b0:e5:c7:1e:b3:61:91:
6d:3c:c8:86:02:68:22:63:f2:49:a7:d7:fa:ae:32:
63:c5:fc:91:ce:39:fc:6c:b4:a8:11:4c:1a:f9:bd:
5d:11:fb:d6:ca:7f:29:6a:b8:ba:5c:a5:b4:e8:4d:
d2:c2:b2:e2:1d:e1:45:09:a4:ca:2c:ad:c5:95:ce:
28:f5:ef:53:09:00:3e:a7:08:f0:f3:2b:50:a6:d2:
b0:fd:d3:3d:70:ba:d3:b4:a3:f9:c4:c3:e9:cf:df:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E3:38:F3:7B:3E:C4:17:2A:41:5B:C1:9A:15:A2:4E:14:95:80:89
X509v3 Authority Key Identifier:
keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38362e302f32332d3233203d3e20313334373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.86.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:a0:5e:a7:5a:cc:d5:2e:3b:18:bc:5f:d6:ab:91:62:12:a9:
81:0f:e1:f8:df:f7:28:7e:f1:01:7e:60:46:c2:3e:78:6e:0c:
5f:32:14:33:ba:cc:d9:e8:e2:89:98:e4:bf:38:9c:66:01:94:
6d:2b:d6:92:0f:3c:34:48:c2:5d:c6:63:ec:2c:2e:32:8b:d3:
f7:d8:eb:a8:75:cb:90:2c:ef:f2:5d:c7:51:90:47:d7:76:ea:
76:f6:92:b5:5f:56:0c:76:8d:c3:42:2c:09:34:5e:3b:bf:7c:
46:59:5c:dd:e9:1a:22:de:90:ff:f6:d1:a5:e2:c8:86:04:59:
f4:fd:1c:2a:2e:f2:2f:14:ff:5a:d2:f2:8e:a4:57:77:43:7f:
f8:c9:6b:38:05:d0:a2:00:6e:8c:ab:b2:89:77:8f:85:99:5c:
44:4f:df:ef:a5:43:60:4a:b2:29:07:0a:f5:6e:30:c9:88:0a:
4d:c6:4d:67:0f:3f:71:65:ca:dc:23:84:0a:8c:bf:e3:4a:2b:
73:c0:06:0f:d0:89:94:3c:65:89:4c:8e:21:98:1a:8d:0a:0a:
1f:ba:46:36:81:43:05:8b:ee:b6:e2:55:a9:9a:b8:aa:5b:9b:
8a:1e:cc:da:47:ad:6f:dc:56:ea:2b:5c:8d:51:ad:ad:bf:f0:
00:19:63:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:34 2026 by rpki-client