
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa
File: 3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier: 9hhMonjplFYAmoymYCwh0ofY0dNHCdZ96X9bsd6bt8k=
Subject key identifier: DA:51:70:98:45:3E:87:A4:5D:2D:92:0F:EA:04:14:D7:FB:C8:56:01
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 7A8A99BCF361435F2F194C07B8B442B7E74D69D6
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa
Signing time: Fri 15 May 2026 09:40:18 +0000
ROA not before: Fri 15 May 2026 09:35:18 +0000
ROA not after: Fri 14 May 2027 09:40:18 +0000
asID: 133118
IP address blocks: 103.224.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8a:99:bc:f3:61:43:5f:2f:19:4c:07:b8:b4:42:b7:e7:4d:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:35:18 2026 GMT
Not After : May 14 09:40:18 2027 GMT
Subject: CN=DA517098453E87A45D2D920FEA0414D7FBC85601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:70:fe:18:96:aa:b0:b6:fb:0f:5c:22:0c:
5f:4d:4d:fa:b1:3d:fc:29:de:0a:a3:89:0c:3f:a4:
41:41:9d:a4:3c:39:47:05:bc:04:eb:22:36:10:b5:
af:d6:6f:a0:b3:15:62:e3:e8:04:00:90:62:75:d5:
1e:e3:5d:5b:60:6d:58:76:15:2e:da:27:35:4a:ec:
be:73:a3:1e:c3:49:ff:c7:02:a2:d4:96:ff:39:ff:
71:d4:5e:1b:5e:db:eb:46:f3:ee:0f:92:a4:34:e2:
ec:f9:e8:ab:5a:67:c5:09:80:0f:19:4f:4e:81:eb:
c7:90:e9:bd:b1:5b:cc:5f:98:31:a0:ad:aa:d4:df:
29:d7:8e:29:2f:a6:a1:b4:2b:92:20:a5:1c:f7:3d:
3b:73:d0:98:a3:70:d2:a7:44:4e:cd:3b:d8:2e:4d:
ba:29:e3:c8:0d:a8:56:26:37:a4:91:86:fb:65:2b:
5c:01:49:89:fc:bb:dd:85:c5:51:a4:87:5d:32:f5:
4b:49:d7:bf:cc:4a:ea:3b:0b:9c:47:ff:f6:67:d7:
a0:c3:31:90:f7:a9:d5:95:fa:a4:7f:e6:a0:26:33:
ad:56:bb:2e:be:5a:f3:9d:cc:25:ff:99:1a:1e:17:
ae:68:e7:03:df:6c:28:af:53:d7:12:fe:f4:ff:bc:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:51:70:98:45:3E:87:A4:5D:2D:92:0F:EA:04:14:D7:FB:C8:56:01
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.232.0/24
Signature Algorithm: sha256WithRSAEncryption
92:82:2d:3b:9f:ab:12:ca:77:8e:14:21:e0:b1:52:48:e6:74:
f7:a1:e4:04:6d:09:a4:13:f0:18:07:0a:79:66:f9:60:79:3a:
8e:62:48:69:17:33:77:db:15:70:51:4b:7f:31:7f:30:33:fd:
28:21:73:e2:5e:f1:b3:fb:bc:6e:8e:2f:01:30:e6:81:36:64:
70:c2:1d:a5:4e:ed:50:97:ca:0a:09:0d:a9:55:c3:05:b0:15:
38:30:3f:03:58:61:af:21:d2:39:82:bc:96:d4:6e:72:71:6b:
a3:81:18:94:67:c3:ed:72:0b:8b:33:f3:51:ed:0b:78:c6:d6:
f1:15:a5:a8:64:e9:87:e8:fa:c7:18:d1:33:a9:f2:7a:d1:81:
80:8d:da:b5:0c:60:a7:ee:8a:87:4e:ab:ce:f9:0c:bf:4a:e1:
22:84:dd:16:f8:e4:89:46:e6:dc:63:9f:9e:f5:c3:91:8a:9a:
f0:80:1a:f1:e8:04:df:34:8a:59:a8:3c:90:c0:2d:24:6d:57:
a4:2e:92:7f:9a:e0:e4:1a:cb:ae:4e:93:9b:fd:b0:19:b5:cf:
4d:cf:df:cf:3d:d6:7e:e8:ce:47:a8:52:2e:ec:ae:25:f1:e4:
9b:86:0a:d4:b5:2f:7d:1e:30:93:86:32:73:cb:c3:d5:44:0a:
2e:9a:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:30 2026 by rpki-client