
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233332e302f32342d3234203d3e20313333313138.roa
File: 3130332e3232342e3233332e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier: AL9b9L3XwUFBOZLAsqYBJDiuO9P1/2+Z68+FBtvRu7M=
Subject key identifier: 2E:36:42:C3:71:45:BF:03:2B:D1:C8:34:2E:55:99:A3:96:12:E4:7D
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 1EA877277294BC19BAF0E1459277C1A8A557E4
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233332e302f32342d3234203d3e20313333313138.roa
Signing time: Fri 15 May 2026 09:40:33 +0000
ROA not before: Fri 15 May 2026 09:35:33 +0000
ROA not after: Fri 14 May 2027 09:40:33 +0000
asID: 133118
IP address blocks: 103.224.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a8:77:27:72:94:bc:19:ba:f0:e1:45:92:77:c1:a8:a5:57:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:35:33 2026 GMT
Not After : May 14 09:40:33 2027 GMT
Subject: CN=2E3642C37145BF032BD1C8342E5599A39612E47D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:5b:6b:8f:f4:c9:e1:2c:84:7b:d3:8e:a0:
cf:f0:32:c5:04:e3:1d:b7:bc:fd:75:ae:34:dd:3a:
04:28:7e:90:0d:71:ce:29:20:79:b0:34:bf:d4:88:
cd:61:bd:e3:f8:dd:53:73:b1:cc:de:6d:b6:97:bd:
ff:f5:aa:87:bb:35:3f:06:d7:9d:72:d9:c2:30:93:
14:0b:b3:ae:f6:65:2f:a8:e7:ba:3f:cb:a7:a1:52:
39:49:cd:bd:96:56:9b:56:29:e1:da:37:eb:ab:d6:
f9:ec:41:fe:c3:c5:31:23:a3:a2:52:d0:89:f2:15:
4f:98:92:69:b6:28:75:2a:e3:95:c2:41:7a:a5:c0:
b5:f5:d4:f3:4e:81:1b:b7:e4:cf:fe:bb:47:4e:c3:
9a:2f:d0:0f:14:e0:58:3e:ec:5b:ec:5a:e0:b3:fa:
ab:c3:25:91:7a:12:cc:66:17:32:b5:67:71:04:cb:
7f:59:58:9c:a8:31:d7:09:53:c5:c9:5f:31:7a:02:
7c:ec:68:8b:72:0f:d8:c5:15:5e:a8:f2:b7:c7:90:
69:59:2a:ae:5f:27:6d:13:34:53:55:3d:ce:1c:bc:
8a:89:c7:cb:fe:3a:c0:63:5f:4a:c1:ad:42:b3:7d:
48:11:47:4f:d8:47:5c:3e:6d:5a:95:3a:41:1c:6a:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:42:C3:71:45:BF:03:2B:D1:C8:34:2E:55:99:A3:96:12:E4:7D
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233332e302f32342d3234203d3e20313333313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.233.0/24
Signature Algorithm: sha256WithRSAEncryption
14:0f:e7:69:3d:a0:0c:39:2c:90:69:69:31:47:79:b0:55:bb:
35:fe:5e:5f:dd:18:f1:cb:4d:da:c3:8a:ab:7a:e5:75:9c:5f:
7b:cc:32:90:09:e2:48:8a:50:87:4e:3f:ba:dd:9d:9a:68:27:
62:e6:82:34:78:75:48:1e:6f:49:ac:59:8b:fc:a2:ff:92:c8:
07:7c:f4:19:d3:65:9a:cf:32:95:3d:4f:56:99:30:4c:42:fe:
4c:04:74:e0:52:ba:f4:4e:45:3c:37:df:f8:aa:7c:a0:52:37:
56:17:bd:ab:6d:6b:f0:f8:92:c8:80:cf:bc:f2:61:b3:16:25:
09:28:de:02:b9:82:ad:1c:36:00:cd:98:e5:b8:3b:39:8c:e5:
28:3a:0f:a7:e5:75:8f:7f:66:49:2c:54:16:a3:33:6a:75:4a:
29:87:18:0e:27:af:08:29:e6:5d:c7:80:7f:16:98:ae:85:0a:
99:90:47:cb:a1:c1:40:62:e8:a9:3b:f3:69:13:ec:53:3e:c6:
da:36:dd:bb:3f:d2:ae:16:06:d6:2f:da:e4:42:00:9d:82:cb:
02:37:bc:87:cb:a7:9f:96:d3:81:4f:f7:25:15:9f:97:54:f6:
0c:8c:82:70:f3:71:49:c3:31:60:99:36:ac:17:79:e4:d9:be:
8d:1b:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:34 2026 by rpki-client