
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233352e302f32342d3234203d3e20313333313138.roa
File: 3130332e3232342e3233352e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier: sekxDKBn4VVk1Likv5qm3GEAP5CL7x/m6nU7YPDLsB4=
Subject key identifier: 1B:00:43:F2:CA:0B:4C:C8:BE:5A:76:EE:33:D7:63:74:87:CD:3F:AE
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 6E7B493CE8B1CD405BEB130C1D1A0FA3B67055DD
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233352e302f32342d3234203d3e20313333313138.roa
Signing time: Fri 15 May 2026 09:40:56 +0000
ROA not before: Fri 15 May 2026 09:35:56 +0000
ROA not after: Fri 14 May 2027 09:40:56 +0000
asID: 133118
IP address blocks: 103.224.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7b:49:3c:e8:b1:cd:40:5b:eb:13:0c:1d:1a:0f:a3:b6:70:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:35:56 2026 GMT
Not After : May 14 09:40:56 2027 GMT
Subject: CN=1B0043F2CA0B4CC8BE5A76EE33D7637487CD3FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:3a:65:aa:38:bf:ef:c9:98:6e:fe:70:4c:
ab:71:84:56:4b:45:b7:ac:2e:46:a8:d9:62:53:45:
d0:ed:78:fd:bf:2a:68:0a:70:33:b0:40:bb:35:e1:
52:8c:a2:d8:5d:1e:f8:27:58:c1:e2:38:35:b9:89:
ab:04:58:e6:30:bf:78:28:eb:84:5f:eb:4d:ac:c2:
8c:58:5b:ca:af:86:75:6c:5b:0e:9a:32:9c:e8:8c:
f2:9b:c8:08:bd:1c:54:a8:95:9d:6c:9e:e3:0a:44:
c3:ad:aa:f2:a1:00:83:8a:a1:d8:7b:de:2f:49:25:
2c:ee:71:ca:ec:e9:6e:bc:ad:5a:10:2b:dd:bf:3e:
b4:01:da:7b:e1:33:1f:a2:8d:7c:8b:ef:88:07:53:
03:6f:4e:c7:47:21:23:26:0b:14:98:9d:7d:32:ff:
18:36:c6:57:02:ff:9a:ba:99:f9:a6:34:c1:07:31:
d8:b2:ee:34:76:58:d4:3f:28:09:a2:39:98:a2:99:
5f:86:77:30:49:42:d5:e2:31:e9:d0:ab:d4:54:0d:
53:cd:b7:60:4b:96:0a:29:9e:f1:0a:e4:9e:50:63:
4b:56:24:80:6b:88:84:eb:6f:96:3a:a2:10:8e:7c:
f2:86:7a:c6:01:1a:5f:a1:46:59:3b:96:6f:68:77:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:00:43:F2:CA:0B:4C:C8:BE:5A:76:EE:33:D7:63:74:87:CD:3F:AE
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233352e302f32342d3234203d3e20313333313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.235.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2c:cc:95:b4:e8:54:4e:fd:cc:4a:3e:36:a2:c0:92:27:95:
27:ba:05:06:c9:19:fa:5b:12:06:d0:ae:19:b4:23:57:03:07:
06:e1:c0:f8:4f:b5:61:27:64:3e:89:56:0a:83:a0:9e:29:e2:
f9:ec:10:93:fd:96:c9:c1:07:49:7d:5d:ca:f7:1f:1c:d2:88:
96:e2:b3:85:ca:71:8e:a5:74:da:49:92:f1:ca:3b:66:bc:e2:
fc:c8:7d:a1:3f:cd:6d:aa:69:37:13:80:e1:5f:ac:42:e9:0b:
40:4b:9a:20:94:73:7a:25:78:ac:b6:1c:3a:fc:12:9a:48:fe:
05:45:f2:48:ca:1b:de:a9:29:9a:70:c0:09:59:b0:81:1e:f5:
f6:08:a4:84:b2:10:f9:a5:0e:60:5d:b3:b4:4d:78:3b:63:74:
04:85:a4:83:46:ad:a0:c4:eb:63:da:58:e1:6f:52:e6:7b:7c:
14:3a:a8:8c:a2:0a:e5:7d:37:fb:38:36:09:28:b8:4c:87:18:
d6:7f:d7:5b:e7:0d:3a:d2:6e:21:21:18:f5:c2:00:bf:d8:f0:
3b:5a:dd:34:83:ac:c3:f0:e2:b5:1b:d7:03:e1:24:c0:fa:27:
94:f9:9c:30:fd:89:0f:a1:15:9f:f3:38:49:6f:96:b9:e6:fa:
4b:f0:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:35 2026 by rpki-client