
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32352e302f32342d3234203d3e20313333313138.roa
File: 3130362e37342e32352e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier: oG07JCNq1GzDOr0l8qMdsF8wIb252X1fEt3O78vxlH0=
Subject key identifier: 6F:2B:88:EE:4C:40:5D:13:8C:BC:F5:91:C3:31:71:F8:4D:0F:67:D6
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 05198F3BD61415CC4EABAA072F643304E26E3E86
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32352e302f32342d3234203d3e20313333313138.roa
Signing time: Fri 15 May 2026 09:20:05 +0000
ROA not before: Fri 15 May 2026 09:15:05 +0000
ROA not after: Fri 14 May 2027 09:20:05 +0000
asID: 133118
IP address blocks: 106.74.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:19:8f:3b:d6:14:15:cc:4e:ab:aa:07:2f:64:33:04:e2:6e:3e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:15:05 2026 GMT
Not After : May 14 09:20:05 2027 GMT
Subject: CN=6F2B88EE4C405D138CBCF591C33171F84D0F67D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:3f:a2:c2:68:18:9a:0c:96:ae:3f:60:85:
7a:7b:7e:c8:78:b5:c6:fb:d2:9a:95:dd:f9:e7:6f:
2b:fc:80:af:f7:1d:a6:0c:e8:2e:d5:2f:15:d8:14:
34:56:81:19:d8:e2:a7:92:ba:f7:de:70:6a:d2:a2:
ca:b6:7b:b5:67:87:b1:e1:5f:c6:5a:b6:d1:2c:04:
b4:c9:b8:7c:77:a1:80:2b:c4:22:67:38:4e:e3:52:
54:7f:cf:1e:ae:96:b9:a2:66:43:76:dc:35:33:c3:
9a:60:16:60:1e:f7:90:d1:a1:4c:32:99:81:8a:1f:
cb:ae:1f:c0:66:a9:7b:42:1e:e9:ff:53:f3:b0:61:
ad:7f:32:74:2d:3d:b9:11:73:82:6b:df:52:78:94:
1c:2c:6f:d1:7b:0f:74:1a:19:15:7d:6b:b3:14:c2:
3c:85:5a:42:06:43:bc:0a:bd:3f:b1:5b:31:c6:35:
79:70:8c:53:1d:b0:a3:f3:e5:d7:bb:8a:62:3b:7a:
b9:8b:0c:2f:b8:dc:61:74:1f:e0:a1:c2:96:ab:fe:
89:6a:86:65:33:cf:32:db:f4:79:77:62:38:21:db:
a1:72:f3:65:63:61:0f:67:fa:79:77:52:8b:a9:ae:
a8:61:8f:13:9f:2d:13:b4:ef:c9:8a:1f:86:a2:08:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2B:88:EE:4C:40:5D:13:8C:BC:F5:91:C3:31:71:F8:4D:0F:67:D6
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e32352e302f32342d3234203d3e20313333313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.74.25.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b6:7b:15:86:7f:84:a7:43:91:da:51:3a:bf:20:2b:6c:9e:
ef:cb:e9:80:00:2c:3e:d5:a9:93:bb:5b:4d:89:dc:e6:8d:e6:
73:e3:b0:41:cb:5b:5d:07:dd:82:f7:dc:ce:94:c6:79:46:be:
a7:3c:2e:92:72:21:8c:de:0c:78:ee:c1:1a:ea:39:26:e3:fa:
49:d6:01:7c:b8:5f:43:ed:2c:ff:ce:88:57:f0:45:ae:aa:d2:
07:67:f2:bf:37:26:a2:b2:0d:10:32:2a:8f:d7:e8:38:97:63:
c2:10:7d:39:62:a5:3a:8b:45:2a:b9:12:42:e3:89:ef:df:d9:
e9:b8:7c:bb:32:49:9f:ee:83:40:91:82:26:c5:a5:ae:7a:c4:
1b:28:21:69:bb:d5:77:e2:b3:ad:27:21:46:f8:8b:68:01:69:
62:5c:fb:73:72:c1:b5:10:69:e0:64:e6:3b:b7:63:d3:91:ac:
d5:ca:bf:76:e9:1d:aa:ff:ef:83:7e:01:40:40:e4:73:85:9b:
ed:74:47:35:bd:e2:bf:8b:91:25:9b:ae:76:1b:f1:9b:4a:8b:
65:22:3a:20:3d:40:cb:06:5d:af:4d:4f:0f:46:cd:44:aa:cd:
eb:bd:ca:ee:df:89:25:c4:56:9b:e3:87:33:60:09:40:cb:d9:
50:8e:8e:6b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUBRmPO9YUFcxOq6oHL2QzBOJuPoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA1MTUwOTE1MDVaFw0yNzA1MTQwOTIwMDVaMDMxMTAvBgNV
BAMTKDZGMkI4OEVFNEM0MDVEMTM4Q0JDRjU5MUMzMzE3MUY4NEQwRjY3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDawj+iwmgYmgyWrj9ghXp7fsh4
tcb70pqV3fnnbyv8gK/3HaYM6C7VLxXYFDRWgRnY4qeSuvfecGrSosq2e7Vnh7Hh
X8ZattEsBLTJuHx3oYArxCJnOE7jUlR/zx6ulrmiZkN23DUzw5pgFmAe95DRoUwy
mYGKH8uuH8BmqXtCHun/U/OwYa1/MnQtPbkRc4Jr31J4lBwsb9F7D3QaGRV9a7MU
wjyFWkIGQ7wKvT+xWzHGNXlwjFMdsKPz5de7imI7ermLDC+43GF0H+Chwpar/olq
hmUzzzLb9Hl3Yjgh26Fy82VjYQ9n+nl3UouprqhhjxOfLRO078mKH4aiCBtXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUbyuI7kxAXROMvPWRwzFx+E0PZ9YwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjcwODc0OTUwNDAyMDQ4Mi8wLzMxMzAzNjJlMzcz
NDJlMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGpKGTANBgkqhkiG9w0BAQsFAAOCAQEAM7Z7FYZ/hKdDkdpROr8gK2ye
78vpgAAsPtWpk7tbTYnc5o3mc+OwQctbXQfdgvfczpTGeUa+pzwuknIhjN4MeO7B
Guo5JuP6SdYBfLhfQ+0s/86IV/BFrqrSB2fyvzcmorINEDIqj9foOJdjwhB9OWKl
OotFKrkSQuOJ79/Z6bh8uzJJn+6DQJGCJsWlrnrEGyghabvVd+KzrSchRviLaAFp
Ylz7c3LBtRBp4GTmO7dj05Gs1cq/dukdqv/vg34BQEDkc4Wb7XRHNb3iv4uRJZuu
dhvxm0qLZSI6ID1AywZdr01PD0bNRKrN673K7t+JJcRWm+OHM2AJQMvZUI6Oaw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:56:34 2026 by rpki-client