
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e33322e302f32342d3234203d3e20313333313138.roa
File: 3130362e37342e33322e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier: YtCOc4+jzqEVpODeLiy4+aoUvfK1voT0f7BH02ALLP8=
Subject key identifier: A8:EA:C1:1B:F1:E8:20:3C:58:31:C5:05:B9:3C:E9:28:3F:C2:16:45
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 0D6D5E37A8B770AD948F8DC0DFA83B70FEF59EC6
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e33322e302f32342d3234203d3e20313333313138.roa
Signing time: Fri 15 May 2026 09:20:46 +0000
ROA not before: Fri 15 May 2026 09:15:46 +0000
ROA not after: Fri 14 May 2027 09:20:46 +0000
asID: 133118
IP address blocks: 106.74.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6d:5e:37:a8:b7:70:ad:94:8f:8d:c0:df:a8:3b:70:fe:f5:9e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:15:46 2026 GMT
Not After : May 14 09:20:46 2027 GMT
Subject: CN=A8EAC11BF1E8203C5831C505B93CE9283FC21645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:36:b4:45:9b:92:d5:c1:0c:f4:74:bd:4c:
d9:d9:f8:e1:58:f1:db:0e:fb:52:22:9d:ad:39:0e:
18:f4:3c:cc:88:10:54:18:cd:77:70:d6:81:b2:41:
ed:30:0b:bd:16:e2:54:a6:b3:53:09:83:9b:a4:01:
db:24:6b:00:18:0b:31:c4:a6:78:c7:77:47:ab:ba:
15:1f:39:1a:e4:34:80:b1:4f:53:fd:18:ff:16:b3:
04:e4:69:ce:62:8e:80:41:2c:24:10:66:7c:53:15:
98:1d:7b:36:e3:da:e8:a2:f7:5d:5c:93:40:9e:b1:
c4:ef:3d:61:07:ff:7e:37:fe:be:7e:e9:09:3f:a2:
6e:7e:a0:b9:a3:ee:59:85:44:ae:25:1e:68:1a:3c:
40:ea:4f:6c:03:47:e0:1a:14:44:7b:ad:8a:d9:7f:
ac:f7:e6:d6:7b:3b:6e:cb:8c:47:ac:97:a3:00:80:
3f:e5:a5:5b:8b:28:9a:d8:bb:a0:16:87:c6:b4:49:
c8:2f:cf:8d:b7:53:6e:4c:f8:6a:ba:ba:9e:28:b6:
29:c3:d8:ad:5d:67:ea:58:9f:69:59:4b:54:f4:4c:
08:55:6a:0e:88:bb:c8:c4:72:5e:29:1f:a1:52:90:
02:77:d4:02:85:ee:87:94:d6:aa:23:f1:80:86:27:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EA:C1:1B:F1:E8:20:3C:58:31:C5:05:B9:3C:E9:28:3F:C2:16:45
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e33322e302f32342d3234203d3e20313333313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.74.32.0/24
Signature Algorithm: sha256WithRSAEncryption
81:64:b3:3f:cd:f4:1a:5a:4e:1f:a9:58:22:3f:88:b7:c6:44:
74:dc:81:4d:43:71:18:a8:1a:8a:5d:da:19:4e:6e:e4:70:45:
03:56:db:4f:69:ff:68:35:2a:85:8b:e9:20:c1:c6:39:de:6f:
4b:94:f8:7d:7d:f1:bd:0b:09:eb:75:ad:f5:53:06:28:ef:e7:
39:32:36:b4:e5:f7:9d:5a:f9:78:3d:a1:8d:67:14:45:27:d3:
c2:70:bf:39:16:a2:ca:71:49:6b:7f:14:82:4c:59:10:6f:48:
5b:f7:a9:a4:fb:97:43:ec:85:9e:50:71:30:03:1f:76:9a:17:
8a:e3:b9:bc:22:f1:88:5c:ec:a6:85:9e:52:07:b8:dd:b3:8f:
e8:49:15:3e:8d:8b:41:c3:b4:20:e7:8a:23:6d:e1:ce:53:0a:
19:d3:db:52:e2:44:a2:14:09:92:55:0f:7f:ef:03:d7:97:7a:
ff:dc:cb:28:14:23:eb:b6:72:0d:c0:70:6c:90:03:bc:52:05:
88:50:e7:0e:3c:4b:2e:2c:6a:2f:33:a6:53:2f:ba:e4:9c:35:
4d:02:1c:08:1c:6d:e3:55:06:f9:e5:f2:4c:80:8f:48:8b:2d:
a9:5b:ae:2b:a2:72:77:57:42:7f:2a:b6:52:7f:9b:33:bc:f7:
09:5a:23:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:48 2026 by rpki-client