
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e39362e302f32342d3234203d3e2034383038.roa
File: 3130362e37342e39362e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: 7lH19CeBo10wNJLe3u1NNEVcbi9RXOlb2cGoM7Dj+io=
Subject key identifier: 25:27:1E:E3:D3:15:2C:1C:EF:40:F0:46:DC:53:DC:37:0A:63:78:04
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 0422D05CC99072FB6AFD799F2CE369FD74CC1AF0
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e39362e302f32342d3234203d3e2034383038.roa
Signing time: Fri 15 May 2026 08:58:45 +0000
ROA not before: Fri 15 May 2026 08:53:45 +0000
ROA not after: Fri 14 May 2027 08:58:45 +0000
asID: 4808
IP address blocks: 106.74.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:22:d0:5c:c9:90:72:fb:6a:fd:79:9f:2c:e3:69:fd:74:cc:1a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 08:53:45 2026 GMT
Not After : May 14 08:58:45 2027 GMT
Subject: CN=25271EE3D3152C1CEF40F046DC53DC370A637804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:9b:97:d4:1e:14:16:d8:c6:88:fa:61:56:
a2:8e:67:67:7a:62:0f:0e:5e:d0:ed:25:c0:01:f3:
3b:b8:99:f7:82:48:46:8b:5b:be:15:be:d0:d3:fc:
5d:75:d9:95:94:00:5d:65:86:ec:09:75:15:8b:f1:
f9:3b:6d:fe:06:fd:f4:b7:02:84:e1:19:90:ad:9f:
14:87:d9:69:63:79:bc:4d:63:60:c6:3f:a4:a1:d0:
93:3e:32:7e:fc:d4:8c:5f:5b:92:47:88:51:b9:14:
fe:01:d8:50:06:91:db:39:2c:3f:95:65:34:44:e7:
b3:76:db:a4:b4:62:98:38:26:dd:3d:5d:81:c2:3e:
07:f2:c7:57:ff:ed:e1:e5:6a:cd:4e:6a:83:23:dc:
e1:8f:c0:45:87:1d:96:5c:9d:43:da:47:bc:7f:7e:
9c:1f:1e:9d:32:c9:09:0f:75:b0:b7:ca:69:38:a1:
33:5e:58:f4:e8:05:30:d0:d5:67:19:33:7b:a0:d8:
ea:79:50:5f:2a:8f:46:6a:f7:29:be:9f:21:03:5a:
ee:89:a3:8c:50:1e:9b:80:43:b4:97:1d:78:d0:58:
06:c7:9a:30:fa:21:73:ab:22:7c:00:1c:03:16:fb:
34:12:a3:36:df:a8:69:d7:23:10:39:75:d4:c8:ca:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:1E:E3:D3:15:2C:1C:EF:40:F0:46:DC:53:DC:37:0A:63:78:04
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130362e37342e39362e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.74.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:44:c5:04:1b:97:62:21:2f:fa:4f:77:95:b5:3c:8d:6a:18:
e0:05:07:09:8b:7d:95:22:82:52:09:a9:a5:c5:32:a2:22:c8:
9b:67:d9:30:39:9d:86:01:b1:a8:b5:1c:b0:d3:8b:22:fe:5a:
4d:cf:87:b1:f9:b1:de:16:af:3c:40:c9:fa:7f:88:c6:62:61:
d1:22:21:8c:4f:0f:16:cf:bc:43:6c:99:75:48:43:f6:0f:9a:
ca:37:19:e4:c9:69:a4:97:1c:bd:7e:8a:12:47:3e:ed:70:f8:
9a:2d:04:28:08:ec:d2:e4:aa:58:21:5d:33:a9:bf:a0:97:ed:
cc:2b:6f:d4:03:41:f1:8d:3a:e0:ce:f1:5a:41:d1:df:cb:3e:
0c:bd:cd:64:c4:21:63:00:73:1a:c8:c5:1c:72:20:e2:0c:75:
19:b5:19:e1:38:b4:e1:75:89:07:6c:f4:d3:77:a3:f5:e7:42:
1d:57:5f:d0:2e:4a:04:f3:78:f1:90:2d:53:d9:7e:f4:cc:5e:
26:f4:58:d4:cc:b6:26:0f:55:5f:d3:da:a0:53:3a:27:10:75:
e1:0f:65:88:d4:27:92:7c:10:81:97:dc:0c:a2:85:c5:72:f7:
7f:9a:bb:ef:2f:21:1f:1b:3c:ce:90:1f:06:d2:c2:b6:8e:7e:
57:f3:63:47
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUBCLQXMmQcvtq/XmfLONp/XTMGvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA1MTUwODUzNDVaFw0yNzA1MTQwODU4NDVaMDMxMTAvBgNV
BAMTKDI1MjcxRUUzRDMxNTJDMUNFRjQwRjA0NkRDNTNEQzM3MEE2Mzc4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2JuX1B4UFtjGiPphVqKOZ2d6
Yg8OXtDtJcAB8zu4mfeCSEaLW74VvtDT/F112ZWUAF1lhuwJdRWL8fk7bf4G/fS3
AoThGZCtnxSH2WljebxNY2DGP6Sh0JM+Mn781IxfW5JHiFG5FP4B2FAGkds5LD+V
ZTRE57N226S0Ypg4Jt09XYHCPgfyx1f/7eHlas1OaoMj3OGPwEWHHZZcnUPaR7x/
fpwfHp0yyQkPdbC3ymk4oTNeWPToBTDQ1WcZM3ug2Op5UF8qj0Zq9ym+nyEDWu6J
o4xQHpuAQ7SXHXjQWAbHmjD6IXOrInwAHAMW+zQSozbfqGnXIxA5ddTIypchAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUJSce49MVLBzvQPBG3FPcNwpjeAQwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzEzMDM2MmUzNzM0
MmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABqSmAwDQYJKoZIhvcNAQELBQADggEBAF1ExQQbl2IhL/pPd5W1PI1qGOAFBwmL
fZUiglIJqaXFMqIiyJtn2TA5nYYBsai1HLDTiyL+Wk3Ph7H5sd4WrzxAyfp/iMZi
YdEiIYxPDxbPvENsmXVIQ/YPmso3GeTJaaSXHL1+ihJHPu1w+JotBCgI7NLkqlgh
XTOpv6CX7cwrb9QDQfGNOuDO8VpB0d/LPgy9zWTEIWMAcxrIxRxyIOIMdRm1GeE4
tOF1iQds9NN3o/XnQh1XX9AuSgTzePGQLVPZfvTMXib0WNTMtiYPVV/T2qBTOicQ
deEPZYjUJ5J8EIGX3AyihcVy93+au+8vIR8bPM6QHwbSwraOflfzY0c=
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:21 2026 by rpki-client