
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa
File: 3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa (raw, json)
Hash identifier: Md4+IrPlN/VFjDo9GOcLPihi6j6Vf2NSeSyN1+Jh1x8=
Subject key identifier: 6F:94:9A:80:66:3F:85:D8:3A:55:C4:20:A7:A1:CE:6D:28:82:D3:43
Certificate issuer: /CN=64CE724CC33744853B20D6E7922A2F808B8C300C
Certificate serial: 13EB7B8F0FAB4E90668735BCE0A0228C2817E624
Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa
Signing time: Fri 19 Jun 2026 19:03:39 +0000
ROA not before: Fri 19 Jun 2026 18:58:39 +0000
ROA not after: Fri 18 Jun 2027 19:03:39 +0000
asID: 55982
IP address blocks: 103.245.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl
rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:eb:7b:8f:0f:ab:4e:90:66:87:35:bc:e0:a0:22:8c:28:17:e6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C
Validity
Not Before: Jun 19 18:58:39 2026 GMT
Not After : Jun 18 19:03:39 2027 GMT
Subject: CN=6F949A80663F85D83A55C420A7A1CE6D2882D343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:f4:44:28:fc:66:89:4f:5a:a8:72:51:cb:
9e:c5:5f:d1:a7:36:86:42:6e:6e:d8:ef:fd:c4:47:
19:81:46:b1:b2:29:c5:ba:15:20:31:45:6a:ee:42:
11:82:32:2a:90:62:9e:da:96:6f:f3:4a:cf:ab:44:
8a:08:14:57:26:4c:59:c7:02:28:8e:00:1e:26:1f:
8b:0b:c1:b2:9e:8e:d2:a1:76:44:c8:0f:0b:d5:78:
4b:9c:70:d2:5c:da:cf:e7:7c:bd:a8:59:14:83:a3:
7c:2f:7e:59:69:f1:5b:5a:f8:44:b3:cc:2c:ee:f2:
ce:34:78:f3:64:05:df:97:dc:0c:93:51:5d:eb:a3:
b1:23:38:a3:fc:d5:42:e0:4a:0f:e5:80:0e:2a:b4:
84:88:66:8e:c3:17:05:08:1c:a5:39:11:89:87:ae:
5a:05:6e:01:fc:5f:23:cd:85:aa:6e:6e:a6:82:0f:
76:a3:a9:5f:fe:a6:0b:19:b0:d6:60:fb:5d:90:79:
32:4f:0c:e8:fc:3f:1d:96:52:dc:ff:7a:83:cc:b4:
55:65:51:cc:62:30:b2:3a:c5:56:e9:27:9e:5b:f0:
fb:d0:20:02:d1:e1:a3:56:39:55:8b:a0:af:de:3e:
45:1c:91:e9:1b:34:c9:88:10:db:88:e7:c1:4b:b2:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:94:9A:80:66:3F:85:D8:3A:55:C4:20:A7:A1:CE:6D:28:82:D3:43
X509v3 Authority Key Identifier:
keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.128.0/22
Signature Algorithm: sha256WithRSAEncryption
75:f4:a9:43:2d:2c:3f:82:13:fa:5d:34:da:73:f0:89:49:73:
d7:ab:44:39:a8:3c:d4:40:47:eb:be:94:09:b9:c1:2f:44:a3:
df:fb:51:81:ab:81:fc:61:97:38:4a:2c:8d:fb:7d:d0:a4:f1:
fe:1e:84:05:64:be:9d:55:e5:15:8c:c5:41:99:a3:cb:66:06:
98:bc:bd:27:fa:0e:44:b3:df:d4:33:93:c6:60:7c:d9:3c:47:
1c:8b:f4:29:b2:a1:2e:e3:9b:af:06:09:8a:1a:37:96:0d:8b:
e8:c9:d0:67:62:7b:6b:51:4a:ba:4c:68:b3:e2:f3:1e:cc:3c:
a6:f8:7e:20:11:a4:6e:d2:b7:e8:05:4f:c4:d1:b4:4d:f0:42:
1b:9d:fb:9b:8c:38:83:83:ca:2c:22:97:4d:0f:87:3e:6f:31:
83:c3:d2:ca:7e:76:e1:bb:5b:53:68:3e:9d:25:ea:fe:c9:4d:
1a:c9:5d:a5:0a:01:c7:80:f9:09:a5:e8:45:46:ce:bc:52:4a:
ba:0a:73:a8:57:69:81:fb:d0:41:3c:54:db:df:a1:c2:8d:78:
39:2b:51:a5:d3:27:0e:50:f3:ea:67:60:e8:53:43:9e:bc:f6:
45:15:c0:1a:65:45:ca:fa:71:23:ed:82:0f:e7:d9:ba:dc:e6:
f0:b9:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:50 2026 by rpki-client