
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35362e302f32322d3232203d3e2034383337.roa
File: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=
Subject key identifier: A7:10:51:EA:A8:BE:CD:DE:55:5B:7B:8F:36:F8:DD:81:1F:CC:01:DA
Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial: 6845422DD5EECD189A171A3CFCF87C494A2C7B14
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35362e302f32322d3232203d3e2034383337.roa
Signing time: Wed 20 May 2026 03:10:39 +0000
ROA not before: Wed 20 May 2026 03:05:39 +0000
ROA not after: Wed 19 May 2027 03:10:39 +0000
asID: 4837
IP address blocks: 103.234.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 20:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:45:42:2d:d5:ee:cd:18:9a:17:1a:3c:fc:f8:7c:49:4a:2c:7b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Validity
Not Before: May 20 03:05:39 2026 GMT
Not After : May 19 03:10:39 2027 GMT
Subject: CN=A71051EAA8BECDDE555B7B8F36F8DD811FCC01DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:eb:b8:58:3e:d6:3b:f0:9b:7c:74:62:3c:
6d:ff:4d:65:ae:07:1b:3a:ef:7b:65:95:76:76:8e:
77:31:42:ce:5b:b9:46:72:3b:73:2c:0d:72:ee:64:
8b:0e:b8:26:3e:de:77:02:b4:c0:72:16:10:d1:fd:
d2:2e:f1:ba:86:cb:7d:ba:21:4b:b7:b8:04:ce:14:
6d:03:76:17:1b:8b:1a:ce:36:35:b7:4f:36:0f:77:
c7:84:c2:a7:eb:89:db:9b:5a:69:9c:f8:38:22:90:
63:3e:e2:76:66:e2:ab:e2:38:12:31:c1:a1:d1:d9:
42:52:7a:53:52:3c:18:fd:06:49:06:8f:ca:14:ec:
d6:32:da:8e:d4:5c:ba:9f:69:f5:83:e1:5d:e5:ba:
e8:24:0d:d6:d6:78:57:0c:d2:ea:13:ef:c1:5f:02:
05:c9:fd:ce:2b:0d:4d:67:53:17:e6:db:99:b4:0c:
07:c5:89:8e:6e:ca:1a:ce:cc:32:ea:5c:62:91:43:
f3:23:6e:b3:b3:a7:fb:1d:20:94:46:38:d7:c0:f8:
5b:ec:87:95:74:d7:8d:5e:69:cb:80:5e:bc:2f:8f:
c7:f1:65:6e:e1:44:b2:6f:d7:8a:de:d7:46:64:9b:
f9:7f:51:92:de:32:2a:ed:41:af:57:95:08:c0:c9:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:51:EA:A8:BE:CD:DE:55:5B:7B:8F:36:F8:DD:81:1F:CC:01:DA
X509v3 Authority Key Identifier:
keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35362e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:64:58:61:6e:a9:ce:85:84:3f:4d:fb:66:38:0f:8d:9c:97:
ee:6e:29:03:ab:0e:5d:8a:7e:95:6b:09:d3:93:23:9d:88:97:
d3:a4:7c:de:60:aa:54:1a:79:16:73:2c:63:30:9a:e1:5d:8a:
ab:74:82:f5:41:28:3a:d6:44:07:53:b8:6e:9a:8c:fc:16:40:
1a:1e:5a:32:43:de:34:cb:8b:1e:08:01:86:14:67:a3:6b:89:
06:50:c7:06:ae:7f:74:ef:94:46:10:8d:cd:ae:68:16:88:47:
22:55:ca:d0:d7:7c:c1:c5:5a:37:dd:ba:23:ec:43:31:df:03:
b3:ca:5a:33:98:3d:a9:0b:7b:fa:cf:1a:6c:db:1c:5a:04:c3:
b3:78:af:30:81:b6:ce:63:e9:ff:56:af:d6:45:80:22:95:8a:
2b:60:ef:42:dd:43:6f:15:85:80:bb:b8:f2:5f:c4:85:90:51:
27:cc:88:cb:c0:92:ec:66:1a:a6:14:27:b1:24:2b:fa:ab:b6:
d7:0f:f6:b3:8c:7c:83:4f:a5:ac:f7:e0:25:ee:d1:af:7f:21:
c7:64:04:95:49:8a:e3:4e:b8:62:f8:e1:8f:9b:ec:49:d0:d6:
f2:f7:78:b0:1c:10:42:53:a8:3d:26:84:02:5e:8e:3b:f5:fa:
67:d9:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:30 2026 by rpki-client