
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa
File: 3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: uF3ukH+EASxan4sMRFpJ7wIzbqOkS0FupIgeX9PfEzc=
Subject key identifier: FE:8F:1E:CD:B9:19:4D:6F:8A:E1:C5:23:05:28:43:77:16:65:96:CE
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 3A2551544F84DB022209339066AE370E742BA5EE
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa
Signing time: Sun 23 Aug 2026 14:59:56 +0000
ROA not before: Sun 23 Aug 2026 14:54:56 +0000
ROA not after: Sun 22 Aug 2027 14:59:56 +0000
asID: 4811
IP address blocks: 103.192.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 10:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:25:51:54:4f:84:db:02:22:09:33:90:66:ae:37:0e:74:2b:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Aug 23 14:54:56 2026 GMT
Not After : Aug 22 14:59:56 2027 GMT
Subject: CN=FE8F1ECDB9194D6F8AE1C52305284377166596CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5d:ce:13:c3:78:a4:03:29:2d:3c:b7:14:e3:
ee:39:33:9b:ee:b3:bf:d4:ff:54:8e:fb:4f:7f:5b:
ef:68:0d:71:33:09:c6:b2:20:be:18:06:c6:1f:ba:
5f:23:a1:fd:30:17:fa:32:97:d7:a0:25:34:68:1a:
83:c0:f2:38:6a:3f:bd:79:f5:5b:3d:23:48:de:dd:
a2:66:47:fd:5b:98:f9:35:2c:50:32:a0:88:d4:40:
7f:86:48:b5:ad:53:98:1b:af:ef:4d:f9:45:9f:f3:
5c:de:e1:85:48:0b:5c:eb:74:2e:e0:76:64:98:92:
65:67:35:d8:14:54:15:39:82:d8:40:5b:f0:e6:c4:
ef:a4:f9:ca:21:0b:cc:ba:71:5e:a5:f2:2e:8a:03:
54:7c:96:9c:bc:a1:91:ee:23:d0:28:03:3e:f9:d0:
c6:80:94:a9:e2:aa:ef:fe:bf:64:b3:f6:66:a0:c4:
3f:dc:f1:6d:03:fa:66:c4:7a:0d:db:af:e6:84:83:
62:69:13:34:87:4d:73:49:04:57:22:f9:36:bb:d9:
4f:bc:19:20:3b:4b:2e:7a:bd:10:06:28:0b:81:5d:
59:15:d3:12:74:d0:ca:04:f9:58:49:0e:07:8d:eb:
66:7d:04:e6:58:8d:78:ff:1b:24:ae:c6:69:79:ea:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:1E:CD:B9:19:4D:6F:8A:E1:C5:23:05:28:43:77:16:65:96:CE
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.192.252.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:34:14:0a:97:7c:03:7d:bf:1d:e3:18:22:f1:49:2d:a9:32:
6c:b0:f0:6d:cf:e6:ff:a3:5d:32:67:ec:f2:14:e4:46:38:77:
c0:34:6c:d1:ea:a3:5c:e3:fe:d9:d6:40:f6:b8:37:1b:29:13:
fe:f8:be:3a:40:9b:5c:ae:da:dd:2e:d6:55:da:62:72:09:c0:
ff:da:f1:4f:8a:2a:57:d1:d7:cf:da:38:4a:fa:50:17:da:41:
4c:c3:21:70:fa:d2:54:03:3b:29:de:2f:55:d2:2b:53:1d:75:
f8:f3:f8:0b:ad:db:97:cb:ce:3f:4c:c4:6d:fc:dd:cd:d6:30:
80:60:91:46:a3:68:72:36:48:a3:7b:77:19:ee:6b:e7:51:0d:
bc:1e:3a:1c:9a:a4:2a:a3:e3:57:c9:8b:79:ad:08:0d:19:7f:
9b:ca:36:6f:f4:82:16:b7:c2:a7:34:05:25:55:0f:59:83:1e:
45:7a:4d:cc:a3:94:64:2f:e2:83:e9:8f:f3:94:50:d5:20:62:
1b:26:f8:14:d8:af:c6:e1:24:45:53:6a:50:76:66:cd:44:4c:
f0:4d:4f:f7:f7:ca:1f:58:5b:f5:49:51:76:e4:f9:9c:ab:48:
2e:86:e0:1e:01:16:41:21:27:f5:de:bb:e9:c0:d3:5e:c4:3e:
3b:95:4f:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client