
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313331343833.roa
File: 3130332e38352e38342e302f32322d3234203d3e20313331343833.roa (raw, json)
Hash identifier: E/J1F3R5MG7zDozz3Tj19GdCZrQLSsVqj6L5OudoYxw=
Subject key identifier: 51:BA:7E:73:7B:E7:42:9A:98:F8:9D:4E:92:78:43:48:C3:65:FC:AB
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 16BDCDF847023279B63E582B67A45CD189E2723C
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313331343833.roa
Signing time: Mon 20 Apr 2026 05:48:08 +0000
ROA not before: Mon 20 Apr 2026 05:43:08 +0000
ROA not after: Mon 19 Apr 2027 05:48:08 +0000
asID: 131483
IP address blocks: 103.85.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:bd:cd:f8:47:02:32:79:b6:3e:58:2b:67:a4:5c:d1:89:e2:72:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Apr 20 05:43:08 2026 GMT
Not After : Apr 19 05:48:08 2027 GMT
Subject: CN=51BA7E737BE7429A98F89D4E92784348C365FCAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:06:9f:57:65:4d:4e:d4:23:cd:01:2f:2f:
36:bb:04:b3:dc:2b:bb:6b:50:ed:cf:dc:2d:ec:9d:
4d:1a:bc:4f:8e:0c:49:cc:93:2f:2d:db:b3:2e:59:
b3:f1:9a:cf:97:75:bb:3d:af:9e:ff:be:ba:bd:65:
01:c2:81:95:5a:90:32:e8:ef:12:df:e7:b9:d7:07:
4f:df:b7:f1:d9:3f:fe:ef:93:01:d5:59:dd:5f:ff:
6c:f4:a4:84:aa:0f:cd:e2:38:c0:bb:f7:15:80:6a:
a1:32:27:4d:08:65:24:e6:0d:3c:23:ad:f0:87:7a:
26:9c:83:52:31:3d:c7:e3:52:1b:d5:90:58:8c:18:
de:0e:36:47:23:a0:31:f0:e4:6e:10:06:44:c0:df:
0b:77:ff:f2:66:f7:fa:86:49:f0:e9:63:9d:17:25:
90:1d:1c:28:19:92:97:e9:2b:c7:b1:48:01:15:76:
81:75:22:d5:66:d5:a7:d8:9f:d1:a7:a8:b3:8f:68:
0f:4d:34:da:31:22:b2:19:b8:26:f0:72:1c:79:6f:
a3:6d:e2:be:a8:79:04:8d:88:29:2d:68:5d:3a:b8:
50:d7:4a:66:f8:4b:70:87:6b:c5:c8:69:f9:2a:52:
2c:ef:a2:89:01:3d:c0:de:89:a9:e8:ff:1d:e9:e6:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:7E:73:7B:E7:42:9A:98:F8:9D:4E:92:78:43:48:C3:65:FC:AB
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313331343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ee:92:8b:b3:c6:fc:82:a9:23:69:5e:50:78:1c:0a:e9:9b:
1d:12:91:9d:b4:2e:42:8e:4c:88:9f:d2:9c:90:30:63:53:9a:
0c:bb:67:09:88:01:47:ee:31:2a:9d:da:0f:4c:d1:21:31:8f:
34:cf:f0:f6:ae:d3:cf:1a:85:cb:03:20:c0:33:a6:5c:34:89:
27:3d:27:00:53:f5:95:a1:40:02:f2:8b:30:22:50:dd:04:1a:
89:26:7c:94:cd:42:41:40:c9:6e:f8:4c:a3:de:14:f8:a2:4c:
6d:67:af:ca:fe:57:94:45:ad:ad:52:bb:fe:4e:22:bc:99:a3:
89:f1:99:c6:2b:27:2f:4c:ea:cf:e2:cf:dd:a3:a8:4a:2a:36:
a7:e6:53:d4:2b:ee:9c:27:10:86:10:bf:3c:7b:4a:f0:af:b4:
ba:8d:97:3d:03:2e:25:2c:13:d9:63:4f:ed:8a:94:b1:7b:8a:
ef:1d:a0:1d:9d:d4:42:b4:41:dc:1b:84:44:7e:50:28:82:b7:
44:dd:8e:c3:cd:66:40:00:ef:66:fc:86:6a:81:3b:7e:94:55:
e2:d5:73:d6:72:21:ef:11:a5:f2:ba:fb:d4:ef:e5:2b:75:57:
fe:39:55:9b:8d:eb:82:e6:b5:ae:a4:ef:90:cc:84:0b:f1:9a:
b3:b6:94:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:49 2026 by rpki-client