
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313533393131.roa
File: 3130332e38352e38342e302f32322d3234203d3e20313533393131.roa (raw, json)
Hash identifier: n3fpWzbLZD3ba+vQtKPRUj72mJTpOCcRue1OOUAjygY=
Subject key identifier: 17:73:7A:DC:B9:37:3F:F5:F8:95:F4:48:33:99:DE:6C:CA:B9:11:7D
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 2AB547EFEFCC99A3CCF2C5EAF0869AFD2C82F4F6
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313533393131.roa
Signing time: Mon 20 Apr 2026 05:48:08 +0000
ROA not before: Mon 20 Apr 2026 05:43:08 +0000
ROA not after: Mon 19 Apr 2027 05:48:08 +0000
asID: 153911
IP address blocks: 103.85.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b5:47:ef:ef:cc:99:a3:cc:f2:c5:ea:f0:86:9a:fd:2c:82:f4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Apr 20 05:43:08 2026 GMT
Not After : Apr 19 05:48:08 2027 GMT
Subject: CN=17737ADCB9373FF5F895F4483399DE6CCAB9117D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:30:6e:33:1f:3d:f2:c4:92:e6:6f:f5:8f:
c8:88:ae:8b:da:f1:1d:f2:e7:0c:43:b8:fa:cd:5c:
4e:45:85:4c:89:3f:7c:0b:e9:ac:5b:14:c7:1f:44:
7a:fc:97:bc:15:6b:7e:89:86:9a:cb:9e:29:f5:51:
d4:c4:ee:43:dc:63:3c:01:68:83:05:11:80:63:dd:
94:94:eb:b7:d0:61:0f:7a:f3:63:61:e9:55:d7:6b:
93:40:da:19:ab:a9:17:60:04:e2:43:16:6f:f4:ff:
8d:c9:d2:11:37:f1:b6:1e:44:d6:c4:58:d5:85:29:
b9:9f:ee:d8:45:7e:67:8c:92:db:0e:e8:47:ea:3b:
28:11:c1:b0:56:71:72:00:72:6e:c7:39:04:fb:28:
80:eb:d0:58:70:bb:fb:a8:70:b4:e5:50:54:8b:f6:
5f:99:df:33:55:2e:74:db:a6:0e:5f:9c:be:b2:7e:
cc:1b:10:03:5d:c6:71:e6:f5:30:04:df:06:dc:41:
b2:84:0f:64:76:5d:98:59:f2:9e:e8:46:7c:62:a4:
78:81:ab:cb:99:eb:bc:68:2f:53:18:8d:4b:e4:42:
35:8f:e1:35:d4:91:21:19:8e:45:13:d6:91:01:16:
15:f2:88:52:fb:f2:e8:fb:86:9a:72:86:1b:67:86:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:7A:DC:B9:37:3F:F5:F8:95:F4:48:33:99:DE:6C:CA:B9:11:7D
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313533393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.84.0/22
Signature Algorithm: sha256WithRSAEncryption
36:8e:66:74:5d:a8:67:41:60:a4:5a:12:d1:66:43:b1:13:de:
a8:73:fa:7e:00:76:76:69:01:67:6b:84:6e:f6:ea:bc:42:1a:
01:d5:40:48:3f:44:03:a0:ed:3c:11:20:17:1a:9b:81:83:7e:
74:64:75:cf:b3:89:1e:19:9e:80:6d:8f:2c:4e:7c:c7:9b:35:
08:cc:44:a2:1d:df:38:29:2c:3e:f7:5c:83:c5:c0:4a:60:1e:
d3:4f:1c:2b:50:1d:e7:c4:73:fa:3f:2c:99:09:6c:08:3f:3d:
cb:87:d2:ee:ed:36:97:cf:25:bc:f3:aa:16:f4:d3:c3:7b:7f:
05:2b:de:5d:0a:e7:7f:7b:d7:fe:58:91:6a:88:15:14:f7:61:
5b:28:e2:4b:7e:b1:c1:55:b9:03:c6:dd:98:99:df:52:e9:0c:
9d:ae:f6:80:40:a2:59:ba:ee:09:0b:cd:59:b7:bb:60:a1:31:
3b:e5:ee:69:ae:ce:a6:01:f2:dd:c1:e7:7a:f6:4a:eb:ff:8f:
70:47:22:22:da:09:5e:c4:c4:58:fc:c1:c5:b8:7f:e7:4f:c9:
69:7a:e7:a0:16:19:84:3f:08:e7:c9:04:c7:70:ab:07:b0:83:
95:5c:c6:de:9c:58:c0:0a:5b:37:01:12:ce:77:e2:80:bc:06:
f6:7f:18:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:49 2026 by rpki-client