
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203233363530.roa
File: 3130332e38352e38342e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier: 6zRZofU/EXd1Ir3F0v4JnVrefxN0vGbXM25qC+brQ8I=
Subject key identifier: B7:9E:72:5D:A5:42:0A:16:3E:EF:05:8C:18:07:8A:15:86:46:AC:CF
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 7C74699DF19BDE804A8AC0DDBA873AF5B3FCEB52
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203233363530.roa
Signing time: Mon 20 Apr 2026 05:48:09 +0000
ROA not before: Mon 20 Apr 2026 05:43:09 +0000
ROA not after: Mon 19 Apr 2027 05:48:09 +0000
asID: 23650
IP address blocks: 103.85.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:74:69:9d:f1:9b:de:80:4a:8a:c0:dd:ba:87:3a:f5:b3:fc:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Apr 20 05:43:09 2026 GMT
Not After : Apr 19 05:48:09 2027 GMT
Subject: CN=B79E725DA5420A163EEF058C18078A158646ACCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:70:a4:62:c0:41:1e:a5:4a:d3:92:b2:7c:
4a:9a:b4:fa:b7:41:bb:a0:87:16:8d:4a:94:25:8e:
b1:a1:5e:17:a8:53:4c:54:e5:eb:d4:18:15:37:3d:
84:a2:09:9f:3b:44:ed:04:fb:b4:53:76:82:1f:b0:
7d:0e:28:e9:e4:51:5b:33:81:0c:21:a1:b4:25:11:
46:91:28:c3:5e:73:8c:cd:51:88:5f:60:4d:ce:a5:
23:2b:86:1f:58:1b:16:ba:0a:23:93:de:fc:8e:39:
08:09:6e:f2:4b:ef:d9:d4:28:91:50:56:8c:24:0e:
ae:5d:8d:fb:5a:8c:7a:18:94:8a:87:48:60:5b:60:
72:e3:06:fe:9e:64:22:4d:9b:72:ba:b0:c7:1c:6c:
88:43:a1:c4:24:72:f2:3a:e9:ee:ee:58:22:ba:e8:
81:24:76:7f:10:59:68:af:2c:0e:d9:1a:32:cc:80:
a2:65:a2:c2:99:4b:40:82:e8:67:8a:fb:3d:bd:aa:
da:e0:45:e8:f0:fb:16:4f:15:68:8f:0d:83:25:2f:
81:33:20:cf:f1:7f:7a:47:05:f2:30:8e:c0:31:e5:
12:89:e3:c3:ff:2f:43:7d:66:86:f1:3c:0c:84:eb:
ec:71:9d:05:a2:2b:45:8a:04:86:a1:61:e3:46:dc:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9E:72:5D:A5:42:0A:16:3E:EF:05:8C:18:07:8A:15:86:46:AC:CF
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.84.0/22
Signature Algorithm: sha256WithRSAEncryption
98:c8:05:94:7f:96:28:ab:4e:de:c7:6c:98:af:40:5b:50:aa:
d7:90:d5:c6:55:6a:8f:b0:78:74:eb:10:e1:e2:92:fb:6a:00:
34:2d:bb:4a:97:f7:67:ee:2b:74:71:67:a3:af:99:df:d3:89:
ac:7b:df:19:57:07:a0:ac:43:57:5c:61:a0:a6:1d:24:bd:7f:
11:22:34:ef:2a:7f:89:0a:53:0c:7a:6f:71:66:8a:37:b5:67:
05:08:a9:78:66:73:b6:82:5d:93:4e:ba:fd:bd:54:cf:c3:5f:
95:60:24:ea:b5:83:cd:4c:cf:b4:b0:07:f8:f1:5a:08:48:08:
92:54:14:c9:f8:ca:5d:0f:44:1c:49:e7:9b:0f:f6:2b:6b:ac:
cf:ca:c6:58:7b:b8:95:9f:bd:36:e3:b3:be:f0:2b:53:1c:34:
63:22:62:3b:7f:71:ca:a3:1a:80:c8:4c:24:23:d0:38:e7:80:
05:9f:51:05:0f:35:3c:37:70:e1:db:a6:f5:3d:fd:08:34:35:
b0:4e:02:25:56:87:21:4d:cf:2c:f9:d2:09:16:3b:19:da:5e:
1b:ab:85:4c:7e:94:61:27:84:7e:c7:9f:89:07:6c:5e:ad:7b:
b0:dd:43:d1:0d:38:55:a8:03:cd:9b:b1:b6:0b:4e:87:9b:9e:
48:e3:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:53:53 2026 by rpki-client