
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203536303436.roa
File: 3130332e38352e38342e302f32322d3234203d3e203536303436.roa (raw, json)
Hash identifier: CPS8C3dlUFZkTHBbXy9+u513/OlouyaV/3BeZYhp7+k=
Subject key identifier: 87:09:90:CE:78:A2:6A:07:BA:93:EE:C0:15:85:05:80:11:B0:05:BF
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 4C6C58F8D66C35BAEC27C7DC1EE2F0D6A437D9A6
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203536303436.roa
Signing time: Mon 20 Apr 2026 05:48:08 +0000
ROA not before: Mon 20 Apr 2026 05:43:08 +0000
ROA not after: Mon 19 Apr 2027 05:48:08 +0000
asID: 56046
IP address blocks: 103.85.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6c:58:f8:d6:6c:35:ba:ec:27:c7:dc:1e:e2:f0:d6:a4:37:d9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Apr 20 05:43:08 2026 GMT
Not After : Apr 19 05:48:08 2027 GMT
Subject: CN=870990CE78A26A07BA93EEC01585058011B005BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:53:3b:a9:8f:d3:a7:ea:01:b5:8a:b4:55:
45:30:75:cc:2f:b6:9b:3a:2f:1e:4f:25:42:1a:89:
56:9f:e5:34:a3:39:fb:40:71:9d:85:a8:13:34:61:
c8:d7:29:fa:97:d1:a5:68:59:af:d9:77:1e:c9:ac:
24:64:bb:88:d5:5a:68:64:30:99:d8:11:e2:65:e4:
7a:f4:d2:23:60:08:aa:0d:7f:c1:6a:9f:64:63:5a:
7a:f9:00:9f:50:fa:b0:9b:d5:76:2d:0d:d6:8f:36:
05:be:ab:30:35:84:f9:29:15:69:14:80:03:34:50:
f3:f8:8d:f0:86:31:c1:b3:f2:a8:ba:74:13:08:b2:
49:4b:7f:90:4b:34:1b:d4:04:67:51:a5:a4:9a:b5:
f0:1d:b3:d0:46:a4:62:a8:7d:8f:d5:cc:ff:53:99:
2e:e0:d0:e8:9a:e3:79:7f:d6:19:9b:05:db:6f:26:
4f:05:67:5f:77:22:d2:1a:9b:8f:22:1e:38:2a:23:
e9:fb:f4:6a:97:72:fd:e4:7e:4e:72:44:18:15:af:
00:d3:ed:ca:23:49:84:85:a5:01:af:13:ea:51:39:
7e:f8:98:7a:fc:ca:a2:d4:0e:24:ae:9d:70:ad:f4:
ca:c7:f9:31:5d:18:1f:8d:9a:fc:0c:fd:8a:02:ac:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:90:CE:78:A2:6A:07:BA:93:EE:C0:15:85:05:80:11:B0:05:BF
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.84.0/22
Signature Algorithm: sha256WithRSAEncryption
15:34:59:8a:ba:22:0d:71:6f:c9:71:c7:8b:c1:0d:1e:1d:1b:
72:4f:18:5a:c3:f7:18:12:46:74:b7:08:00:f7:c4:49:3f:5c:
8f:01:b7:f2:fa:de:89:ee:7c:78:76:b9:95:69:a6:ac:01:61:
60:4d:6a:5c:88:f5:a7:5f:fd:e1:b6:55:25:8b:63:d5:68:73:
4d:e7:7b:6c:02:d6:ab:20:22:79:80:9c:b9:4e:9b:af:74:72:
31:51:6b:ca:98:a5:99:04:fd:95:dd:b8:0d:8f:68:c2:83:37:
ee:ae:35:b1:ce:1d:a0:00:12:d1:c0:3a:4f:48:98:4d:91:dc:
7a:52:70:86:3b:63:ea:ed:1a:5c:b9:5f:34:65:d0:13:fa:fc:
bd:9a:35:c7:51:7b:38:1a:cf:83:42:af:23:4f:d7:79:6c:57:
ac:82:6a:75:7a:ce:71:9b:48:ce:ef:bc:a4:05:46:b4:11:26:
3d:43:d0:7e:ad:a8:6d:58:da:c2:c2:48:dd:6f:e3:98:62:02:
af:21:1c:a9:43:5b:7a:e7:a4:b8:82:47:a0:9e:b6:d9:1f:61:
59:bd:4c:c5:96:3c:1e:c7:66:54:21:cd:87:d4:ab:fc:f7:9a:
f7:31:8e:8d:ab:d2:9c:fa:dc:42:81:43:13:56:88:a0:b8:e0:
24:0b:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:36 2026 by rpki-client