
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3230382e34342e302f32322d3232203d3e2030.roa
File: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=
Subject key identifier: 73:94:9A:69:1E:A4:8E:52:0B:D3:F1:57:07:69:9C:5A:85:7B:F5:2D
Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Certificate serial: 5816A547891D3130FDD686292B27F0A7CE141DC0
Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3230382e34342e302f32322d3232203d3e2030.roa
Signing time: Tue 23 Jun 2026 08:17:45 +0000
ROA not before: Tue 23 Jun 2026 08:12:45 +0000
ROA not after: Tue 22 Jun 2027 08:17:45 +0000
asID: 0
IP address blocks: 103.208.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 23:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:16:a5:47:89:1d:31:30:fd:d6:86:29:2b:27:f0:a7:ce:14:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Validity
Not Before: Jun 23 08:12:45 2026 GMT
Not After : Jun 22 08:17:45 2027 GMT
Subject: CN=73949A691EA48E520BD3F15707699C5A857BF52D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:fe:ed:37:d3:29:b3:c3:cc:1f:2f:0e:84:
55:cb:99:fc:88:f9:2f:be:f0:1f:b5:fb:cf:b8:c1:
9b:0e:d9:64:1f:4a:a1:00:e6:0b:36:66:6b:31:6a:
48:df:33:b0:05:08:8b:2f:28:7a:2a:34:af:b3:f1:
37:5f:90:5b:1c:c9:ab:cf:c4:91:ae:7c:3c:5e:ed:
3e:fd:25:03:98:72:88:05:47:af:e1:ad:66:e9:66:
ab:39:79:36:59:b5:02:06:a3:d7:82:40:0d:14:b1:
a1:7d:b4:2c:fe:d8:e3:c7:ec:c9:b0:80:5b:56:fb:
3b:13:0b:2e:d6:61:1d:c9:b0:b1:de:23:8a:ae:af:
1f:63:c7:d3:19:70:93:ca:3e:6d:2b:7f:a6:b7:97:
07:66:60:81:00:fc:70:14:4d:67:41:ee:c9:0e:07:
7d:f7:45:84:a9:29:81:1a:b2:0d:5a:cb:4f:33:4d:
a1:24:45:09:a4:ab:5b:81:f2:43:ba:5d:81:48:ff:
3f:10:11:19:05:f6:b9:d3:25:4e:7b:ff:f0:b1:4b:
48:b8:dd:eb:b8:45:c7:6c:11:cd:9d:68:f6:1e:64:
ca:8b:50:82:bb:ac:b0:82:33:1e:f8:14:28:f0:88:
88:13:36:17:55:13:bf:5f:ac:dd:4f:02:ae:d3:db:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:94:9A:69:1E:A4:8E:52:0B:D3:F1:57:07:69:9C:5A:85:7B:F5:2D
X509v3 Authority Key Identifier:
keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3230382e34342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.44.0/22
Signature Algorithm: sha256WithRSAEncryption
42:8e:9b:ba:38:09:5b:58:c0:5d:72:2b:77:27:82:fe:ea:d8:
25:de:11:45:3d:e9:53:9b:10:c1:fb:25:97:ec:c5:46:73:68:
fb:45:87:51:07:81:fd:a8:27:15:d9:d3:ab:9d:6a:b8:69:a8:
92:ff:ee:99:ce:67:9f:8b:e7:8f:a8:61:82:82:20:4d:0b:69:
86:41:05:aa:cd:4b:8c:4e:c2:f4:f8:14:37:6a:6e:ba:74:8e:
78:9a:5c:60:3b:97:9d:2c:9d:aa:ca:3e:27:bd:4c:02:7b:cf:
80:7c:90:42:35:de:4d:bc:ae:a2:64:3a:86:c8:7e:00:cd:93:
8a:c3:a8:18:f9:ba:d4:32:d2:83:90:17:67:9b:48:5b:49:46:
d8:d5:25:1b:91:b2:1e:d5:b7:1d:bb:be:d9:ad:b0:a5:64:b7:
57:e7:b8:c4:2a:57:20:8c:59:e4:be:59:c4:d5:15:4f:4e:6b:
d4:90:14:be:9f:56:44:0e:03:15:5c:1e:df:a2:e5:20:03:a0:
95:00:dd:41:e9:bb:6e:e0:a0:07:55:a0:88:5b:2d:30:de:a8:
41:49:fc:74:f6:a1:c4:6a:8f:fa:ba:5e:f2:20:34:30:13:cb:
1e:f5:1e:de:83:44:97:21:df:98:37:5b:28:3f:cb:ec:4a:02:
fa:77:f6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:02 2026 by rpki-client