
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa
File: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (raw, json)
Hash identifier: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=
Subject key identifier: 50:EF:8D:D6:A8:8A:FB:DE:BE:EC:35:DA:6D:D8:4B:40:79:F2:A7:A6
Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E
Certificate serial: 4CFF2EB2D76F08429FC5EE7D933162E572418F2B
Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa
Signing time: Tue 02 Jun 2026 01:46:28 +0000
ROA not before: Tue 02 Jun 2026 01:41:28 +0000
ROA not after: Tue 01 Jun 2027 01:46:28 +0000
asID: 133774
IP address blocks: 103.223.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ff:2e:b2:d7:6f:08:42:9f:c5:ee:7d:93:31:62:e5:72:41:8f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E
Validity
Not Before: Jun 2 01:41:28 2026 GMT
Not After : Jun 1 01:46:28 2027 GMT
Subject: CN=50EF8DD6A88AFBDEBEEC35DA6DD84B4079F2A7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:83:2b:63:50:32:db:7a:51:ff:56:23:79:eb:
92:88:67:08:30:12:55:0b:d4:f5:e7:1d:4e:6c:e2:
1d:6c:06:08:0b:6b:c6:82:ea:ed:5c:d6:62:c8:46:
64:b7:40:86:22:89:08:54:d5:c9:31:73:95:35:e6:
b5:82:b5:ed:ff:3b:85:49:ad:5d:28:4c:8e:c5:21:
2c:22:fe:8c:00:39:70:9c:f9:d5:37:11:62:d5:12:
d0:88:b2:d8:65:d1:49:c1:28:a6:40:e6:c2:46:73:
84:ec:2e:6c:88:7c:31:5d:af:4a:88:7a:e9:95:d5:
1f:aa:9f:56:4f:6c:f5:62:d4:5c:7f:69:26:30:cc:
9d:48:4b:75:d4:d1:62:8a:a3:af:3b:2c:d2:6b:97:
71:f3:c2:4a:fb:9b:d6:bb:cb:8e:58:65:45:4f:a7:
53:2a:70:22:49:c1:4d:80:28:f9:bc:55:d3:6f:b0:
b2:d8:fe:a2:e9:7c:3a:dd:f4:46:1b:8c:3f:df:be:
80:f4:81:d5:5a:f0:80:35:27:af:27:44:54:1a:b9:
37:b2:8a:b2:5c:f8:97:d9:10:fb:b8:12:fd:c6:1b:
f3:71:18:b4:dc:c8:e4:07:55:49:e7:8b:37:12:9a:
37:89:85:bd:a0:bc:cc:40:2d:23:69:cb:e1:02:9b:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:8D:D6:A8:8A:FB:DE:BE:EC:35:DA:6D:D8:4B:40:79:F2:A7:A6
X509v3 Authority Key Identifier:
keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e2:ba:5a:af:76:fb:80:b1:13:88:3a:2d:39:07:40:4b:1a:
0d:4c:57:3f:cd:2b:e5:f5:5f:26:b9:8c:f7:ac:37:c5:b7:e7:
ac:6a:af:4c:69:68:c6:23:58:53:59:01:6f:72:77:ac:8b:cf:
da:67:cc:93:a6:70:99:17:83:df:f9:71:98:bc:4f:b7:66:be:
bf:86:a3:8e:f8:ba:3d:9b:25:c8:71:c2:dd:ff:e8:9c:2e:35:
c5:f1:00:82:19:d8:e5:d9:8c:4c:fa:9a:5e:73:c9:bc:72:cd:
0e:41:5b:fe:e7:ea:ee:64:f4:cf:bd:53:ea:d5:44:3b:bb:02:
f5:92:28:c0:35:08:a1:43:80:43:0d:e7:27:62:1e:1f:cc:5f:
57:99:00:f1:d0:af:f7:cb:de:ec:91:8b:95:49:27:b7:27:53:
3c:f6:f9:ac:2e:11:dd:ce:a9:f0:6e:a4:eb:85:cf:90:b1:da:
fa:41:10:45:91:0a:be:6c:33:e4:f2:55:39:d4:5f:6a:cb:77:
7f:1a:fb:1f:7d:0d:1b:e9:22:1a:da:35:68:0a:87:e4:26:93:
e9:ac:1c:3f:40:26:1b:22:36:ef:76:65:b5:98:63:4d:17:bd:
49:a3:65:6b:91:0e:5d:43:06:8f:60:5a:c9:f4:81:ca:f5:00:
a3:aa:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:02 2026 by rpki-client