
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa
File: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (raw, json)
Hash identifier: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=
Subject key identifier: 9E:F9:CC:A1:E5:58:AF:B9:00:5D:E7:10:C2:73:9C:22:42:6F:BF:97
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 6ACBB0A313F7A8691B02E0AB06BB56F594034626
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa
Signing time: Tue 26 May 2026 07:44:07 +0000
ROA not before: Tue 26 May 2026 07:39:07 +0000
ROA not after: Tue 25 May 2027 07:44:07 +0000
asID: 59016
IP address blocks: 103.237.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:cb:b0:a3:13:f7:a8:69:1b:02:e0:ab:06:bb:56:f5:94:03:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: May 26 07:39:07 2026 GMT
Not After : May 25 07:44:07 2027 GMT
Subject: CN=9EF9CCA1E558AFB9005DE710C2739C22426FBF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:70:c4:b9:06:94:de:32:2d:95:93:60:8c:
f9:a5:35:58:a6:5a:70:eb:3c:ff:2f:f8:d7:29:24:
0d:20:b7:16:72:1a:11:36:69:f1:86:b1:4f:11:9f:
bc:7a:89:b9:ea:1e:9c:ff:16:24:6d:15:aa:3e:e0:
83:e4:7d:12:e0:91:90:4d:26:9e:ad:b7:73:5a:0e:
cd:d1:b0:19:b2:93:79:b0:e0:12:c6:0c:76:75:43:
17:ee:8d:c6:d2:c9:35:f2:d2:4a:d3:47:a2:6e:ce:
34:2d:ea:90:e1:6a:1b:5e:68:cf:38:9d:12:66:74:
94:a1:ed:7b:f5:6b:75:ab:21:86:54:e0:ca:8c:ae:
f8:53:ae:0d:70:8a:35:ae:65:12:40:2e:95:69:39:
25:2a:eb:e4:11:e0:d5:11:ea:47:de:20:3a:74:62:
d9:b9:ac:4e:c6:15:d2:33:07:b4:c4:15:f8:ac:6d:
22:82:c8:55:ca:5a:94:8f:70:43:f2:64:15:75:b7:
90:01:ff:d8:b9:77:34:b0:12:1f:85:70:4d:a6:99:
15:10:4e:b7:ef:d0:54:b4:8c:f7:5b:eb:e6:ff:56:
aa:12:77:16:3c:64:57:66:6e:82:11:d2:dd:4f:a8:
77:91:cf:97:73:c8:95:95:4e:f7:19:77:99:4d:df:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:CC:A1:E5:58:AF:B9:00:5D:E7:10:C2:73:9C:22:42:6F:BF:97
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.224.0/20
Signature Algorithm: sha256WithRSAEncryption
89:63:6b:13:b2:a1:a1:3d:bc:1e:e0:69:c8:c7:2e:41:61:6c:
87:88:27:81:93:f2:e7:b2:68:d7:d0:f3:b5:31:fa:fa:e8:8d:
b8:be:13:fe:09:89:80:e6:f7:d4:21:66:fe:b4:d7:f9:37:f9:
f9:34:4a:40:34:c6:f0:c4:51:d5:57:46:19:d5:50:78:b8:37:
c7:b2:f3:15:91:56:55:6a:a0:62:9b:1f:24:42:20:7f:a8:d2:
5a:fc:e0:fb:45:bd:78:d3:63:19:e3:c3:15:df:bc:37:9c:a3:
86:cd:d7:96:f7:b9:cd:e8:54:be:08:cc:f0:bb:41:bc:db:43:
8a:16:7f:e1:83:d6:7c:4e:b1:be:41:e9:c0:c6:0d:5b:26:5b:
3c:8a:8c:f7:a5:12:a1:55:bf:3a:9e:96:f4:85:d3:bb:12:0b:
d2:b0:c3:ab:ef:97:a8:8b:86:29:76:a3:1e:89:ea:66:ce:ab:
a7:07:12:bf:c3:c6:83:dd:83:7f:3e:e0:19:3d:a4:da:4d:d4:
fb:3d:7d:2f:9e:07:96:71:c4:d5:51:e0:a5:39:57:42:d8:bd:
8b:ab:80:d4:d5:fd:f6:2e:33:ca:43:48:ec:7b:9d:56:e5:6f:
02:2c:75:89:67:06:2a:b4:3c:67:0d:31:55:bb:76:c7:f0:16:
6b:6b:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:49:45 2026 by rpki-client