
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3231362e302f32322d3332203d3e203633353930.roa
File: 3130332e38392e3231362e302f32322d3332203d3e203633353930.roa (raw, json)
Hash identifier: 6WP7rgBCkoUWm8g6EtNd+TcDQZuIZK6ggdX1RHtlbG4=
Subject key identifier: A6:F7:97:2B:42:85:E3:6C:74:D3:98:0C:1C:A0:C9:E4:01:77:34:8B
Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial: 77F0777B6C89346F233093F6ECF4645343F98D73
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3231362e302f32322d3332203d3e203633353930.roa
Signing time: Thu 23 Apr 2026 07:28:05 +0000
ROA not before: Thu 23 Apr 2026 07:23:05 +0000
ROA not after: Thu 22 Apr 2027 07:28:05 +0000
asID: 63590
IP address blocks: 103.89.216.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f0:77:7b:6c:89:34:6f:23:30:93:f6:ec:f4:64:53:43:f9:8d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Validity
Not Before: Apr 23 07:23:05 2026 GMT
Not After : Apr 22 07:28:05 2027 GMT
Subject: CN=A6F7972B4285E36C74D3980C1CA0C9E40177348B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:1c:ef:8b:7b:ea:40:60:7c:cf:b3:cd:42:
1e:63:79:49:4c:7b:5c:38:c9:5a:60:fc:95:50:89:
3a:93:d9:f7:c8:1f:b0:40:50:3b:c4:1e:7f:0a:2c:
80:26:42:4c:e7:15:04:60:59:93:a5:ce:e3:70:f9:
ac:48:a7:a7:32:34:20:37:6b:60:13:a3:ce:da:86:
91:61:60:b5:99:ad:5b:86:cd:9e:c4:55:3a:bd:20:
df:41:72:1e:db:3b:c0:90:3e:87:ef:fe:84:be:8a:
5a:68:5d:59:ad:03:f4:ca:d3:c9:d9:1f:c1:bd:8b:
e4:2b:f1:8f:7a:9f:de:ab:a6:27:44:58:aa:f9:e6:
fa:e1:69:70:65:ee:90:15:77:c3:20:f9:53:d4:36:
63:7b:89:e4:30:3b:5a:5b:9b:13:fe:ff:33:f5:aa:
7d:3a:89:78:7c:4a:77:ba:2d:95:5e:fb:be:99:e2:
1d:b9:c0:6e:e9:62:7e:5c:88:a7:93:81:18:51:e0:
ff:cd:30:90:5e:17:7a:73:75:87:24:3e:62:35:bf:
f0:43:75:85:d5:12:1b:23:8a:b6:bd:06:0f:b8:ca:
dd:2b:84:c2:f6:ad:48:13:fa:ab:bb:3b:30:29:4c:
6c:3d:86:f9:5d:5f:a1:40:42:37:0c:73:01:60:47:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:97:2B:42:85:E3:6C:74:D3:98:0C:1C:A0:C9:E4:01:77:34:8B
X509v3 Authority Key Identifier:
keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3231362e302f32322d3332203d3e203633353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.216.0/22
Signature Algorithm: sha256WithRSAEncryption
39:e9:0a:d3:16:c4:d4:87:aa:89:84:3b:00:84:1f:67:be:f4:
b6:13:74:51:e1:7a:38:a9:8f:4b:93:5b:3c:3d:f8:9e:4a:2a:
01:c2:16:5e:13:75:10:62:27:78:33:6a:a0:91:4b:ff:7a:98:
8d:c9:0d:15:a0:e8:c9:62:38:72:3c:a6:8b:65:93:6b:3b:2d:
d2:21:da:22:44:ae:3a:83:32:03:ef:07:a6:eb:8b:9f:dd:11:
34:7e:db:c7:53:1d:c9:9c:a5:45:7c:64:87:d5:21:58:01:69:
7d:ec:f9:35:47:c4:02:84:57:08:16:11:aa:ff:dc:84:71:2c:
b4:4a:56:83:71:e7:de:a9:96:15:eb:f7:5c:65:38:2c:1f:a9:
4a:d4:dd:cc:6e:e6:4f:00:18:18:a6:af:ae:3b:0a:c9:56:9f:
9f:02:93:0e:28:1d:9c:9e:45:28:c1:2c:90:28:69:9c:4f:79:
43:20:a7:2c:3b:7e:7a:56:f3:5c:90:40:d6:41:4e:fe:b5:e6:
c4:e6:ca:b2:cd:6b:3b:eb:b9:91:b8:ee:3f:a7:ad:4b:19:d6:
be:fd:64:07:b9:9c:70:9e:fd:47:e8:5a:29:75:41:e4:24:0b:
ff:81:a2:27:5f:c6:68:35:2a:c8:f5:28:6d:a4:18:85:10:9a:
5d:aa:71:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:28 2026 by rpki-client