
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa
File: 3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa (raw, json)
Hash identifier: Msqt/UG3HlWE7DcvwRmdUsPjToK9aTFvOtdghxfnUDY=
Subject key identifier: 32:F4:15:3A:61:2B:C4:B1:02:F9:35:D3:05:23:70:1F:FE:51:F7:AE
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 6BE3DA58DAE686E5D1D11A3D81A629F76031BDB1
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa
Signing time: Mon 11 May 2026 07:00:49 +0000
ROA not before: Mon 11 May 2026 06:55:49 +0000
ROA not after: Mon 10 May 2027 07:00:49 +0000
asID: 59048
IP address blocks: 103.224.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e3:da:58:da:e6:86:e5:d1:d1:1a:3d:81:a6:29:f7:60:31:bd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: May 11 06:55:49 2026 GMT
Not After : May 10 07:00:49 2027 GMT
Subject: CN=32F4153A612BC4B102F935D30523701FFE51F7AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:65:3f:52:e7:92:67:45:64:aa:d9:38:4f:
1a:4d:9f:84:9c:9b:68:aa:00:a2:42:fd:c8:db:6e:
de:83:9f:11:e5:e2:c1:b6:b2:1b:8f:12:fc:a0:ea:
e0:e6:26:b2:e9:58:ac:77:eb:2c:ac:b8:be:df:38:
1b:5b:e3:45:e5:73:6b:52:de:12:36:18:ba:b0:6a:
59:16:87:66:da:5a:85:2c:d4:20:92:bb:ac:34:d3:
43:c6:97:8b:10:89:b0:f8:e2:30:91:c9:7f:5d:dd:
b1:37:46:33:11:73:74:5a:02:78:32:43:dd:56:02:
d7:a0:4b:6a:f1:da:70:11:b4:34:a0:9f:6e:f2:de:
63:a5:99:42:b2:27:e7:be:36:35:6a:af:80:a1:8c:
de:13:01:ff:b3:6d:fb:5f:a8:d3:3c:f8:c9:2e:62:
76:52:e3:ae:37:2b:83:85:aa:8b:51:95:74:57:0e:
04:ed:dd:02:cb:7a:57:4f:c6:05:3f:fa:39:58:27:
f9:27:30:6e:bf:1a:1a:14:28:9b:82:f6:29:1e:4d:
32:e1:b0:0f:59:9a:71:3d:4a:a0:a9:48:c3:be:0d:
1a:d1:be:59:8f:15:4c:13:3e:b2:57:6f:a9:2a:39:
81:17:e4:89:ac:ea:10:26:e7:e3:96:11:5d:93:89:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:15:3A:61:2B:C4:B1:02:F9:35:D3:05:23:70:1F:FE:51:F7:AE
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:f1:0c:1f:bc:4a:7c:b6:6d:27:e8:00:1c:f1:cf:51:7b:83:
25:b3:25:78:93:59:63:5d:e0:55:96:b2:25:4a:63:cc:03:26:
78:09:d4:b5:ee:c3:0d:cd:0b:a5:b6:c9:2f:d4:f4:17:b6:c0:
4f:05:9a:b7:88:1c:89:95:61:4e:52:66:c9:4d:43:27:0b:6f:
5f:6d:48:79:2e:ca:b9:2a:3f:0e:bb:8c:35:13:84:36:e6:b0:
13:56:5e:ea:17:44:0f:c8:6e:d2:6c:0f:65:df:bd:6c:56:52:
5c:cc:43:ae:f2:54:5e:4b:c0:4e:e2:d4:8d:4e:66:71:e0:3f:
3b:b6:49:df:33:0c:0b:73:9d:3d:5e:84:ef:f3:49:bf:61:b2:
49:c7:ce:a7:86:84:9d:e3:84:df:60:c9:3c:d9:a0:80:50:44:
d5:9c:cd:2d:0f:11:af:ed:5b:b4:d3:27:41:99:6d:ed:c4:57:
a5:c2:f0:66:fe:be:6c:de:14:c4:68:0e:13:4b:01:30:82:fa:
39:5a:af:36:d4:e4:fa:a3:da:a8:21:67:d6:b0:35:ac:54:5c:
ec:f7:48:e7:ee:66:ca:b4:89:34:42:dd:d9:a7:bf:2f:36:b7:
c1:77:46:b9:b0:88:25:06:91:63:b9:da:8e:95:3d:fc:a5:4a:
68:3d:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:55 2026 by rpki-client