
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e203633363437.roa
File: 3130332e3231332e38382e302f32312d3231203d3e203633363437.roa (raw, json)
Hash identifier: Z8zczn5TjnXJap1yuCeB3nzY9l6A5XggaGwjQ+wI0yY=
Subject key identifier: 97:61:CA:D2:75:50:32:71:BA:2B:AF:97:D7:D0:29:1E:D0:CD:E2:8D
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 76F9F257CF7A498AE278D0D90278A89FC35F27AF
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e203633363437.roa
Signing time: Tue 12 May 2026 08:20:41 +0000
ROA not before: Tue 12 May 2026 08:15:41 +0000
ROA not after: Tue 11 May 2027 08:20:41 +0000
asID: 63647
IP address blocks: 103.213.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f9:f2:57:cf:7a:49:8a:e2:78:d0:d9:02:78:a8:9f:c3:5f:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: May 12 08:15:41 2026 GMT
Not After : May 11 08:20:41 2027 GMT
Subject: CN=9761CAD275503271BA2BAF97D7D0291ED0CDE28D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:fe:b6:5c:3d:6c:ba:de:9e:69:27:ef:27:
f3:54:0a:39:c5:28:57:36:d2:b4:ea:11:f8:4e:b1:
b1:39:1d:1f:ea:58:61:18:6d:99:1f:d9:66:73:e6:
a9:37:ce:2a:96:77:f1:a4:24:b5:5b:ce:17:13:40:
b8:0b:e3:ce:65:d9:8a:53:a9:a1:f0:86:4a:1f:b8:
73:1c:8a:6c:7c:e4:3e:14:65:7a:c6:71:10:12:f2:
92:48:14:17:f5:4e:23:9e:7b:16:34:bd:80:cd:34:
7a:18:c4:a5:bd:b5:bd:4e:35:c2:78:c1:87:9e:ac:
be:9c:55:1e:68:f9:fb:f4:1e:20:95:84:6e:2c:8d:
df:ff:52:8a:b7:5f:0a:69:76:2b:ad:1e:7a:48:9c:
97:a1:c9:d9:f1:32:e7:b3:46:89:0c:ab:c4:75:d7:
ca:78:a2:f2:bd:1a:9c:32:04:c4:f6:89:d4:76:46:
06:93:b7:44:a9:cf:7b:5c:24:ff:31:e1:61:b2:7b:
10:d7:6d:ad:42:e1:03:fb:47:6f:26:8e:27:bb:a1:
e1:f3:cc:dc:ad:b9:07:79:96:94:b3:11:69:c4:75:
8e:c1:96:ff:ba:92:d0:5d:e5:4a:62:c2:00:77:82:
9f:18:8c:99:1a:c9:94:46:0e:5f:ea:9b:18:27:33:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:CA:D2:75:50:32:71:BA:2B:AF:97:D7:D0:29:1E:D0:CD:E2:8D
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e203633363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.88.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:22:30:fc:ab:65:2c:10:85:42:e5:3f:8d:05:ad:79:50:df:
18:31:35:3b:57:ec:b4:38:58:f0:95:d5:39:7f:fa:b4:60:a7:
62:d2:c1:57:d8:c9:79:0f:0b:ae:bd:c4:d6:28:9a:88:5f:46:
03:0c:02:94:18:5d:47:dc:4d:36:0a:c8:d9:75:6d:63:3f:1b:
46:75:e4:68:43:99:bb:ca:6d:93:95:8f:d3:90:49:4b:1c:ec:
09:39:e6:67:63:f5:ae:05:41:d2:4e:1d:0c:01:58:71:62:71:
73:5a:28:4a:1a:74:9a:87:eb:66:19:c4:54:55:b7:b3:57:a2:
a3:2e:b0:e4:f5:c7:1a:bf:16:95:96:53:7f:c5:68:9f:46:a4:
b4:2c:1d:ad:2a:82:b2:ff:be:ca:3d:4d:51:7c:a1:f0:5a:c6:
98:54:bc:4f:83:15:1a:55:9b:3a:11:eb:e2:e5:bf:54:8e:2a:
77:4a:d3:48:f0:94:0f:b7:98:39:a7:0c:0c:11:d4:55:fe:aa:
69:0b:f2:5d:17:39:83:05:96:b4:e1:42:08:86:11:57:dd:4a:
d4:1d:22:fb:96:ea:1e:5e:3a:f5:f3:20:61:9d:26:76:b1:2c:
d6:04:b7:2f:76:30:cb:37:ef:6a:7d:d8:d4:16:e0:55:d4:c2:
59:9b:47:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:36:58 2026 by rpki-client