
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36302e302f32342d3234203d3e2034383038.roa
File: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=
Subject key identifier: 6A:C8:8A:7C:CD:80:03:80:21:9B:14:B7:F2:B1:89:04:64:07:54:0B
Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7
Certificate serial: 12864EE3400EB5FCDC418819AF2C05076F02003A
Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36302e302f32342d3234203d3e2034383038.roa
Signing time: Mon 11 May 2026 02:53:06 +0000
ROA not before: Mon 11 May 2026 02:48:06 +0000
ROA not after: Mon 10 May 2027 02:53:06 +0000
asID: 4808
IP address blocks: 103.76.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:86:4e:e3:40:0e:b5:fc:dc:41:88:19:af:2c:05:07:6f:02:00:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7
Validity
Not Before: May 11 02:48:06 2026 GMT
Not After : May 10 02:53:06 2027 GMT
Subject: CN=6AC88A7CCD800380219B14B7F2B189046407540B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:35:90:a1:f2:cd:bf:8b:ad:88:65:14:d0:
66:51:75:17:a8:fb:bf:80:f7:f0:a5:fc:60:db:d2:
20:8b:4f:23:2c:fa:76:81:91:9c:f3:a7:38:0f:1b:
97:e1:14:91:2d:cf:be:1d:0f:32:e1:7f:0a:45:2a:
22:bf:fd:cd:2c:d1:cc:4c:31:aa:c3:e8:5d:be:78:
58:aa:9a:cf:09:69:a9:dc:16:69:7f:de:39:c7:fc:
08:a1:e1:87:21:19:13:0b:f9:61:a7:c0:1f:9e:02:
3f:8a:b3:30:d2:77:6e:57:86:f7:1b:13:48:9e:68:
da:bc:73:1e:83:78:09:ab:50:e0:fe:f2:4e:15:fa:
65:c0:1f:6e:10:ab:d8:0c:10:e4:12:6c:75:20:9e:
35:ef:d6:ee:0a:e3:d5:33:fd:b9:0d:bb:38:6a:f0:
fb:6e:f8:e5:3e:79:45:14:7b:6a:f1:6f:25:f0:97:
0e:1c:20:be:c3:96:ca:fe:98:a7:43:b1:4b:3f:a4:
91:ea:71:f6:0b:0b:dc:26:0f:f4:c5:d4:af:30:4a:
19:07:21:1f:32:c8:df:69:64:a2:5f:b5:d0:f6:0d:
e5:58:82:53:ae:d7:c6:ef:04:ec:0b:05:a1:a6:3c:
a6:3d:f2:c8:a2:02:de:69:6d:f8:3e:cf:c9:35:71:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C8:8A:7C:CD:80:03:80:21:9B:14:B7:F2:B1:89:04:64:07:54:0B
X509v3 Authority Key Identifier:
keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36302e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.60.0/24
Signature Algorithm: sha256WithRSAEncryption
38:eb:3c:c2:75:a5:21:41:33:cc:77:c9:92:7c:3f:49:f2:b7:
d2:d0:15:80:2b:26:60:10:db:83:b2:8d:0e:21:c8:0e:bb:27:
b5:6e:e2:06:17:12:7d:db:e9:5e:2a:26:c8:3c:6c:2c:be:86:
03:43:4e:28:2f:8b:c9:cf:dc:5f:a8:ff:20:33:65:0c:a1:a8:
36:ed:3d:29:ea:8f:22:d3:61:ff:5e:56:b2:58:4e:39:f5:77:
8f:75:21:21:09:1d:04:43:99:2a:dc:3b:6d:cf:c3:99:94:41:
b2:d8:a0:3e:57:f6:b7:1f:7e:32:54:63:8c:cd:3a:bd:35:66:
99:7a:3b:43:d8:fd:65:ba:bb:62:10:b0:ef:14:57:69:da:70:
84:db:45:d1:10:ea:c4:31:7d:c0:11:24:d6:62:9b:e6:e6:a8:
31:ca:b7:29:a2:41:11:1f:11:8a:72:c7:18:03:d4:b2:34:65:
25:76:ba:f1:aa:21:3c:1b:95:40:19:c0:dd:d7:75:73:a9:7e:
2f:2b:ad:32:8e:df:5c:9a:bd:d3:87:eb:de:cf:96:a2:47:3d:
d2:3d:1f:6e:77:06:53:20:53:2f:72:d0:64:38:0a:b9:26:22:
d6:09:a7:c5:22:80:3d:f3:c3:e8:8e:d2:54:fb:23:cb:79:76:
fb:9c:37:92
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUEoZO40AOtfzcQYgZrywFB28CADowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB
REQ5MTVBNzAeFw0yNjA1MTEwMjQ4MDZaFw0yNzA1MTAwMjUzMDZaMDMxMTAvBgNV
BAMTKDZBQzg4QTdDQ0Q4MDAzODAyMTlCMTRCN0YyQjE4OTA0NjQwNzU0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYzWQofLNv4utiGUU0GZRdReo
+7+A9/Cl/GDb0iCLTyMs+naBkZzzpzgPG5fhFJEtz74dDzLhfwpFKiK//c0s0cxM
MarD6F2+eFiqms8JaancFml/3jnH/Aih4YchGRML+WGnwB+eAj+KszDSd25Xhvcb
E0ieaNq8cx6DeAmrUOD+8k4V+mXAH24Qq9gMEOQSbHUgnjXv1u4K49Uz/bkNuzhq
8Ptu+OU+eUUUe2rxbyXwlw4cIL7Dlsr+mKdDsUs/pJHqcfYLC9wmD/TF1K8wShkH
IR8yyN9pZKJftdD2DeVYglOu18bvBOwLBaGmPKY98siiAt5pbfg+z8k1cZZnAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUasiKfM2AA4AhmxS38rGJBGQHVAswHwYDVR0j
BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx
MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MDAyNzE4MTcyMDUzNTA1LzAvMzEzMDMzMmUzNzM2
MmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnTDwwDQYJKoZIhvcNAQELBQADggEBADjrPMJ1pSFBM8x3yZJ8P0nyt9LQFYAr
JmAQ24OyjQ4hyA67J7Vu4gYXEn3b6V4qJsg8bCy+hgNDTigvi8nP3F+o/yAzZQyh
qDbtPSnqjyLTYf9eVrJYTjn1d491ISEJHQRDmSrcO23Pw5mUQbLYoD5X9rcffjJU
Y4zNOr01Zpl6O0PY/WW6u2IQsO8UV2nacITbRdEQ6sQxfcARJNZim+bmqDHKtymi
QREfEYpyxxgD1LI0ZSV2uvGqITwblUAZwN3XdXOpfi8rrTKO31yavdOH697PlqJH
PdI9H253BlMgUy9y0GQ4CrkmItYJp8UigD3zw+iO0lT7I8t5dvucN5I=
-----END CERTIFICATE-----
Generated at Wed May 13 10:30:10 2026 by rpki-client