
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36332e302f32342d3234203d3e2034383038.roa
File: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=
Subject key identifier: A5:04:2C:52:6B:4A:2A:9F:C1:3B:B4:E2:86:AF:A8:13:10:46:51:E8
Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7
Certificate serial: 6D12424EE3546F204B08114159AA5DAE45E457E9
Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36332e302f32342d3234203d3e2034383038.roa
Signing time: Mon 11 May 2026 02:53:07 +0000
ROA not before: Mon 11 May 2026 02:48:07 +0000
ROA not after: Mon 10 May 2027 02:53:07 +0000
asID: 4808
IP address blocks: 103.76.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:12:42:4e:e3:54:6f:20:4b:08:11:41:59:aa:5d:ae:45:e4:57:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7
Validity
Not Before: May 11 02:48:07 2026 GMT
Not After : May 10 02:53:07 2027 GMT
Subject: CN=A5042C526B4A2A9FC13BB4E286AFA813104651E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:a4:f6:34:08:1d:93:0d:6a:c7:78:78:5c:
e3:f7:a5:e1:30:94:69:05:9e:bd:cb:4c:6f:b0:7d:
91:93:26:68:de:3c:90:e0:97:e9:d3:09:4d:ff:23:
7f:fb:c1:22:57:d6:c6:35:57:65:3c:4b:3c:28:9e:
3d:99:69:da:9e:4b:ca:98:b3:c1:75:d0:6d:a1:de:
74:7d:1d:ab:9f:c0:f4:ce:96:21:4b:bb:1d:76:98:
99:11:b4:68:30:ac:be:6b:c4:99:5c:d1:36:56:00:
50:63:73:1c:db:7f:99:6c:a6:f3:cc:bc:bd:e1:59:
a6:78:fc:fa:ad:aa:0d:eb:e2:af:5b:81:e6:86:e8:
d7:e5:22:4f:47:7a:c5:51:a6:ae:f0:49:73:9d:81:
85:73:a8:d1:dd:72:94:0c:39:44:57:be:2e:a0:fe:
a2:9a:64:b6:5c:22:f1:aa:ee:e7:80:5a:79:ab:3e:
96:35:70:7c:e4:86:ff:ab:c8:5e:10:a8:17:fe:df:
3d:58:79:88:7e:91:61:5e:90:21:af:45:0b:50:bb:
de:0e:f7:64:b1:ef:8b:e3:6d:a2:34:07:ec:a3:e2:
2d:08:51:22:2c:3d:ce:e7:87:03:6f:50:3b:4a:38:
54:61:34:c4:b8:48:26:96:63:39:08:8e:1f:ac:73:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:2C:52:6B:4A:2A:9F:C1:3B:B4:E2:86:AF:A8:13:10:46:51:E8
X509v3 Authority Key Identifier:
keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36332e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.63.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0b:8a:35:73:35:3a:44:4d:81:37:a5:f0:c4:a7:64:6a:8c:
85:4b:d2:79:e0:de:4a:7f:ad:5f:dc:6c:6e:a2:a0:61:15:83:
bc:44:68:4f:80:8a:3c:59:d6:d0:ad:2d:15:c2:61:fa:51:f3:
95:a9:75:61:e8:d7:2f:8e:ec:99:f5:03:8a:d0:e5:7c:89:c4:
8f:e7:3d:92:b3:ae:45:db:f1:8b:07:6b:ec:19:dd:99:83:c3:
6d:e4:1d:44:a1:de:bf:b1:e4:c9:c6:9a:04:dc:64:28:3e:4c:
31:25:91:d3:0f:d7:e9:20:f4:22:78:06:a8:98:b2:ba:ad:06:
01:0c:a5:a2:2c:48:7f:96:1b:26:3e:a2:c4:ba:c5:a3:14:82:
9e:b9:9d:27:56:f6:97:b2:07:e0:13:07:1a:cd:a4:75:91:b0:
18:2a:7d:d9:be:71:06:38:88:16:3f:78:7f:25:65:67:1e:60:
19:80:8c:3e:f6:04:4e:a9:3b:a6:79:e8:7f:a1:83:5a:38:90:
b0:7c:38:80:50:dc:53:fc:67:fb:d1:54:b2:ba:50:8b:66:97:
76:3f:89:36:26:5a:d5:2c:57:01:6e:68:43:e7:f7:15:d0:df:
87:55:6f:89:9b:f0:f3:18:f8:05:53:97:a5:5d:17:68:81:50:
ac:dd:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:57 2026 by rpki-client