
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136312e302f32342d3234203d3e2030.roa
File: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=
Subject key identifier: 2D:57:95:98:AF:78:C5:DF:E2:70:10:6C:79:C3:72:0E:2E:95:47:B7
Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Certificate serial: 6FFEFFEB240AACF73BB01DAF9D93322113FB64F9
Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136312e302f32342d3234203d3e2030.roa
Signing time: Tue 12 May 2026 01:55:19 +0000
ROA not before: Tue 12 May 2026 01:50:19 +0000
ROA not after: Tue 11 May 2027 01:55:19 +0000
asID: 0
IP address blocks: 103.36.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fe:ff:eb:24:0a:ac:f7:3b:b0:1d:af:9d:93:32:21:13:fb:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Validity
Not Before: May 12 01:50:19 2026 GMT
Not After : May 11 01:55:19 2027 GMT
Subject: CN=2D579598AF78C5DFE270106C79C3720E2E9547B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:dd:b7:a6:6c:74:49:ed:d7:2f:ea:af:2a:
20:48:4a:71:46:62:ce:30:9e:9e:24:e0:76:47:9b:
b8:fb:39:38:6c:b4:50:8b:d9:3c:1e:9f:b2:ee:ee:
c5:3c:68:de:36:d3:c5:1e:74:d4:0e:ab:c4:41:d8:
45:d3:a5:79:ea:fe:3f:9f:3b:f3:b2:4d:27:9f:ec:
03:18:c8:1e:8c:59:2f:ba:ac:89:1e:8c:7c:39:38:
8b:dc:ec:68:d6:9d:fe:38:32:ef:6e:35:c4:06:56:
19:13:21:a6:a9:fe:d3:2a:ce:eb:2e:06:56:b7:6d:
76:f0:47:19:75:b9:68:95:c0:b4:70:3b:30:63:27:
0a:aa:90:52:5b:3c:5b:49:76:dd:66:30:8c:74:bb:
75:ed:04:9d:0f:78:28:bb:4b:70:aa:85:3b:59:82:
1b:dc:6e:9a:56:07:fd:cd:8a:79:2b:e3:7f:c9:0a:
7c:fe:66:2b:50:58:50:88:39:78:40:fd:a2:c8:bb:
4a:87:cb:13:47:d1:a7:b9:b5:ea:7a:6b:a8:61:46:
00:43:d8:59:6b:00:f1:db:e5:8f:8a:74:40:ad:09:
74:e4:00:77:d1:e3:e9:ea:f0:cf:8c:c3:16:d5:0b:
a5:6b:4a:41:c0:9c:30:5a:64:5c:21:9d:2f:aa:8a:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:95:98:AF:78:C5:DF:E2:70:10:6C:79:C3:72:0E:2E:95:47:B7
X509v3 Authority Key Identifier:
keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.161.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a0:7b:a8:df:4b:7c:06:3c:69:52:4c:b1:ac:f0:09:1b:09:
3a:8e:e9:af:1f:01:c1:96:7c:12:d2:67:6d:5f:a3:1b:9c:e1:
7b:4c:30:a6:7f:69:96:42:9b:8f:72:a3:28:50:9f:c3:98:39:
fd:f0:65:06:97:87:94:83:6f:33:bf:6b:0e:46:61:92:3f:3a:
e4:50:2e:b8:66:a8:2a:0a:3f:d2:c1:f4:aa:cd:96:5d:29:e0:
74:ca:9c:8d:e0:2d:4f:55:4d:d7:a0:32:65:76:9a:f7:c9:eb:
7c:b1:20:ae:8c:c6:89:54:6e:7b:97:4a:2a:b2:07:bc:9d:68:
d8:b9:44:74:34:e7:33:a5:04:45:22:b3:a9:84:20:79:7f:e9:
30:a1:0d:b4:91:96:09:cf:60:62:17:af:67:13:74:92:9e:27:
4b:79:aa:6a:5d:df:a8:1f:d5:97:ab:eb:11:e0:d9:4d:2f:23:
cd:29:6d:ab:00:4d:07:59:69:f6:6f:69:e5:ee:0f:20:68:a7:
78:00:0c:05:14:ce:bd:3f:5f:39:fe:3a:da:f8:c8:8c:3a:67:
92:a5:ab:53:75:c6:71:2d:cc:07:20:12:91:94:fe:d1:dd:52:
02:d4:8f:7f:bc:b6:70:39:63:09:51:56:a7:bb:68:52:25:5d:
57:6d:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:17 2026 by rpki-client