
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136322e302f32342d3234203d3e2030.roa
File: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=
Subject key identifier: 3E:2A:EE:53:D9:39:6A:A5:E5:A1:F5:66:24:33:5B:D6:9F:03:78:9D
Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Certificate serial: 298CB2FA15F07025864C0973D1423BB053B4A6AC
Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136322e302f32342d3234203d3e2030.roa
Signing time: Tue 12 May 2026 01:55:19 +0000
ROA not before: Tue 12 May 2026 01:50:19 +0000
ROA not after: Tue 11 May 2027 01:55:19 +0000
asID: 0
IP address blocks: 103.36.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8c:b2:fa:15:f0:70:25:86:4c:09:73:d1:42:3b:b0:53:b4:a6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Validity
Not Before: May 12 01:50:19 2026 GMT
Not After : May 11 01:55:19 2027 GMT
Subject: CN=3E2AEE53D9396AA5E5A1F56624335BD69F03789D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:4a:fb:7f:dd:53:a1:e4:76:fc:11:93:45:
7a:4d:69:4f:c6:b2:57:0f:70:37:95:0c:ed:96:ed:
48:e2:b0:d4:ad:47:92:47:52:b2:6d:25:7c:35:84:
69:03:dc:be:04:f8:4e:9c:3d:b3:6a:5a:a7:6f:38:
62:28:7c:3f:00:30:ad:1b:19:f4:a9:fe:ad:bb:37:
7f:0a:97:e7:d6:6e:95:af:8b:43:11:20:c4:eb:73:
bc:66:9d:d3:7b:81:08:0f:fc:60:38:3b:42:cc:3d:
56:f2:52:46:ba:52:21:aa:9c:70:2d:0b:cd:9c:c0:
a5:95:79:44:6b:a1:2e:e4:ae:8d:34:b3:df:4e:e1:
f2:91:1d:c4:63:ce:d6:86:7d:6d:b4:8a:b9:89:38:
92:79:5e:01:f1:58:ef:5b:42:4e:a9:fa:49:23:f9:
3f:f5:c0:8d:17:d6:c1:6d:93:78:16:bc:4f:f3:0f:
a4:f2:3c:6e:af:69:17:65:db:29:27:1f:2c:fb:79:
d9:72:41:99:d6:40:67:b2:42:bf:ef:9b:0a:be:72:
5e:72:4a:79:99:5d:e4:73:7e:db:82:ff:81:21:0b:
70:2a:e5:b6:2e:96:97:9b:52:ef:ff:96:aa:cb:6f:
ca:71:c9:40:35:f9:b8:d3:be:cc:4d:c6:15:94:ab:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:EE:53:D9:39:6A:A5:E5:A1:F5:66:24:33:5B:D6:9F:03:78:9D
X509v3 Authority Key Identifier:
keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
13:78:89:33:56:56:a6:b1:e8:52:df:ce:25:3e:e4:3e:d8:2a:
a9:9a:4b:8e:d4:de:a9:d0:c7:8f:27:34:aa:2d:a3:a5:e3:7a:
94:aa:a7:a3:28:63:7c:88:03:73:e0:ce:7d:d8:49:88:bd:9a:
6a:cd:c1:cd:65:bf:15:97:65:7d:3d:12:42:07:e0:97:93:97:
34:b6:3f:c3:03:03:59:81:99:1d:8b:ce:b9:fc:2d:bf:4e:4f:
ea:0f:43:f2:1f:6c:f7:0c:a3:65:ff:25:db:19:ff:7f:f4:5b:
ce:e9:86:0e:1d:7c:54:16:59:02:4a:18:7f:07:e6:f3:c3:a2:
19:72:37:e2:83:da:82:8e:41:7a:9c:2d:1d:c0:64:bd:64:2e:
db:7a:7e:ba:19:b6:f2:e2:ea:49:6f:66:2a:74:e5:1d:40:33:
2a:70:05:bb:e2:bf:fc:bf:cc:40:2a:5a:fe:f0:f8:41:a3:e6:
c7:c6:36:cf:e8:12:e5:1e:5b:1f:ec:c6:58:8f:d6:44:b9:9f:
3c:cd:2b:bf:1f:af:0e:2b:66:9f:0a:8e:8d:b3:a5:c9:25:e2:
5b:9b:ef:d0:02:a8:03:f9:a9:1e:05:f2:ec:4d:e5:85:16:08:
a3:49:2e:f6:8e:d9:ca:6e:04:df:cb:aa:eb:a4:21:69:aa:da:
20:ba:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:52 2026 by rpki-client