
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136332e302f32342d3234203d3e2030.roa
File: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=
Subject key identifier: F5:B8:E3:1A:E2:3C:DA:3E:7D:5F:F1:83:D4:A2:95:D0:2B:68:FE:4A
Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Certificate serial: 219E1E0EFEA1A61315964827FFD997E7AB55E1BC
Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136332e302f32342d3234203d3e2030.roa
Signing time: Tue 12 May 2026 01:55:19 +0000
ROA not before: Tue 12 May 2026 01:50:19 +0000
ROA not after: Tue 11 May 2027 01:55:19 +0000
asID: 0
IP address blocks: 103.36.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9e:1e:0e:fe:a1:a6:13:15:96:48:27:ff:d9:97:e7:ab:55:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Validity
Not Before: May 12 01:50:19 2026 GMT
Not After : May 11 01:55:19 2027 GMT
Subject: CN=F5B8E31AE23CDA3E7D5FF183D4A295D02B68FE4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:1e:49:a3:f7:15:8b:e8:37:de:00:e1:bd:
1b:79:0a:1e:5f:1c:48:b5:95:1e:65:6f:2e:a5:f8:
1b:64:6d:18:d7:b6:ee:fe:88:07:99:fc:57:e3:a7:
79:f4:d3:a2:9d:fb:36:5d:a4:80:4e:16:47:5b:3a:
31:db:ab:d1:9b:a6:e4:d4:13:07:33:03:ff:ea:47:
fd:6f:45:ae:51:e3:92:80:17:48:7e:37:f2:7a:2b:
23:01:bb:bc:47:72:02:c8:c6:a2:72:d9:76:38:74:
62:96:cc:cc:7d:d8:c8:e0:ba:24:69:d9:e0:ec:21:
00:7c:82:fa:a4:52:04:ba:e7:a9:dd:cb:af:58:ae:
69:9a:40:0f:47:23:14:8b:0d:bf:79:2c:a9:a7:1a:
70:c5:87:a1:82:47:f0:dc:4f:6e:22:d3:49:c8:04:
0f:74:ab:5e:13:57:59:63:73:2a:9a:9a:ae:b5:b7:
24:59:cd:27:ed:69:46:52:b3:df:11:ed:cf:89:f7:
bf:71:df:74:46:90:67:c5:97:34:98:bd:ff:75:0a:
7c:f1:e8:0c:bc:47:01:07:30:6a:ed:60:6a:62:d8:
f2:2f:11:24:c6:69:51:cc:cf:ef:1b:32:3f:89:4c:
5a:b5:1b:f5:32:57:ad:e2:97:4f:27:0e:8a:19:3f:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:E3:1A:E2:3C:DA:3E:7D:5F:F1:83:D4:A2:95:D0:2B:68:FE:4A
X509v3 Authority Key Identifier:
keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6d:d0:26:ea:12:c5:41:b9:2b:a4:45:d6:0a:d8:af:67:f1:
6c:00:fc:37:0d:b5:86:3e:51:24:07:3a:7f:3a:7a:cf:fd:9a:
1e:3d:06:1d:8d:b6:67:46:00:bb:8a:9d:b7:fb:da:5d:59:0f:
41:a1:a3:6f:b4:d8:59:03:5a:4b:1f:cc:29:5b:24:ed:d0:7a:
54:a7:d0:95:9b:e0:52:50:92:0b:44:d2:51:ef:6a:81:ce:e9:
fc:10:ad:c5:c6:f4:85:58:42:12:ce:57:db:39:1f:41:b4:0c:
9b:b7:18:12:e6:51:88:e9:95:27:7e:85:23:1f:10:c9:bd:f7:
02:31:ef:35:14:cb:b6:95:84:ba:40:43:6b:34:d2:65:92:a1:
90:d6:ee:5f:8f:51:16:34:dd:d3:59:19:b4:91:96:b6:ca:8c:
e0:01:69:c7:00:82:92:32:28:f4:fe:36:06:b1:25:4e:d2:cd:
74:d7:d4:29:7c:5a:25:d1:9c:ae:30:02:19:2e:16:2a:a6:f0:
21:37:79:f4:40:17:d4:ad:5c:46:f7:83:64:bd:97:04:19:15:
f2:05:88:f0:a5:99:0c:89:b8:63:f7:26:4f:c2:91:c3:2b:26:
b7:81:54:1b:19:bc:fb:0b:c4:1e:32:ee:24:2f:63:d8:c5:22:
2a:14:c0:9c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUIZ4eDv6hphMVlkgn/9mX56tV4bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy
Q0FBRjcyNzAeFw0yNjA1MTIwMTUwMTlaFw0yNzA1MTEwMTU1MTlaMDMxMTAvBgNV
BAMTKEY1QjhFMzFBRTIzQ0RBM0U3RDVGRjE4M0Q0QTI5NUQwMkI2OEZFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhsR5Jo/cVi+g33gDhvRt5Ch5f
HEi1lR5lby6l+BtkbRjXtu7+iAeZ/Ffjp3n006Kd+zZdpIBOFkdbOjHbq9GbpuTU
EwczA//qR/1vRa5R45KAF0h+N/J6KyMBu7xHcgLIxqJy2XY4dGKWzMx92MjguiRp
2eDsIQB8gvqkUgS656ndy69YrmmaQA9HIxSLDb95LKmnGnDFh6GCR/DcT24i00nI
BA90q14TV1ljcyqamq61tyRZzSftaUZSs98R7c+J979x33RGkGfFlzSYvf91Cnzx
6Ay8RwEHMGrtYGpi2PIvESTGaVHMz+8bMj+JTFq1G/UyV63il08nDooZP9p7AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU9bjjGuI82j59X/GD1KKV0Cto/kowHwYDVR0j
BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG
MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MjUwODg2Mzg2MDg5OTg3LzAvMzEzMDMzMmUzMzM2
MmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGck
ozANBgkqhkiG9w0BAQsFAAOCAQEALm3QJuoSxUG5K6RF1grYr2fxbAD8Nw21hj5R
JAc6fzp6z/2aHj0GHY22Z0YAu4qdt/vaXVkPQaGjb7TYWQNaSx/MKVsk7dB6VKfQ
lZvgUlCSC0TSUe9qgc7p/BCtxcb0hVhCEs5X2zkfQbQMm7cYEuZRiOmVJ36FIx8Q
yb33AjHvNRTLtpWEukBDazTSZZKhkNbuX49RFjTd01kZtJGWtsqM4AFpxwCCkjIo
9P42BrElTtLNdNfUKXxaJdGcrjACGS4WKqbwITd59EAX1K1cRveDZL2XBBkV8gWI
8KWZDIm4Y/cmT8KRwysmt4FUGxm8+wvEHjLuJC9j2MUiKhTAnA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:40:15 2026 by rpki-client