
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36342e302f32332d3233203d3e2034383038.roa
File: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=
Subject key identifier: 8B:98:D2:EA:F2:41:55:D5:53:E6:66:A9:B4:EA:38:34:41:53:95:E5
Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Certificate serial: 28C0CEEE776AEC1F4B2F38909BC4E451E535DE20
Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36342e302f32332d3233203d3e2034383038.roa
Signing time: Mon 11 May 2026 02:32:00 +0000
ROA not before: Mon 11 May 2026 02:27:00 +0000
ROA not after: Mon 10 May 2027 02:32:00 +0000
asID: 4808
IP address blocks: 103.100.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c0:ce:ee:77:6a:ec:1f:4b:2f:38:90:9b:c4:e4:51:e5:35:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Validity
Not Before: May 11 02:27:00 2026 GMT
Not After : May 10 02:32:00 2027 GMT
Subject: CN=8B98D2EAF24155D553E666A9B4EA3834415395E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:f1:3b:99:f9:e5:df:6c:80:67:bf:f6:98:
74:95:cb:a4:9d:e2:35:d1:0e:45:80:2b:a5:38:76:
47:d7:fc:63:17:84:24:ec:2b:44:18:04:dc:ac:5d:
98:56:5f:4e:9e:74:93:dd:c4:4a:db:68:d3:76:38:
e2:2d:1f:01:85:75:ec:25:31:59:cf:ae:6e:b1:a7:
7e:2c:5f:43:46:d0:76:29:29:fa:29:7f:b4:e2:21:
94:cb:b1:e1:bb:4f:5d:7b:9d:72:c7:30:47:c7:23:
6b:52:94:a5:1c:1f:6a:27:1a:76:d5:f1:ad:6c:29:
62:f8:0d:df:91:03:d0:3f:92:93:14:43:f4:9d:ba:
cf:09:a1:9b:8a:fc:4a:5a:22:20:86:e9:a8:b8:0f:
00:cd:af:0c:50:f0:fb:15:f6:05:51:23:ba:32:da:
3d:e6:1f:02:b6:c6:7b:ea:4b:58:ca:57:78:65:ff:
7b:65:7c:b0:65:a6:af:0a:b7:3e:16:aa:4d:23:b0:
db:5d:63:86:dd:3e:5a:0b:b9:c0:4b:82:4b:d9:7f:
3d:ed:c2:0d:3e:80:7e:0b:e1:69:6e:7a:31:1c:18:
ef:76:89:65:95:dd:37:43:04:31:f7:d2:4d:e8:71:
da:1f:05:1c:13:17:95:f8:8b:18:d2:10:47:26:08:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:98:D2:EA:F2:41:55:D5:53:E6:66:A9:B4:EA:38:34:41:53:95:E5
X509v3 Authority Key Identifier:
keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36342e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.64.0/23
Signature Algorithm: sha256WithRSAEncryption
90:e0:d7:f7:17:02:7f:7f:b8:16:e5:fa:a5:67:07:95:f7:bb:
97:da:d8:d4:39:63:7b:66:e8:f9:f5:4a:15:93:4e:b7:7f:bc:
5e:55:60:08:32:ee:11:c9:c5:c7:6c:8d:6d:2d:70:3a:4b:35:
0f:63:20:67:9b:50:0b:08:32:dd:1c:38:0f:4c:3c:d0:50:f3:
b6:af:8d:10:ae:b2:29:0a:72:bf:7a:3d:ad:c2:8f:8b:30:ea:
dc:1f:af:f5:01:47:53:0a:34:8b:22:15:f2:f2:3e:ba:98:5b:
e6:b9:e3:eb:c2:48:48:71:5e:6f:aa:f2:55:e0:27:0e:26:ac:
ad:9a:83:08:61:c7:cd:35:0d:a5:ff:ef:ac:7d:2c:de:ec:51:
c4:92:b8:9e:02:1c:53:b3:36:8b:be:e9:16:e1:18:1b:89:7d:
06:0b:f0:53:13:45:50:b8:92:2a:ef:25:66:a5:e9:ab:cb:df:
ee:ac:f9:13:b0:ef:fa:07:3b:f6:ca:e2:59:bf:1b:53:40:34:
f8:36:68:a5:92:3b:90:87:b4:f7:8e:b7:bb:5c:7b:8c:ed:c1:
b9:8c:28:8e:dc:ae:b1:93:0d:63:b8:e9:3f:f1:30:3e:e4:8d:
ba:92:2c:6f:f2:6d:82:16:5a:6a:52:04:11:ab:2f:b9:a3:91:
43:58:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:24 2026 by rpki-client