
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36362e302f32332d3233203d3e2034383038.roa
File: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=
Subject key identifier: 88:EF:CA:01:B7:53:83:8D:39:72:56:EE:C4:16:40:28:3B:2B:53:A8
Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Certificate serial: 3497EFB2735B396C90DF2BF14F093D8F65A8FFFA
Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36362e302f32332d3233203d3e2034383038.roa
Signing time: Mon 11 May 2026 02:32:00 +0000
ROA not before: Mon 11 May 2026 02:27:00 +0000
ROA not after: Mon 10 May 2027 02:32:00 +0000
asID: 4808
IP address blocks: 103.100.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:97:ef:b2:73:5b:39:6c:90:df:2b:f1:4f:09:3d:8f:65:a8:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Validity
Not Before: May 11 02:27:00 2026 GMT
Not After : May 10 02:32:00 2027 GMT
Subject: CN=88EFCA01B753838D397256EEC41640283B2B53A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:06:a6:ee:68:80:c0:cc:d0:b8:ab:71:05:
c0:80:f8:d9:2f:19:bf:61:27:73:cc:ed:78:22:4a:
5b:ae:47:80:95:45:04:67:92:e8:94:15:61:26:26:
71:61:f3:c7:38:f9:4c:ac:91:a7:1a:42:54:b6:a9:
be:31:65:e1:10:21:93:92:3d:ec:9a:90:13:5d:1b:
57:c5:8b:a3:c7:da:c7:ad:28:28:52:26:7a:2f:de:
52:2d:ac:a5:e5:d2:7c:70:2d:26:c5:bd:2c:84:15:
b2:2e:05:0f:cb:53:49:d5:af:99:38:5a:85:6a:43:
f9:6f:f2:b4:ce:63:9c:5a:00:5b:19:42:e2:20:aa:
42:c2:be:03:d2:d6:e1:2a:8f:14:14:07:bb:0e:bf:
12:02:5f:b9:b7:cd:c1:03:0b:39:a6:9c:1f:0b:80:
d8:f9:3c:74:a4:cd:28:c4:af:2e:73:84:87:b9:8b:
77:51:6b:3f:ff:1c:a0:3d:b6:8b:60:29:99:1c:95:
73:b7:7d:28:49:45:c2:c3:a9:e1:14:e0:6e:e3:c6:
10:58:d4:37:f0:8f:86:9f:23:b8:cc:b4:c3:73:dc:
e2:e2:25:a0:78:0b:e8:20:da:a3:84:fb:31:5c:1d:
9e:98:34:b7:16:26:d7:b6:97:96:c8:8e:80:50:a7:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:CA:01:B7:53:83:8D:39:72:56:EE:C4:16:40:28:3B:2B:53:A8
X509v3 Authority Key Identifier:
keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36362e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.66.0/23
Signature Algorithm: sha256WithRSAEncryption
62:54:9c:a6:43:2a:de:ba:94:8a:94:c0:25:72:41:db:1a:ad:
f0:39:42:f1:47:2a:31:b5:2b:fb:53:8c:4b:25:48:98:3f:ac:
18:66:5b:2e:56:55:e9:b3:99:80:03:a9:a7:5d:b1:05:c3:81:
77:78:d2:97:24:13:91:e6:b4:51:4b:c4:e5:b9:4c:92:59:49:
1c:5f:bb:71:88:8a:8e:c7:6f:8a:61:ea:6b:f6:c3:50:f4:a0:
46:ce:b6:eb:a8:3a:82:8b:28:1f:aa:6e:1d:fd:2a:3b:34:22:
48:0f:99:bd:50:b2:5d:6b:18:d0:45:81:0b:ad:27:40:75:6c:
94:34:e5:3e:d7:29:5e:00:79:2b:ae:20:32:76:6d:95:7f:90:
0d:fb:df:1f:a8:58:6c:a5:f8:df:d0:eb:32:75:84:66:95:f5:
41:aa:f7:19:37:5b:c2:a2:4e:db:d0:d2:0a:e0:4c:fc:f5:59:
9c:e5:59:ac:12:16:b9:96:77:ac:51:3d:69:1f:db:dd:a9:f1:
43:79:be:3b:d8:74:4b:03:3a:c8:6e:5b:45:3f:95:ce:c3:d0:
bb:4a:ca:99:e2:cb:c6:e5:57:06:18:1f:fc:4a:3b:0f:d3:bc:
7f:41:2d:f4:94:b1:0d:78:27:3c:c8:fd:2a:c1:a8:76:42:df:
06:1c:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:37 2026 by rpki-client