
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232342e302f32332d3233203d3e2034383038.roa
File: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=
Subject key identifier: 51:F3:8E:0D:03:96:82:81:DF:DE:9E:88:95:2F:7D:F3:5F:1D:03:D1
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 66E88AD79A7BB28D757E3A9AA91CE32C4712D932
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232342e302f32332d3233203d3e2034383038.roa
Signing time: Wed 13 May 2026 08:00:06 +0000
ROA not before: Wed 13 May 2026 07:55:06 +0000
ROA not after: Wed 12 May 2027 08:00:06 +0000
asID: 4808
IP address blocks: 103.38.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e8:8a:d7:9a:7b:b2:8d:75:7e:3a:9a:a9:1c:e3:2c:47:12:d9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: May 13 07:55:06 2026 GMT
Not After : May 12 08:00:06 2027 GMT
Subject: CN=51F38E0D03968281DFDE9E88952F7DF35F1D03D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:32:35:e3:2d:99:f8:a2:49:7e:72:d0:d6:
8d:90:85:ec:93:5f:31:5b:00:df:0b:cc:0b:fe:9e:
1c:f9:27:c5:11:13:eb:47:1a:b5:0b:a3:7c:af:57:
09:76:29:09:c2:52:8a:84:32:51:2f:67:58:bf:dd:
f7:ce:3c:62:cf:8d:f9:a7:82:40:cd:4f:da:b6:1d:
46:da:32:3c:14:bf:f0:6c:ab:3b:71:52:06:92:9e:
c4:f8:9d:ef:e8:35:49:0c:65:af:94:d3:36:a5:22:
96:6a:29:bb:26:6d:fe:41:ac:cf:0b:53:de:ad:5c:
13:e5:dd:41:33:07:a7:04:74:a5:5e:de:a0:75:bc:
84:c6:51:93:cb:75:96:c7:e7:ca:78:9f:85:9e:25:
27:08:64:69:9b:fc:63:70:d1:0a:ab:3e:1d:76:7d:
f6:83:a0:af:b3:35:ee:73:3f:80:eb:ba:32:c8:02:
3c:fd:09:8b:04:22:22:f6:99:7e:e7:d5:1b:4b:9c:
b0:ed:ec:b4:87:64:81:d6:87:d9:d6:6b:69:31:be:
39:cf:ea:b1:0a:2b:58:1a:f9:e9:d9:06:b9:e4:e6:
a2:00:18:e1:b8:c7:5f:53:d3:67:37:b3:b4:08:31:
54:5e:e4:fb:fe:f0:86:74:11:6e:70:a5:a5:d2:ae:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F3:8E:0D:03:96:82:81:DF:DE:9E:88:95:2F:7D:F3:5F:1D:03:D1
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232342e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.224.0/23
Signature Algorithm: sha256WithRSAEncryption
46:44:06:61:1b:ad:e5:9f:a1:bd:3b:2e:f9:ef:79:92:eb:ef:
a4:e2:74:ff:d2:35:de:3b:ef:fb:fb:6c:bf:cc:8d:3f:70:b5:
e5:0b:5f:83:61:19:6e:67:92:d2:55:66:59:c8:9f:33:b6:64:
0a:ea:0c:ab:ac:5c:1c:47:46:54:18:d0:d7:92:5a:0f:69:19:
7c:ab:ae:95:ae:03:a7:ae:fd:35:82:54:b2:1d:b9:a7:e0:25:
f8:a3:69:ba:df:2e:96:6c:3c:68:85:af:a9:f2:a5:56:e6:da:
25:df:c6:9b:34:a6:c7:a6:33:cc:b8:a3:3a:d2:30:91:2a:d2:
d1:06:5e:bd:e3:23:5e:f6:e9:45:a4:cf:e2:57:99:3c:0a:92:
d5:f3:a2:31:9a:75:3e:e7:30:50:09:02:2a:45:e2:7b:5e:c2:
07:b2:e4:f3:49:b8:4c:65:3b:65:27:83:8b:41:b6:58:e6:12:
f8:8e:fb:dc:a3:bc:8a:2b:a6:ea:cd:96:c9:2e:46:8e:1f:06:
be:2f:c2:11:18:bc:87:2c:31:61:76:82:9d:36:ab:55:56:d1:
a4:6c:59:7a:16:c9:bc:86:71:a1:95:3e:50:70:b9:f7:87:3d:
d7:19:1f:b9:62:e3:5a:e8:6e:5b:a8:f8:fb:5e:ce:10:ef:a1:
a8:f3:a4:6c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUZuiK15p7so11fjqaqRzjLEcS2TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjA1MTMwNzU1MDZaFw0yNzA1MTIwODAwMDZaMDMxMTAvBgNV
BAMTKDUxRjM4RTBEMDM5NjgyODFERkRFOUU4ODk1MkY3REYzNUYxRDAzRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCODI14y2Z+KJJfnLQ1o2QheyT
XzFbAN8LzAv+nhz5J8URE+tHGrULo3yvVwl2KQnCUoqEMlEvZ1i/3ffOPGLPjfmn
gkDNT9q2HUbaMjwUv/BsqztxUgaSnsT4ne/oNUkMZa+U0zalIpZqKbsmbf5BrM8L
U96tXBPl3UEzB6cEdKVe3qB1vITGUZPLdZbH58p4n4WeJScIZGmb/GNw0QqrPh12
ffaDoK+zNe5zP4DrujLIAjz9CYsEIiL2mX7n1RtLnLDt7LSHZIHWh9nWa2kxvjnP
6rEKK1ga+enZBrnk5qIAGOG4x19T02c3s7QIMVRe5Pv+8IZ0EW5wpaXSrjUrAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUUfOODQOWgoHf3p6IlS99818dA9EwHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyNTA4NjczLzAvMzEzMDMzMmUzMzM4
MmUzMjMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWcm4DANBgkqhkiG9w0BAQsFAAOCAQEARkQGYRut5Z+hvTsu+e95kuvvpOJ0
/9I13jvv+/tsv8yNP3C15Qtfg2EZbmeS0lVmWcifM7ZkCuoMq6xcHEdGVBjQ15Ja
D2kZfKuula4Dp679NYJUsh25p+Al+KNput8ulmw8aIWvqfKlVubaJd/GmzSmx6Yz
zLijOtIwkSrS0QZeveMjXvbpRaTP4leZPAqS1fOiMZp1PucwUAkCKkXie17CB7Lk
80m4TGU7ZSeDi0G2WOYS+I773KO8iium6s2WyS5Gjh8Gvi/CERi8hywxYXaCnTar
VVbRpGxZehbJvIZxoZU+UHC594c91xkfuWLjWuhuW6j4+17OEO+hqPOkbA==
-----END CERTIFICATE-----
Generated at Wed May 13 19:33:07 2026 by rpki-client