
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232362e302f32332d3233203d3e2034383038.roa
File: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=
Subject key identifier: 11:24:36:E8:D5:E1:E9:9E:F1:8E:66:96:57:B2:A0:BD:D1:5F:7E:A1
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 730CB4CFF9AF7FDB0E2C50477010D4D7940A5C95
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232362e302f32332d3233203d3e2034383038.roa
Signing time: Wed 13 May 2026 08:00:06 +0000
ROA not before: Wed 13 May 2026 07:55:06 +0000
ROA not after: Wed 12 May 2027 08:00:06 +0000
asID: 4808
IP address blocks: 103.38.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0c:b4:cf:f9:af:7f:db:0e:2c:50:47:70:10:d4:d7:94:0a:5c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: May 13 07:55:06 2026 GMT
Not After : May 12 08:00:06 2027 GMT
Subject: CN=112436E8D5E1E99EF18E669657B2A0BDD15F7EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2e:97:c9:0d:f5:f1:5d:25:06:d0:ca:b5:09:
9f:ef:fb:59:24:80:56:1e:04:32:ca:45:d5:0e:00:
d2:43:44:17:81:ab:9f:72:55:c0:bc:94:7f:bb:74:
48:31:3f:c5:cc:2c:10:7f:81:b8:48:5b:8c:18:ca:
45:96:91:56:e0:45:99:ae:87:b7:ac:84:96:91:98:
f6:fd:1e:eb:0d:37:a6:c5:94:93:a8:a4:57:18:36:
36:67:28:06:a3:f6:c9:9a:f7:c1:6f:c5:2f:2b:66:
52:e2:5d:74:a9:4f:a2:42:ed:a4:38:52:8f:34:fc:
25:50:e6:c6:dd:57:83:fb:13:40:be:4b:82:ee:32:
7c:be:90:a8:bb:e3:de:36:3f:0b:13:49:13:00:d9:
e1:b1:34:68:ea:0f:1d:1f:0c:34:a7:25:9c:72:a3:
d3:dd:59:fe:75:95:7a:5a:dc:4c:2b:28:f1:36:b3:
00:28:b2:12:2f:31:a0:3b:92:18:ac:11:fe:91:d6:
7b:d6:c8:ae:78:9c:be:e5:0d:44:7b:7a:4c:33:88:
84:8a:e2:02:59:71:8f:0a:24:be:26:86:02:32:c2:
8f:24:d1:cf:dd:12:8b:5b:c1:1e:fe:53:26:c4:cd:
7b:74:08:fc:40:35:2d:0d:ea:46:00:97:37:41:b6:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:36:E8:D5:E1:E9:9E:F1:8E:66:96:57:B2:A0:BD:D1:5F:7E:A1
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232362e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.226.0/23
Signature Algorithm: sha256WithRSAEncryption
07:91:0f:5d:b4:7e:85:fb:34:b3:e3:ed:a1:82:bc:75:43:75:
e2:76:e6:37:b2:9a:ce:25:4c:f4:3d:3a:58:c3:12:5a:a6:0c:
f8:78:8c:0d:28:8f:73:b2:90:5b:2e:39:d1:f5:f5:5c:f0:eb:
43:41:db:29:f1:8b:65:70:9a:f7:90:19:36:5f:04:0d:71:5e:
10:25:5b:37:4b:39:7a:d8:8e:05:25:62:11:0a:6a:24:88:61:
81:e8:4a:77:25:13:cf:c3:1c:a5:b5:c9:83:5a:9d:8d:30:01:
fc:f2:99:1a:fa:7e:51:53:9a:8e:3b:fe:4f:8f:2d:d5:d0:b5:
c1:d4:e5:e8:be:07:23:b2:a4:ad:de:1a:db:3c:18:44:c0:93:
e3:15:30:87:66:f7:d7:8c:8c:46:0f:ef:b6:46:76:ce:98:39:
cb:6f:71:ac:8f:56:50:56:e5:89:db:46:73:38:d2:ca:44:f2:
5f:bd:2c:76:94:42:3c:93:56:e5:c5:ec:e6:4f:da:e4:61:22:
84:3b:5b:5a:78:07:2e:32:24:79:e7:65:f5:1d:c4:84:63:7b:
d0:78:a4:8d:03:fa:c6:4d:53:94:6a:d1:3b:ab:fe:70:ad:0b:
98:4f:89:ba:f5:7d:aa:82:5a:46:f7:f2:2a:d0:e6:fc:c4:8f:
12:34:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:33:07 2026 by rpki-client