
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31382e302f32332d3233203d3e20313334373731.roa
File: 3130332e33372e31382e302f32332d3233203d3e20313334373731.roa (raw, json)
Hash identifier: 8hFX86to9/eGPettKuWyn5hjTsPjj2Hpr3Dg3H1fRmc=
Subject key identifier: B6:E3:4D:B2:C3:58:6D:02:18:01:A5:5C:B9:3A:1E:B5:0C:82:4A:86
Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial: 64BB2476F03B55219ADF4517BA5F76E5BE11C074
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31382e302f32332d3233203d3e20313334373731.roa
Signing time: Wed 29 Apr 2026 07:56:24 +0000
ROA not before: Wed 29 Apr 2026 07:51:24 +0000
ROA not after: Wed 28 Apr 2027 07:56:24 +0000
asID: 134771
IP address blocks: 103.37.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bb:24:76:f0:3b:55:21:9a:df:45:17:ba:5f:76:e5:be:11:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Validity
Not Before: Apr 29 07:51:24 2026 GMT
Not After : Apr 28 07:56:24 2027 GMT
Subject: CN=B6E34DB2C3586D021801A55CB93A1EB50C824A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:8c:1c:f1:3e:82:98:1f:e4:2e:f6:12:2d:
5d:6e:ce:4e:ee:a7:8a:61:ad:38:c9:f3:b9:f1:7e:
f2:23:c4:4c:2b:b7:71:34:c6:fa:a0:ef:7d:bd:af:
8e:91:02:d0:47:39:23:e4:a3:fb:69:b9:3d:02:81:
f9:e3:d5:dc:6e:47:ef:1c:3e:8a:df:68:fd:f5:38:
cb:b5:94:74:ea:5d:38:ee:d9:b1:78:13:6b:13:07:
40:07:0e:60:ce:d6:6b:06:b7:95:5f:a9:a4:60:be:
0a:74:7c:db:18:ef:39:b7:1b:0b:c2:25:58:1d:93:
7e:28:d8:c7:14:da:48:aa:78:69:41:f6:9f:cd:02:
17:9f:cd:a0:1d:80:9c:df:79:51:01:f4:e5:45:be:
bd:a1:4c:84:99:d5:0f:6a:43:78:29:6b:1a:38:83:
53:03:27:8a:1d:81:bb:42:bc:f6:40:0f:a8:84:45:
56:62:80:aa:d3:60:10:86:61:5f:5f:99:f2:2a:3f:
91:d5:d9:7e:15:b2:48:bf:11:47:18:16:a6:9d:84:
a0:02:90:f6:ba:be:5d:92:7f:a0:bb:4e:05:10:ba:
85:3e:2b:74:55:51:99:00:c2:9a:09:a4:13:60:67:
1d:0a:16:12:a3:98:d0:68:f3:04:5c:8b:9d:5e:82:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:4D:B2:C3:58:6D:02:18:01:A5:5C:B9:3A:1E:B5:0C:82:4A:86
X509v3 Authority Key Identifier:
keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31382e302f32332d3233203d3e20313334373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.18.0/23
Signature Algorithm: sha256WithRSAEncryption
01:11:45:40:2d:d8:ec:5d:43:9f:82:3f:7e:3b:1c:57:36:10:
43:1b:86:fc:53:4a:3c:ad:cc:21:d3:33:f9:3b:95:63:1b:a9:
72:c8:db:05:22:77:a1:d1:d8:86:c7:e1:99:51:e0:9f:33:e1:
ec:7c:4c:e4:63:82:2e:70:d4:db:ab:60:ca:bc:8e:29:05:f2:
2c:80:47:57:33:43:14:74:6b:fe:ef:58:b2:91:a9:a6:e0:83:
d7:30:9c:7c:56:ea:0b:fa:57:ce:7b:c0:37:78:8a:90:3c:93:
98:9a:1a:04:cb:38:75:87:16:69:8c:ca:c6:d7:ab:3f:04:0e:
ed:fc:71:f5:1b:75:91:2f:c8:6f:a8:05:41:94:26:33:07:6d:
7d:fa:e5:ce:9b:49:7e:09:b9:bd:9d:6b:c7:e4:db:1c:96:f0:
24:d8:b5:0c:b5:ce:53:2a:a0:f0:3d:40:10:a9:e7:62:47:07:
f5:b1:fb:84:60:7c:b4:8d:a0:f5:44:db:d4:9f:71:55:f2:01:
57:7e:a7:b5:49:0d:f1:a4:b8:e1:88:c2:01:36:36:98:16:d7:
58:fa:1c:3f:f7:9c:a4:b4:a2:c0:d0:3d:da:23:b8:f1:81:8a:
f0:1b:54:0a:ec:37:48:b4:98:ed:3e:c4:8c:30:6e:4d:a4:b2:
5b:9f:01:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:02 2026 by rpki-client