
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31382e302f32342d3234203d3e20313334373731.roa
File: 3130332e33372e31382e302f32342d3234203d3e20313334373731.roa (raw, json)
Hash identifier: ffDSmjBwjUaAh6lymcPk4TvG/WhbWj1XHzVMTW9blTs=
Subject key identifier: C3:79:0A:71:22:5B:E1:BB:FE:68:F0:C2:EB:A7:14:A7:DD:C5:69:6F
Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial: 4B03199820F19E0562C0D86A0E474B0F2B03F663
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31382e302f32342d3234203d3e20313334373731.roa
Signing time: Wed 29 Apr 2026 07:56:24 +0000
ROA not before: Wed 29 Apr 2026 07:51:24 +0000
ROA not after: Wed 28 Apr 2027 07:56:24 +0000
asID: 134771
IP address blocks: 103.37.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:03:19:98:20:f1:9e:05:62:c0:d8:6a:0e:47:4b:0f:2b:03:f6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Validity
Not Before: Apr 29 07:51:24 2026 GMT
Not After : Apr 28 07:56:24 2027 GMT
Subject: CN=C3790A71225BE1BBFE68F0C2EBA714A7DDC5696F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:c3:8f:6c:09:c2:5c:9a:05:59:2b:15:aa:
e1:87:ff:dc:be:7a:a3:4e:57:9c:f2:99:18:c5:a5:
ea:bd:c7:2f:e7:bb:f6:7d:d0:ca:f4:52:84:dd:53:
84:39:87:a4:a3:5d:29:3c:01:cc:c3:82:c5:54:d9:
cd:54:58:7c:f2:b3:cb:c8:5f:4e:d9:6c:fb:91:f8:
d6:9e:a8:0e:e1:73:b4:0b:70:f5:5a:e0:87:36:1f:
ce:75:ff:cb:ba:5f:42:03:60:fe:37:a2:21:e3:60:
3c:0b:25:78:76:16:f1:fa:f9:ba:38:5b:98:7c:ec:
46:c0:08:6e:0d:46:e8:ad:c5:d9:60:42:20:38:2a:
e4:5f:d6:33:e7:b9:b6:f8:a2:03:09:5c:30:46:9f:
d8:db:f4:e9:9d:40:90:7d:2a:30:c1:ba:2f:10:51:
3d:c6:6c:7c:fd:e5:0c:7c:6a:87:02:b6:bd:25:82:
c3:9b:5c:17:af:3e:b5:4b:3a:30:14:83:b3:61:1a:
0f:c6:a1:c1:21:a7:bd:81:7c:77:d9:f1:7e:ad:c8:
97:f2:49:d3:ef:70:db:4d:e4:39:ef:72:4f:43:de:
1f:46:60:3d:8b:fb:4e:62:7f:1d:f5:ad:b0:36:31:
74:d8:57:23:9c:92:13:d9:8f:7b:c7:79:fd:47:c1:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:0A:71:22:5B:E1:BB:FE:68:F0:C2:EB:A7:14:A7:DD:C5:69:6F
X509v3 Authority Key Identifier:
keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31382e302f32342d3234203d3e20313334373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.18.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d7:31:35:b9:ea:13:b5:fc:03:48:49:f2:dd:d6:c9:29:06:
fb:8f:9d:ba:21:7e:4a:6b:de:2a:7e:d0:43:e8:be:bb:4a:4c:
51:91:cb:25:49:d5:ea:f6:02:2d:7b:20:eb:87:74:88:f3:82:
be:47:a8:33:64:d4:71:ff:e7:38:cf:40:cc:93:6e:0d:04:b6:
7e:51:2a:34:e0:ea:d2:00:e6:07:3e:11:9f:ac:b9:f6:4b:8f:
2c:a5:e5:e7:bb:11:66:ac:4c:8d:17:88:8c:20:c8:74:09:d6:
71:28:50:35:87:5f:e5:a9:d2:28:b0:05:66:3f:5d:34:a9:ce:
0b:9c:5e:64:8c:d5:45:dd:45:be:70:50:3a:92:85:b5:04:be:
57:76:c3:08:cb:0b:bb:56:d7:d6:b8:44:6c:39:5e:70:45:1d:
c9:1f:6c:1c:f9:d6:a9:fb:0b:24:08:e4:21:b7:59:fb:a8:f8:
5c:f1:dd:d5:07:ed:70:32:4a:c4:63:f4:61:b1:be:f8:84:26:
2a:e6:44:62:5a:23:69:24:d6:20:15:68:37:f0:7a:be:08:e4:
d8:af:1b:3c:97:b4:64:ad:0f:21:a9:8f:5f:c6:68:a3:e5:5c:
6b:19:08:cd:92:75:b9:b5:e9:49:de:04:a7:db:a5:80:8e:4c:
bb:80:44:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:54:58 2026 by rpki-client