
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e3131362e37362e302f32322d3232203d3e2030.roa
File: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=
Subject key identifier: A6:98:4B:84:A6:AA:59:C2:37:18:8F:0D:87:BF:C5:C6:50:FE:66:21
Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Certificate serial: 7FB59DB04260FFA55276DDECB1EE86417878928C
Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e3131362e37362e302f32322d3232203d3e2030.roa
Signing time: Mon 20 Apr 2026 06:03:35 +0000
ROA not before: Mon 20 Apr 2026 05:58:35 +0000
ROA not after: Mon 19 Apr 2027 06:03:35 +0000
asID: 0
IP address blocks: 103.116.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b5:9d:b0:42:60:ff:a5:52:76:dd:ec:b1:ee:86:41:78:78:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Validity
Not Before: Apr 20 05:58:35 2026 GMT
Not After : Apr 19 06:03:35 2027 GMT
Subject: CN=A6984B84A6AA59C237188F0D87BFC5C650FE6621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:86:d5:5a:89:23:0f:05:32:2c:0b:ab:b2:
2b:02:fd:0f:80:f4:68:37:3d:3b:12:7a:b7:09:b7:
18:dd:68:67:c9:fc:a5:85:54:b4:4a:49:ac:32:cb:
7a:8b:a5:67:1b:2c:5f:78:8f:57:b4:98:fb:ca:b4:
91:0a:2f:07:af:c3:bd:f2:71:a9:66:13:eb:0c:cb:
4d:4d:a0:db:d9:b9:be:29:3a:67:d9:19:4b:21:2f:
8b:53:3a:a3:d1:8b:eb:3a:a6:38:ed:f6:da:05:52:
f5:91:0c:dd:ee:59:20:96:5c:09:21:91:61:5f:9a:
49:58:00:73:47:5e:73:51:94:10:e2:84:92:cb:09:
1c:c3:17:db:bd:de:64:50:dc:7d:c2:be:e0:f4:0f:
98:8b:1d:19:00:96:7e:79:5b:04:d8:e1:10:58:de:
79:6f:ed:37:29:03:37:d0:c1:fe:a8:2c:9c:31:09:
2a:fa:69:1b:cd:81:a6:9c:3d:d5:55:3e:45:1c:50:
f3:66:3c:50:ed:6e:38:c7:82:86:22:5e:5c:2b:69:
e2:02:81:91:de:ee:cd:15:b4:71:ac:ca:c8:f3:35:
be:9a:ca:cc:09:96:f8:e5:7f:80:75:51:9e:d3:5a:
4b:8d:cb:04:76:e8:24:0c:13:c5:98:c6:13:79:c0:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:4B:84:A6:AA:59:C2:37:18:8F:0D:87:BF:C5:C6:50:FE:66:21
X509v3 Authority Key Identifier:
keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e3131362e37362e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.76.0/22
Signature Algorithm: sha256WithRSAEncryption
59:5f:22:ae:c7:5f:16:78:59:2b:d3:dd:bb:fa:48:59:69:d3:
39:63:31:09:3a:6d:f6:18:93:4e:29:92:3d:e8:56:09:83:9b:
4d:54:fa:d0:7e:2a:93:56:c8:61:d2:0a:45:cd:16:9d:48:d0:
30:b1:9c:a2:9b:5b:6e:5a:ab:55:0d:46:90:ae:73:74:c9:3b:
a4:e3:7e:1d:ad:07:a8:af:17:6e:10:6c:af:7f:8e:b7:6e:e2:
da:e2:68:cd:b9:f0:8d:21:d7:9e:b5:76:4a:38:cb:c9:45:6f:
28:99:a9:64:08:0b:b6:00:c6:05:53:08:04:ff:06:ea:91:d8:
f1:f0:0b:81:28:89:3f:67:eb:30:72:ae:2e:26:58:a1:c0:45:
c8:19:c3:d6:8c:54:87:2f:4b:42:6f:11:6e:70:da:8a:5f:b7:
02:c2:7c:57:63:7f:ac:60:2f:f8:52:46:c0:c2:b7:ad:3b:7d:
cd:76:0e:2b:89:6a:5a:90:4c:79:8b:01:6e:bf:8b:f9:a1:29:
2e:17:74:d8:5e:33:32:f0:d4:b4:72:2b:0b:c5:20:d3:c8:6a:
dd:d7:75:82:74:01:e6:6c:df:b1:17:8c:3d:ee:00:ce:ea:da:
85:28:8f:6a:06:17:1f:e1:64:dc:b2:c1:85:39:f6:73:31:0c:
49:55:5a:f6
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUf7WdsEJg/6VSdt3sse6GQXh4kowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVC
Qzc4QTA0RTAeFw0yNjA0MjAwNTU4MzVaFw0yNzA0MTkwNjAzMzVaMDMxMTAvBgNV
BAMTKEE2OTg0Qjg0QTZBQTU5QzIzNzE4OEYwRDg3QkZDNUM2NTBGRTY2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IYbVWokjDwUyLAursisC/Q+A
9Gg3PTsSercJtxjdaGfJ/KWFVLRKSawyy3qLpWcbLF94j1e0mPvKtJEKLwevw73y
calmE+sMy01NoNvZub4pOmfZGUshL4tTOqPRi+s6pjjt9toFUvWRDN3uWSCWXAkh
kWFfmklYAHNHXnNRlBDihJLLCRzDF9u93mRQ3H3CvuD0D5iLHRkAln55WwTY4RBY
3nlv7TcpAzfQwf6oLJwxCSr6aRvNgaacPdVVPkUcUPNmPFDtbjjHgoYiXlwraeIC
gZHe7s0VtHGsysjzNb6ayswJlvjlf4B1UZ7TWkuNywR26CQME8WYxhN5wDedAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUpphLhKaqWcI3GI8Nh7/FxlD+ZiEwHwYDVR0j
BBgwFoAUvAA4+4G49mkTPfOZJyx77rx4oE4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzM2ODM5MjYzOTE4NDg5OC8wL0JDMDAzOEZCODFCOEY2NjkxMzNERjM5OTI3MkM3
QkVFQkM3OEEwNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MzY4MzkyNjM5MTg0ODk4LzAvMzEzMDMzMmUzMTMx
MzYyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmd0
TDANBgkqhkiG9w0BAQsFAAOCAQEAWV8irsdfFnhZK9Pdu/pIWWnTOWMxCTpt9hiT
TimSPehWCYObTVT60H4qk1bIYdIKRc0WnUjQMLGcoptbblqrVQ1GkK5zdMk7pON+
Ha0HqK8XbhBsr3+Ot27i2uJozbnwjSHXnrV2SjjLyUVvKJmpZAgLtgDGBVMIBP8G
6pHY8fALgSiJP2frMHKuLiZYocBFyBnD1oxUhy9LQm8RbnDail+3AsJ8V2N/rGAv
+FJGwMK3rTt9zXYOK4lqWpBMeYsBbr+L+aEpLhd02F4zMvDUtHIrC8Ug08hq3dd1
gnQB5mzfsReMPe4AzurahSiPagYXH+Fk3LLBhTn2czEMSVVa9g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:38:59 2026 by rpki-client