
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e35322e3130342e302f32322d3232203d3e2030.roa
File: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=
Subject key identifier: 3F:F9:14:65:AA:23:DF:2E:55:8D:FE:1E:53:4E:6B:2F:E9:96:4F:C8
Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Certificate serial: 06D9688FBCD6A8B8D924C3A5B26C941B57634EFE
Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e35322e3130342e302f32322d3232203d3e2030.roa
Signing time: Mon 20 Apr 2026 06:03:35 +0000
ROA not before: Mon 20 Apr 2026 05:58:35 +0000
ROA not after: Mon 19 Apr 2027 06:03:35 +0000
asID: 0
IP address blocks: 103.52.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d9:68:8f:bc:d6:a8:b8:d9:24:c3:a5:b2:6c:94:1b:57:63:4e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Validity
Not Before: Apr 20 05:58:35 2026 GMT
Not After : Apr 19 06:03:35 2027 GMT
Subject: CN=3FF91465AA23DF2E558DFE1E534E6B2FE9964FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:4c:a1:b7:7c:f3:45:e5:b0:70:11:2b:b8:
6a:ba:dc:40:7f:f1:e0:8e:28:28:5f:a1:33:77:a7:
af:c4:07:26:bc:cc:53:db:07:44:f9:ab:e6:69:f4:
fa:ec:11:df:24:48:8b:b0:e2:2f:c0:49:57:0c:e5:
c7:0d:5d:eb:b7:f3:02:4a:02:36:2c:a0:00:9f:ad:
80:d3:6c:38:0a:85:13:66:37:e3:22:42:b5:c5:e7:
5b:01:58:36:66:f0:17:07:1d:76:84:79:b4:70:6a:
64:7d:ae:d9:9f:6d:50:4e:93:c9:9f:64:11:7e:8f:
24:44:6e:86:30:c8:c9:ac:f6:f1:35:c2:02:d3:2e:
f3:e7:28:0d:5e:18:28:2a:da:6a:55:7d:85:4a:82:
21:be:e7:2f:6f:df:3b:0c:97:b5:45:d2:be:6e:7d:
6f:25:0b:cc:67:db:f1:1b:ce:60:e9:02:7a:ff:4d:
c8:0c:28:5a:bb:3b:b5:66:a2:4e:bd:7b:0f:10:2b:
3c:09:03:38:8c:91:cb:cb:26:f8:1e:0b:01:bd:88:
31:bd:8e:82:b1:36:ab:38:b3:2c:5d:d8:5b:d4:d8:
a4:8e:08:b7:35:cc:7c:55:8a:74:fe:60:ff:4e:f2:
70:b8:4a:bf:e4:06:45:f4:8b:d9:38:04:5a:b7:65:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:14:65:AA:23:DF:2E:55:8D:FE:1E:53:4E:6B:2F:E9:96:4F:C8
X509v3 Authority Key Identifier:
keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e35322e3130342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.104.0/22
Signature Algorithm: sha256WithRSAEncryption
49:90:27:e1:8e:9d:98:b4:cd:2d:c2:53:29:39:86:54:c0:60:
57:96:3a:24:96:94:90:f2:7a:33:af:67:2f:55:1d:4d:91:1d:
c2:0f:b0:ec:7e:e4:64:b4:3a:75:65:c1:61:75:f2:d1:68:7a:
45:99:c8:0d:0e:21:a3:81:54:d6:b4:cc:c0:bb:6d:41:b3:38:
f7:7f:a8:10:93:2f:a2:81:7f:6d:94:f8:aa:fc:0c:80:43:65:
c9:14:2a:b0:cd:21:64:04:af:fa:68:41:42:d8:62:90:3e:03:
97:4d:0d:7f:f4:af:28:5b:25:86:10:31:61:5d:76:9b:c4:43:
3d:04:f3:e9:fb:af:8e:06:bf:74:36:34:11:0b:0c:cf:7f:c1:
b5:a0:12:8a:28:9f:60:00:4b:2a:8c:eb:12:82:63:b4:f5:41:
47:ca:4f:4f:14:2b:8d:7a:f2:c9:e8:c2:3a:ed:fc:e7:78:3a:
94:9a:80:54:f3:a7:c5:a6:3c:75:a1:1d:36:4c:93:b9:2b:af:
de:00:de:b6:9a:93:79:c2:75:96:f5:74:b1:c1:b9:88:04:bf:
a1:be:04:98:4a:29:c4:95:4d:74:ab:43:62:8d:62:87:58:be:
31:f6:7f:28:6a:56:70:16:88:10:78:d0:06:2c:83:86:ed:98:
d5:e9:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:43 2026 by rpki-client