
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e32382e3231322e302f32322d3232203d3e2034383131.roa
File: 3130332e32382e3231322e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: qc620Oxlzt7dIVpTjlxhUtMjAuP4sggvYYhOIp/BQvg=
Subject key identifier: BB:29:46:A9:A6:32:3E:B2:10:01:4A:40:42:26:26:58:3A:5D:86:8B
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 600D54349E383AA5795F000134AC7A3AA720718D
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e32382e3231322e302f32322d3232203d3e2034383131.roa
Signing time: Mon 27 Apr 2026 07:55:53 +0000
ROA not before: Mon 27 Apr 2026 07:50:53 +0000
ROA not after: Mon 26 Apr 2027 07:55:53 +0000
asID: 4811
IP address blocks: 103.28.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0d:54:34:9e:38:3a:a5:79:5f:00:01:34:ac:7a:3a:a7:20:71:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:50:53 2026 GMT
Not After : Apr 26 07:55:53 2027 GMT
Subject: CN=BB2946A9A6323EB210014A40422626583A5D868B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:d8:90:1a:b1:b8:a7:8a:ef:69:78:e9:26:
86:71:05:1f:2e:9e:3b:3f:1f:29:bb:0b:60:a2:5c:
0b:56:4c:a4:76:02:c9:a1:6b:e2:90:01:0e:04:2d:
01:a3:2a:68:60:8a:f6:00:00:1e:ce:d6:12:fc:f4:
0e:68:3f:e0:a4:aa:38:fd:bb:87:2c:b8:eb:78:a8:
43:98:23:b3:e9:7f:36:97:e3:94:66:8e:ad:d0:e7:
bd:ff:3c:f6:08:e9:e0:89:22:5b:4b:84:36:e6:19:
de:96:6f:c5:1f:a1:55:f8:35:a9:87:3e:f3:13:4b:
5f:d1:9a:cc:45:75:68:85:5e:65:de:83:3b:fc:7c:
58:9d:0a:60:d7:11:69:4e:4b:e2:88:2f:86:f6:78:
df:89:e9:6e:9d:5d:56:df:d6:fb:28:c2:83:a0:58:
36:9a:76:1b:53:e9:22:34:86:92:e5:09:e5:57:e8:
30:a3:be:71:95:af:28:1e:97:28:5e:6e:e9:b8:23:
a9:8d:db:e9:29:3f:ff:32:52:d6:7f:9f:4c:6a:00:
65:7f:52:c7:8c:6f:18:26:60:ec:3e:f3:4b:77:60:
56:9e:a0:7e:0d:df:9c:07:e8:9b:ed:21:4e:2a:e5:
c2:be:4d:22:37:69:ee:a9:4e:71:eb:23:13:e8:86:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:46:A9:A6:32:3E:B2:10:01:4A:40:42:26:26:58:3A:5D:86:8B
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e32382e3231322e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.212.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ab:78:7c:55:c9:16:c2:4c:a7:c6:72:ea:fa:2f:b2:45:c8:
53:09:8b:cc:32:77:96:3a:59:15:c1:44:48:09:b6:4f:6c:4f:
6e:08:bd:93:a5:28:22:99:ea:e4:13:d3:bf:94:10:f9:da:77:
23:b7:f2:73:b0:71:87:d9:d1:c4:af:9c:ee:c5:f2:c4:d1:8b:
5c:54:6c:6c:79:dd:ff:3b:ea:a4:a1:a2:c1:62:6d:0d:74:ed:
2c:96:40:ce:6e:02:ca:50:b5:20:0d:ae:06:84:d9:86:b2:6f:
49:ee:03:30:13:e7:55:81:f1:4b:ae:70:6d:85:20:c8:f5:99:
03:8c:63:12:ee:19:bc:3d:3d:8c:48:9f:e1:c5:36:a2:13:55:
f7:ae:27:78:5a:94:52:a2:f4:56:16:72:cf:62:40:78:c6:10:
b6:8e:32:3d:3f:dc:63:9b:9c:e8:fd:cb:51:0f:1d:58:85:a7:
51:b7:85:e1:1d:d5:61:a0:19:b0:a3:c0:17:24:7b:92:84:e9:
59:51:06:60:3d:85:07:1e:a4:da:83:2f:0e:64:41:e9:d2:28:
5c:36:14:07:84:e8:bb:57:a2:65:aa:e3:4a:c2:97:84:4c:05:
fa:20:0f:a6:00:cf:0a:ff:75:39:e1:16:bd:05:cf:11:1c:32:
b5:ee:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:28 2026 by rpki-client