
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa
File: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=
Subject key identifier: BC:3D:10:98:F1:92:88:B7:70:A4:65:61:01:7E:D1:26:F6:7D:02:3A
Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Certificate serial: 7510323200E2F5DEEAD5814FAC922A698FE0A35F
Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa
Signing time: Thu 30 Apr 2026 03:28:13 +0000
ROA not before: Thu 30 Apr 2026 03:23:13 +0000
ROA not after: Thu 29 Apr 2027 03:28:13 +0000
asID: 4837
IP address blocks: 103.221.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:10:32:32:00:e2:f5:de:ea:d5:81:4f:ac:92:2a:69:8f:e0:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Validity
Not Before: Apr 30 03:23:13 2026 GMT
Not After : Apr 29 03:28:13 2027 GMT
Subject: CN=BC3D1098F19288B770A46561017ED126F67D023A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:55:4c:ea:92:6c:55:a2:b4:ff:b1:30:a8:
17:c3:f5:cd:0f:7c:b0:50:44:82:11:ee:fd:b0:aa:
00:b6:93:33:f4:c6:1d:f6:39:57:dd:a8:67:38:22:
eb:0c:18:19:d9:a4:9b:3b:da:ed:a8:ad:10:9e:ce:
35:71:a4:09:a1:20:2c:c1:4b:80:78:02:eb:84:84:
83:3d:bf:3d:96:2d:d8:1c:30:da:f6:00:70:aa:97:
1f:6d:4a:ea:27:4a:74:dc:8d:dc:ad:fc:d2:3b:b7:
3e:86:b1:e0:fe:2f:bc:b7:8f:51:20:2b:9d:a6:c1:
df:ab:c2:ef:b6:3b:68:27:6a:88:7e:75:e3:76:ca:
42:3f:3f:6d:07:da:67:44:67:35:45:e5:6f:72:a2:
eb:1f:f9:33:17:d9:33:b5:67:b5:de:1c:b4:80:f0:
7a:8e:b8:1a:72:c4:b6:55:13:9c:06:a8:c5:7b:2b:
7f:4a:e2:35:10:5f:9b:3a:ab:5c:f1:52:c1:bb:6b:
71:35:1c:d3:96:36:28:70:79:b4:ff:ee:63:d4:09:
64:0e:b2:90:81:fb:9a:f6:fd:2d:9f:75:d2:90:f2:
12:3d:55:56:2a:49:1c:82:b1:8a:4a:66:9d:6f:ca:
c2:e4:21:3f:74:b7:2c:70:4a:f7:a3:38:b9:08:9e:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:10:98:F1:92:88:B7:70:A4:65:61:01:7E:D1:26:F6:7D:02:3A
X509v3 Authority Key Identifier:
keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.221.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:68:49:35:34:f5:19:f5:50:f9:0e:0b:6c:2f:52:e8:ce:43:
00:73:28:41:18:fa:8a:9b:31:c4:2a:4f:cd:cf:dc:fa:86:9c:
0c:1f:3e:c5:7e:e1:f4:d9:e0:dd:4f:71:6f:07:45:ec:ca:bf:
4a:f5:62:2e:bd:a6:e4:92:d5:df:73:4e:b7:9b:ba:8e:a4:05:
96:94:f1:1b:03:7e:77:8b:39:38:fe:fd:3f:13:d8:45:4c:28:
59:3f:ef:26:85:6b:16:35:df:cb:d9:5e:2a:39:bc:12:9c:1e:
25:a2:57:f1:c6:71:18:8d:9f:5a:eb:00:dc:67:32:84:68:13:
92:f7:76:d7:67:15:b6:32:41:cb:db:1c:4d:17:7b:b1:9a:1e:
d6:bd:6b:96:ff:83:ff:f9:dc:e2:61:9c:e0:23:08:82:e7:0a:
11:81:43:ee:21:20:1b:77:4e:d5:9d:56:b5:00:72:e9:1e:77:
6c:ca:7a:bd:4c:c4:cb:f5:0d:16:b2:00:27:42:88:f5:fc:b4:
b7:c6:96:08:9c:3c:7e:3b:d3:19:9e:d6:aa:1c:87:40:7f:3e:
74:c1:ac:fe:0b:2b:46:16:a5:43:f1:66:99:f3:eb:7c:fd:1f:
de:ae:a1:13:01:64:70:8b:60:23:2a:8a:74:eb:5a:57:f1:68:
62:d8:61:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:47 2026 by rpki-client