
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/3130332e39372e36302e302f32342d3234203d3e20313430323932.roa
File: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (raw, json)
Hash identifier: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=
Subject key identifier: 20:15:EC:4E:07:76:B2:51:45:1A:4C:E1:AB:43:E8:A6:BE:7C:56:B1
Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8
Certificate serial: 1419321231D90FD11DEBF1DFA103A2B07BF3F1CE
Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/3130332e39372e36302e302f32342d3234203d3e20313430323932.roa
Signing time: Thu 23 Apr 2026 02:49:30 +0000
ROA not before: Thu 23 Apr 2026 02:44:30 +0000
ROA not after: Thu 22 Apr 2027 02:49:30 +0000
asID: 140292
IP address blocks: 103.97.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl
rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:19:32:12:31:d9:0f:d1:1d:eb:f1:df:a1:03:a2:b0:7b:f3:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8
Validity
Not Before: Apr 23 02:44:30 2026 GMT
Not After : Apr 22 02:49:30 2027 GMT
Subject: CN=2015EC4E0776B251451A4CE1AB43E8A6BE7C56B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:7c:15:14:6b:fb:10:55:af:9e:d7:60:4f:
57:a6:10:a9:5c:ab:5f:91:76:b0:16:4e:e1:c2:ec:
32:2c:62:02:eb:3a:25:d2:f7:37:d1:31:f3:1e:ba:
d0:42:63:34:a8:36:d9:bb:d7:57:73:9b:58:dc:1f:
85:7f:00:0f:d4:80:bf:80:4b:de:e4:dc:cd:e3:d9:
49:d7:a0:ad:01:50:e6:c3:72:97:90:4c:fe:d8:b5:
72:8f:f8:49:ba:2c:63:c2:df:6a:30:d0:e7:5f:16:
ef:65:02:17:00:ea:20:a7:41:61:78:21:9c:2d:ad:
d8:87:cb:9c:11:a8:b0:d1:c6:5a:60:0c:cd:27:03:
9e:56:0b:00:8d:3f:ac:7f:f3:fb:23:82:ed:16:ee:
be:d1:95:a4:c7:75:e0:3e:4a:fc:71:59:dc:ec:e0:
9b:33:f1:ff:bc:7c:aa:9b:e1:f1:bc:1d:2e:db:84:
42:fa:83:e7:a8:53:9b:31:0a:96:4e:7a:3e:8d:de:
11:96:13:7b:ee:a5:1c:6d:99:84:d7:81:d1:2c:f9:
79:6c:83:c8:d9:5e:db:bb:68:84:b7:74:21:8d:c4:
b5:52:83:7f:d8:2c:9e:c3:ee:7d:d8:eb:a1:6c:be:
fe:96:46:53:c1:b1:70:d0:2e:1c:a7:af:06:f7:3a:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:15:EC:4E:07:76:B2:51:45:1A:4C:E1:AB:43:E8:A6:BE:7C:56:B1
X509v3 Authority Key Identifier:
keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/3130332e39372e36302e302f32342d3234203d3e20313430323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.60.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6c:7f:6f:6d:60:39:1b:7b:50:f5:a8:89:6e:66:16:58:98:
5b:22:d1:ee:4c:db:31:87:0a:bb:ef:a7:80:93:76:32:2f:2f:
b1:73:89:47:aa:f4:28:fe:af:32:f3:90:3e:78:5c:f3:cc:45:
bb:e8:19:cc:08:98:69:75:e6:60:10:7c:16:ce:59:e2:9e:4b:
c9:80:d9:bb:9c:1d:65:51:00:39:ac:72:bb:d2:4e:16:d6:ed:
c1:44:70:69:74:55:48:20:dc:60:fc:f0:7f:ed:76:43:62:9a:
70:7b:e5:3d:16:4e:29:3f:bf:40:59:3a:82:85:57:ce:46:8b:
82:a9:84:bc:fe:1e:a8:b1:f2:21:fd:21:d4:33:c4:c9:46:ab:
26:57:36:e7:47:cd:40:9a:9d:00:ed:20:7d:3c:cc:b8:b1:ad:
1d:2e:73:ab:6c:ad:52:09:91:89:b7:9c:ab:db:8b:0b:73:d5:
77:67:15:e3:4a:ce:a0:b3:bf:35:8c:c2:1a:23:6a:87:26:70:
87:01:d8:78:9e:48:89:95:d4:3f:3a:06:f3:fa:17:e8:0a:83:
63:36:a5:7d:e0:32:dd:12:61:6c:46:2b:f4:65:63:5b:58:e3:
75:17:34:c7:e6:31:ac:9f:0e:25:25:b0:2c:3b:3a:08:68:a3:
71:2a:13:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:59:46 2026 by rpki-client