
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3234302e302f32322d3232203d3e2030.roa
File: 3130332e38362e3234302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: tedowUUkDt6MlOCPG6YLO/x4XDub531KbVNoUX8Qybs=
Subject key identifier: CE:35:F0:87:0A:28:2D:C9:C1:F7:90:75:D2:A8:26:77:97:6F:4B:13
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 76A0651B261C4CD4FD892296D0F45F362C38628C
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3234302e302f32322d3232203d3e2030.roa
Signing time: Thu 23 Apr 2026 07:54:11 +0000
ROA not before: Thu 23 Apr 2026 07:49:11 +0000
ROA not after: Thu 22 Apr 2027 07:54:11 +0000
asID: 0
IP address blocks: 103.86.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a0:65:1b:26:1c:4c:d4:fd:89:22:96:d0:f4:5f:36:2c:38:62:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: Apr 23 07:49:11 2026 GMT
Not After : Apr 22 07:54:11 2027 GMT
Subject: CN=CE35F0870A282DC9C1F79075D2A82677976F4B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:ea:bc:58:9b:5c:52:dc:0e:c1:77:81:61:
f4:35:e3:f0:1e:2e:76:f4:13:df:01:d8:29:db:67:
da:c8:44:5f:84:27:5b:0e:7f:74:14:13:36:bb:3b:
8e:77:59:4c:d6:a4:09:98:4b:4d:87:df:cd:9f:b3:
11:bf:5c:eb:61:2b:03:7f:3a:46:28:0a:ab:7c:0d:
4d:92:e9:8a:7c:18:63:a0:2c:3b:08:51:d5:84:13:
61:37:16:70:89:00:a1:96:6f:21:20:23:00:0a:8c:
a1:dd:9d:be:cc:29:b6:3e:5d:62:ad:ad:e6:80:fe:
ea:f6:30:8d:3a:3c:c3:4c:bd:03:5c:bc:04:4c:ff:
7e:b5:a4:1e:d8:85:ca:d3:9d:57:3e:aa:08:48:68:
e0:10:ec:c2:94:ac:54:d0:9a:23:3c:7f:f0:b4:3c:
31:67:16:72:9f:16:a6:54:7a:fe:75:a9:11:a1:43:
d2:6d:34:8b:62:90:35:ae:a0:72:19:f9:01:b9:46:
7c:75:be:6d:c1:46:d1:2f:48:02:8b:ae:0a:f5:f7:
59:5b:4d:85:ec:7a:3f:e7:a5:24:99:81:22:a9:5c:
1f:34:0a:84:1d:33:44:13:a0:5b:6e:3c:c4:01:bf:
70:06:40:fe:cd:c0:be:89:79:8d:b3:a2:4d:e6:23:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:35:F0:87:0A:28:2D:C9:C1:F7:90:75:D2:A8:26:77:97:6F:4B:13
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3234302e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.240.0/22
Signature Algorithm: sha256WithRSAEncryption
77:be:bc:3f:a4:d2:b6:e0:a4:c6:79:bc:06:15:a2:8c:36:13:
ed:0f:2a:10:38:36:7a:30:f0:79:de:c3:73:05:81:8b:43:58:
9e:5c:47:cf:e9:23:94:b3:55:f1:55:3b:1e:8c:67:6a:97:8f:
17:46:be:51:55:a3:af:05:9d:53:cf:8d:c4:45:79:fb:99:1d:
61:7d:44:fa:13:e1:e2:40:22:8a:ad:54:b5:9d:e9:6e:26:3d:
b6:ac:2a:a5:23:28:72:63:0c:ad:7a:b8:78:06:ae:b6:cb:43:
df:1f:37:0c:87:57:4a:19:59:ac:f2:cd:93:dd:42:3b:ec:1f:
b0:8e:33:3b:4a:72:cd:ea:e2:3f:a5:cf:59:68:35:ce:4e:7a:
b7:cb:c3:6d:5a:b3:f3:a3:b1:4b:ed:76:5d:1c:88:2b:2c:2a:
42:e9:21:16:87:1d:4d:79:17:44:08:4e:78:80:a8:a5:fb:b1:
b9:d6:db:ad:71:77:9d:76:6d:9a:87:4a:c7:e1:55:40:5e:11:
18:2a:b9:c7:41:d7:df:77:f7:01:cd:d4:5e:bc:f9:f9:09:cc:
19:d2:08:d6:62:bf:42:0c:35:e5:e8:77:db:67:f5:ac:9d:b5:
35:0e:b0:3f:2f:1f:0e:f9:7c:0b:0b:d2:d2:0c:33:be:14:66:
14:8a:66:bc
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUdqBlGyYcTNT9iSKW0PRfNiw4YowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA0MjMwNzQ5MTFaFw0yNzA0MjIwNzU0MTFaMDMxMTAvBgNV
BAMTKENFMzVGMDg3MEEyODJEQzlDMUY3OTA3NUQyQTgyNjc3OTc2RjRCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2uq8WJtcUtwOwXeBYfQ14/Ae
Lnb0E98B2CnbZ9rIRF+EJ1sOf3QUEza7O453WUzWpAmYS02H382fsxG/XOthKwN/
OkYoCqt8DU2S6Yp8GGOgLDsIUdWEE2E3FnCJAKGWbyEgIwAKjKHdnb7MKbY+XWKt
reaA/ur2MI06PMNMvQNcvARM/361pB7YhcrTnVc+qghIaOAQ7MKUrFTQmiM8f/C0
PDFnFnKfFqZUev51qRGhQ9JtNItikDWuoHIZ+QG5Rnx1vm3BRtEvSAKLrgr191lb
TYXsej/npSSZgSKpXB80CoQdM0QToFtuPMQBv3AGQP7NwL6JeY2zok3mIyHxAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUzjXwhwooLcnB95B10qgmd5dvSxMwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzEzMDMzMmUzODM2
MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdW
8DANBgkqhkiG9w0BAQsFAAOCAQEAd768P6TStuCkxnm8BhWijDYT7Q8qEDg2ejDw
ed7DcwWBi0NYnlxHz+kjlLNV8VU7HoxnapePF0a+UVWjrwWdU8+NxEV5+5kdYX1E
+hPh4kAiiq1UtZ3pbiY9tqwqpSMocmMMrXq4eAautstD3x83DIdXShlZrPLNk91C
O+wfsI4zO0pyzeriP6XPWWg1zk56t8vDbVqz86OxS+12XRyIKywqQukhFocdTXkX
RAhOeICopfuxudbbrXF3nXZtmodKx+FVQF4RGCq5x0HX33f3Ac3UXrz5+QnMGdII
1mK/Qgw15eh322f1rJ21NQ6wPy8fDvl8CwvS0gwzvhRmFIpmvA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:27 2026 by rpki-client