
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa
File: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (raw, json)
Hash identifier: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=
Subject key identifier: 00:A3:B1:6C:37:42:C0:B0:31:E1:88:7E:04:FD:40:2F:8E:4E:0A:F5
Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE
Certificate serial: 66E9A25ED869CB6A969DE3C2BAE676D7AC86DCA4
Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa
Signing time: Mon 27 Apr 2026 05:16:21 +0000
ROA not before: Mon 27 Apr 2026 05:11:21 +0000
ROA not after: Mon 26 Apr 2027 05:16:21 +0000
asID: 63696
IP address blocks: 103.233.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e9:a2:5e:d8:69:cb:6a:96:9d:e3:c2:ba:e6:76:d7:ac:86:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE
Validity
Not Before: Apr 27 05:11:21 2026 GMT
Not After : Apr 26 05:16:21 2027 GMT
Subject: CN=00A3B16C3742C0B031E1887E04FD402F8E4E0AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:9c:13:29:98:90:17:c0:e1:35:6a:eb:49:
3b:68:3b:3f:98:9b:8c:8a:61:bb:e6:03:61:0b:0d:
97:47:5d:30:1d:85:4a:76:8f:2d:48:78:39:6e:48:
d4:37:dc:c6:fd:9d:63:06:58:79:a3:12:bb:d0:48:
9d:66:2c:d8:2f:a1:95:fa:8e:c7:e4:a3:ed:c3:e0:
5a:bc:88:bf:46:38:e5:95:6e:1b:a8:12:7e:f2:99:
90:93:ca:08:b3:a3:cf:ad:b8:31:84:10:7c:5e:dc:
3a:79:d6:ae:b4:3b:77:fb:73:17:3a:9c:0a:8a:69:
84:03:59:21:23:21:cb:97:a9:6a:b4:21:10:45:f2:
e9:39:ee:71:ed:80:4a:99:ce:67:b6:e4:cc:ac:dd:
3c:41:8c:e6:d2:18:f7:76:fa:6c:f4:69:cd:9b:af:
24:a5:47:3a:33:21:60:60:ac:0e:70:15:98:71:81:
a4:5c:26:0b:be:68:f5:80:71:75:e9:16:bc:bf:92:
60:2f:14:ce:d1:e4:b8:9d:0c:3a:a5:61:3d:1f:e6:
92:07:38:fb:aa:26:9a:26:25:8e:fd:af:df:44:7f:
e8:cf:73:d7:70:84:91:97:23:bc:48:b1:10:39:28:
44:a0:7d:75:68:69:6a:2d:44:37:77:17:32:47:c6:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:B1:6C:37:42:C0:B0:31:E1:88:7E:04:FD:40:2F:8E:4E:0A:F5
X509v3 Authority Key Identifier:
keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.136.0/23
Signature Algorithm: sha256WithRSAEncryption
19:9a:4a:7d:63:ac:a0:17:41:34:70:81:c1:fb:c1:f7:88:47:
29:c8:9c:21:91:dc:90:63:cb:c4:48:bc:67:d5:86:a3:70:2c:
ba:df:39:2e:88:6a:be:11:80:8c:74:9a:11:18:2d:5f:a6:fe:
59:09:d3:df:be:f5:d1:92:fe:e5:d1:fe:e8:1f:42:2b:4b:6a:
eb:41:48:60:a9:08:84:aa:f9:00:29:3e:af:ec:7d:c9:cc:2c:
c2:c5:32:d0:03:d9:bf:09:b4:dd:38:52:8c:5b:3e:8a:1d:f4:
72:ce:fc:e0:1a:81:4b:d6:cc:d0:ab:d9:23:00:6a:10:c9:2d:
45:47:47:d3:79:12:3f:52:da:93:69:58:5f:ac:c4:2d:3c:b3:
82:de:02:9b:20:4e:50:bd:3e:ca:fc:fa:cb:ef:25:29:10:48:
a7:db:de:70:14:21:69:dc:63:40:e6:2f:7a:68:90:d2:58:99:
c8:5e:41:13:f1:fe:7c:11:da:98:8e:2b:c9:dd:4d:63:eb:34:
31:c7:69:61:ab:13:ea:a9:a5:c7:ab:7d:74:0a:34:d3:a2:51:
52:34:ab:a7:31:32:1a:aa:4f:a0:48:7f:8e:ab:c3:e2:a5:e4:
c5:8f:4b:58:c1:e4:ca:f4:0f:54:c5:50:59:cf:6b:3d:8d:8e:
77:04:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:30 2026 by rpki-client