
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e3233382e3230342e302f32322d3332203d3e2034383437.roa
File: 3130332e3233382e3230342e302f32322d3332203d3e2034383437.roa (raw, json)
Hash identifier: eW6JgW82cFG+miS8ZNEq7iu2T5F+h+2w7FW+A04VZsI=
Subject key identifier: 71:36:85:8F:9C:35:95:FF:78:31:08:61:7B:8D:91:EB:CA:CA:87:F7
Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial: 36F93FE077A749A390A00B026295CF1C291328E1
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e3233382e3230342e302f32322d3332203d3e2034383437.roa
Signing time: Tue 28 Apr 2026 06:37:06 +0000
ROA not before: Tue 28 Apr 2026 06:32:06 +0000
ROA not after: Tue 27 Apr 2027 06:37:06 +0000
asID: 4847
IP address blocks: 103.238.204.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f9:3f:e0:77:a7:49:a3:90:a0:0b:02:62:95:cf:1c:29:13:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Validity
Not Before: Apr 28 06:32:06 2026 GMT
Not After : Apr 27 06:37:06 2027 GMT
Subject: CN=7136858F9C3595FF783108617B8D91EBCACA87F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:4d:3f:72:18:c1:63:ec:7d:67:2a:0f:90:
53:ed:7a:0a:c7:4d:c8:40:32:a7:ff:e3:40:1c:ec:
8e:2f:3e:e1:8e:ba:a6:f3:d4:bc:ae:3d:48:f9:f1:
72:d4:3c:a2:e0:95:09:1c:18:ef:d4:20:b7:96:d1:
be:7c:d4:ab:fb:db:5b:42:54:76:1c:40:17:48:34:
42:45:f9:61:0c:35:af:dd:8a:b4:6e:19:37:01:70:
d8:b6:d6:1c:09:d1:84:9c:ad:bb:96:10:d7:e0:5f:
b6:65:91:96:c9:87:f5:81:21:6c:a9:9e:15:d8:b0:
00:78:d2:74:cc:a6:4e:3c:e6:70:b5:23:b0:cc:f8:
33:fa:2b:6f:ad:78:8e:1c:9c:10:a4:b5:d5:2d:0a:
86:38:61:4e:27:f6:6d:50:1e:90:b4:dc:ad:c2:c0:
47:a1:ab:e0:43:43:3d:b6:d2:78:88:1a:60:c6:08:
8b:15:88:0a:10:ae:ec:cd:cd:8e:cd:79:4c:bc:98:
96:20:74:73:5d:8a:ce:6e:51:d4:18:f6:48:01:87:
78:02:f4:5d:91:db:73:6b:7a:69:a3:c3:70:d8:f5:
7c:95:f7:30:aa:71:cd:e9:62:3d:cd:eb:41:95:87:
76:21:7c:41:c9:e5:c7:f5:ac:c5:f7:96:4a:91:36:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:85:8F:9C:35:95:FF:78:31:08:61:7B:8D:91:EB:CA:CA:87:F7
X509v3 Authority Key Identifier:
keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e3233382e3230342e302f32322d3332203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:77:a0:eb:cc:cb:f4:b0:6a:b6:46:ce:10:50:ad:8c:c4:a8:
cd:1b:80:07:4b:7f:13:f9:4a:d1:c8:25:22:63:3c:ef:43:c4:
5d:45:f9:a6:2e:15:ee:6e:45:1e:80:4c:de:ea:22:66:06:70:
37:74:7f:0e:43:84:8e:00:57:05:09:1f:db:e8:8c:da:9f:ca:
d8:a2:13:6a:97:e6:e6:44:30:ba:38:3c:d8:f5:b8:c9:5e:b4:
00:85:16:f7:9a:1d:9c:4f:11:df:5b:64:57:d9:c0:aa:ff:6e:
c4:e9:7c:d6:e1:87:02:7e:5f:99:8a:31:cf:9e:a9:93:3d:d3:
5e:c2:73:bc:34:77:c8:8c:a4:e9:fd:1d:8e:f5:d9:0c:e0:a3:
98:cf:ea:7e:91:4f:f7:ff:41:24:07:ab:ef:4b:c7:61:10:07:
cf:93:70:07:42:14:46:f2:6f:3e:41:67:91:29:22:2b:02:bd:
51:be:b9:7e:c3:98:14:08:2e:00:ee:ea:7e:90:5e:88:3d:d3:
cc:b6:39:cb:5b:7b:e7:48:d8:e3:01:4a:4a:99:b4:07:57:e9:
22:36:bc:d6:d3:bd:7f:ee:f3:1c:de:9e:33:01:8f:c4:9d:99:
10:87:7d:3b:fc:ee:6c:fc:4b:bb:f4:64:b0:22:cd:be:2b:f8:
7f:57:c6:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:24 2026 by rpki-client