
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32302e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e32302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: N1y5U56ZifIfhlaohBkHS8pbb7PvSnEKBK2LE/TBkyE=
Subject key identifier: CC:72:E3:AC:DD:88:17:BA:C1:75:31:19:A1:B2:20:EE:6D:63:0B:AE
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 31467082F5B159E3E9CF9BC29414F9FCA255E742
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32302e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:11 +0000
ROA not before: Fri 05 Jun 2026 05:43:11 +0000
ROA not after: Fri 04 Jun 2027 05:48:11 +0000
asID: 24426
IP address blocks: 103.236.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:46:70:82:f5:b1:59:e3:e9:cf:9b:c2:94:14:f9:fc:a2:55:e7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:11 2026 GMT
Not After : Jun 4 05:48:11 2027 GMT
Subject: CN=CC72E3ACDD8817BAC1753119A1B220EE6D630BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:19:4d:42:3c:fb:ad:a7:3d:2b:25:fe:3a:
2a:2e:03:10:b9:b7:ac:19:bc:6e:26:d4:a2:3c:07:
26:81:66:d3:fc:d1:7b:86:bf:35:b4:0f:28:70:f7:
88:62:11:fc:3e:08:5a:25:09:cb:7f:ac:37:eb:df:
ec:4d:b3:7c:a6:98:f7:fa:b5:af:58:09:6b:ed:91:
af:0f:7e:14:73:dc:db:53:42:1e:17:08:62:da:c9:
7b:e7:68:7b:ef:0b:59:07:9c:62:02:0d:c0:12:dc:
74:7d:b0:5f:7b:93:39:ab:18:c3:34:0b:1b:1f:b6:
40:32:e4:f8:f1:3f:31:67:29:fa:bb:27:8c:62:c6:
74:05:30:66:f5:12:b8:45:8b:e4:95:11:b5:cb:7e:
c3:c9:32:29:1d:a1:7b:e9:ca:f3:b7:08:a1:94:3f:
a6:88:c8:67:de:c3:c5:e7:de:8d:1b:dc:1a:22:da:
1b:fa:ca:82:ea:b8:75:d4:1e:42:52:c9:63:b0:a2:
0c:22:a5:d0:0c:cb:63:63:13:bc:05:29:f5:25:4a:
3c:82:90:bd:71:8d:17:4e:b1:a3:cf:f2:e1:35:6f:
13:49:de:ed:c8:f3:96:7f:3b:af:00:f0:d1:3f:24:
da:07:89:33:0a:8d:cf:fb:f3:91:58:82:70:13:81:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:E3:AC:DD:88:17:BA:C1:75:31:19:A1:B2:20:EE:6D:63:0B:AE
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32302e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.20.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:62:2d:65:58:e6:67:c8:5c:f5:95:a0:8e:03:24:6f:90:f5:
db:38:4a:1a:7c:4d:5f:72:c1:3f:1b:ed:f3:33:6d:cb:5d:82:
19:6e:8e:d6:05:ba:31:9f:44:e1:0e:00:b9:d8:1d:ff:cc:c6:
25:ff:91:d2:05:12:e9:fc:1e:82:19:9d:40:62:87:56:e0:5e:
c3:d1:b0:a7:9b:87:f9:f0:fd:fd:7b:3e:c8:31:77:94:2d:fa:
d0:34:e5:9f:16:cf:f7:64:d4:16:0f:a4:84:46:80:3c:16:4a:
26:4e:4f:d1:0a:29:d1:a0:63:11:8d:e3:57:45:04:51:70:7f:
87:17:42:b4:8a:64:d9:46:11:10:f6:c2:ea:a0:be:1a:7f:10:
1e:d0:24:ac:98:a8:ad:33:09:e4:06:20:a5:f5:a2:ef:2e:d3:
44:67:a2:2f:6e:61:b3:18:ea:bd:91:73:2c:f4:03:e5:9e:cf:
97:91:81:59:8e:24:2a:5d:7f:85:fe:1d:59:bf:3a:65:db:6e:
95:31:9b:04:f6:d7:40:3e:14:be:6f:60:ae:61:e7:60:8c:fd:
50:46:97:24:dd:8c:c3:2b:c9:6a:b9:fb:74:ea:3f:42:3f:95:
38:09:b5:14:8a:b1:e2:db:19:7e:c2:20:a1:43:63:dd:43:80:
22:0d:e7:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:18 2026 by rpki-client