
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33322e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e33322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: zpVTKQwH+Oe5z3uQBC54saLZQSIfQ9A6V78SusXxX9s=
Subject key identifier: 53:9D:1A:C9:01:D0:FB:4F:18:69:F8:9A:EA:6D:45:3A:49:63:E7:E1
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 09138669CFB78944FDB8E8AE7C025726F794B6DA
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33322e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:49:19 +0000
ROA not before: Fri 05 Jun 2026 05:44:19 +0000
ROA not after: Fri 04 Jun 2027 05:49:19 +0000
asID: 24426
IP address blocks: 103.236.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:13:86:69:cf:b7:89:44:fd:b8:e8:ae:7c:02:57:26:f7:94:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:44:19 2026 GMT
Not After : Jun 4 05:49:19 2027 GMT
Subject: CN=539D1AC901D0FB4F1869F89AEA6D453A4963E7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:db:95:89:ae:e6:e0:53:89:98:a2:af:41:
18:21:60:16:0d:c5:b1:8d:be:6f:9b:27:69:a0:50:
1b:a0:3a:d4:75:c2:c8:ac:a3:dd:11:78:6e:1a:f0:
d6:50:27:56:2e:ff:53:24:46:71:d6:8b:58:ea:12:
27:ee:fd:0e:28:8e:25:cc:d6:0d:dd:a9:8c:50:cf:
ef:f0:f9:8c:f6:12:c8:00:28:e7:b5:90:fb:98:ab:
7d:c3:b0:0c:f5:1e:c1:6e:a6:c9:d6:f2:67:08:e0:
8c:14:b2:f1:a0:44:92:68:a3:89:ae:41:f6:9e:c8:
15:e9:67:31:17:03:cc:d3:84:d6:ee:69:2b:f9:66:
d8:53:f8:c2:bd:74:5d:3b:6f:3e:f7:7d:5b:30:a2:
91:63:51:83:97:d1:35:94:17:cd:66:2c:e4:34:2e:
39:ec:b4:c2:e2:0e:3f:ef:dd:98:10:ee:52:60:91:
e3:59:6f:ae:d4:41:f7:42:d8:8b:ce:2b:61:09:c5:
73:03:ea:bd:fa:2f:4b:65:13:bd:a5:23:3c:ec:8f:
a0:9d:a2:4b:e8:f6:ba:bd:51:ea:cc:0a:c2:64:6b:
56:98:cc:71:ea:81:f8:c0:d6:17:43:06:f0:8d:aa:
bb:36:96:bf:f3:e5:ae:48:56:86:b6:51:3d:e8:75:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:1A:C9:01:D0:FB:4F:18:69:F8:9A:EA:6D:45:3A:49:63:E7:E1
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33322e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
47:f6:c3:13:8d:0a:d1:e9:f3:b7:52:8e:bb:2f:e4:a4:bc:6f:
1b:a7:d8:9b:0b:d2:7b:dd:7d:be:25:b4:ee:8a:52:0e:a7:a5:
98:e5:2b:04:01:6b:18:f3:95:c2:5c:53:d0:70:12:1e:84:2a:
18:11:dd:e1:87:ed:e8:98:06:da:f7:b1:db:92:64:bc:00:9b:
32:e9:86:80:38:1a:69:03:25:68:f4:21:b5:88:a4:49:bf:b9:
80:8b:a6:e2:24:fc:54:1e:44:ce:f8:67:44:b9:6f:08:7d:5b:
9e:35:4b:ef:ca:28:8c:57:75:ae:9e:4a:c1:eb:b6:af:dd:a9:
61:0d:f7:c7:d9:f2:b8:d3:50:43:02:c9:49:35:a8:01:55:39:
e3:9d:63:94:78:26:d7:c9:40:5a:5a:cc:dd:5e:9e:16:2f:18:
58:7d:48:18:63:91:ad:4a:78:67:40:77:4b:5f:d5:bd:ae:c6:
01:8c:d7:85:ab:88:6a:16:5d:d2:b0:5b:ca:c5:d5:cf:25:68:
fa:07:13:ca:39:7a:b7:bf:28:38:b4:9b:9e:12:ef:7b:51:0e:
bd:0f:ec:53:41:c4:ca:5d:be:41:96:35:c9:19:01:9a:72:c1:
d8:c4:73:ff:59:d0:66:06:0e:23:66:c9:b9:c0:76:07:19:80:
61:d9:68:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:45 2026 by rpki-client