
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e33362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: Uqk4Zuplz7gcFkkTvhJDr4/vJKv0Wsd1LpPkxOTAI2c=
Subject key identifier: B9:07:19:EE:C0:7E:F4:78:33:99:14:FC:00:80:7D:90:1E:7A:AD:FD
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 1857412F1DF0E80D664703A7A915F6577F5BD5EE
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:12 +0000
ROA not before: Fri 05 Jun 2026 05:43:12 +0000
ROA not after: Fri 04 Jun 2027 05:48:12 +0000
asID: 24426
IP address blocks: 103.236.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:57:41:2f:1d:f0:e8:0d:66:47:03:a7:a9:15:f6:57:7f:5b:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:12 2026 GMT
Not After : Jun 4 05:48:12 2027 GMT
Subject: CN=B90719EEC07EF478339914FC00807D901E7AADFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:1b:27:aa:75:fb:f0:8d:5f:69:81:c7:bb:
c4:36:55:78:bb:aa:9e:14:9f:ec:ad:bb:80:bf:86:
9d:e8:1c:a3:2c:73:be:73:ec:f6:6c:db:ca:7f:8c:
8a:32:c4:34:5f:eb:cc:b0:4f:2a:6b:ca:85:2d:cb:
90:41:01:dd:b4:e1:8f:65:75:49:a6:f0:f5:da:f6:
3c:f0:90:60:fb:30:a7:1e:20:a7:d8:de:18:53:f7:
b6:a9:2e:46:2d:ab:e7:31:6a:00:49:79:f9:8a:10:
78:cd:b1:f6:80:2a:f6:ca:49:a8:88:5c:93:0a:c0:
a5:ce:9a:6a:83:4c:80:a1:1b:d7:22:10:53:95:66:
d9:3d:af:da:be:75:ea:85:2b:1d:22:42:37:5d:c0:
88:61:00:f2:ba:a6:e9:fa:86:7a:80:7e:99:8f:3a:
0b:33:af:0d:c7:bd:d6:b9:83:3f:96:23:8d:a5:aa:
94:c5:19:32:ac:46:60:8a:bc:bb:9f:c4:3c:b1:5c:
68:cf:50:c8:58:83:de:9f:d1:b2:e8:8a:97:f7:8b:
36:87:9d:ea:56:55:ac:7b:e9:0f:63:d0:60:86:7e:
05:56:88:b9:8b:b5:46:2c:f5:11:7d:13:35:cc:65:
73:4f:30:4d:af:76:c8:18:82:06:f8:cf:1f:27:e7:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:07:19:EE:C0:7E:F4:78:33:99:14:FC:00:80:7D:90:1E:7A:AD:FD
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.36.0/22
Signature Algorithm: sha256WithRSAEncryption
55:03:5c:07:c3:10:cb:25:a4:9e:01:97:c3:a7:94:53:eb:b7:
93:0b:8b:54:3e:2c:c1:45:b3:75:8e:d6:f2:9d:b7:84:a7:bc:
1c:48:95:c3:0b:15:6e:2d:24:7e:53:eb:dd:d7:e7:73:10:9b:
a9:92:c5:3c:e4:b6:1c:7d:a2:63:58:5f:13:64:97:de:5c:14:
22:32:7f:01:fa:3b:7d:6f:b8:ff:19:c3:a9:f3:c2:f0:80:ba:
85:1a:94:fe:ef:81:b7:ca:c1:36:3e:45:78:08:ab:84:af:26:
0a:15:d8:1d:20:f5:24:2c:af:83:0d:7e:40:1e:3c:56:cf:06:
01:e0:4f:15:ae:a7:e1:83:f5:e6:9c:a9:5e:93:92:a3:20:81:
e8:a0:ac:75:aa:be:ff:bb:c5:f9:3a:e4:5f:f7:85:a9:d6:47:
5a:cb:91:2b:6d:ac:1d:57:26:2a:0f:66:c4:de:73:44:dc:6f:
ab:1f:30:c8:59:b7:78:0a:f4:6d:c5:63:45:a1:0a:1f:d2:65:
4d:60:41:56:5b:a7:1a:96:d1:ae:d1:0e:30:68:6c:6c:bb:e9:
e0:e7:4f:2e:81:f4:9f:3e:78:ce:ba:f2:63:17:aa:bd:a1:74:
6d:99:3d:b1:a0:ab:f5:fb:7e:66:0a:ca:29:f6:bb:73:83:9b:
39:ff:96:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:52 2026 by rpki-client