
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e342e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e342e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: lA4RjhytmWL7WCHsnOA5o5n3D42InP/0/WCtRBV70Fg=
Subject key identifier: 0F:0E:91:40:C1:65:B5:3B:47:EF:FA:BE:17:C6:0E:C3:7A:8A:45:A3
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 48AF8CB077042E2E0F719132CAEBBAD3110BA1C4
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e342e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:11 +0000
ROA not before: Fri 05 Jun 2026 05:43:11 +0000
ROA not after: Fri 04 Jun 2027 05:48:11 +0000
asID: 24426
IP address blocks: 103.236.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:af:8c:b0:77:04:2e:2e:0f:71:91:32:ca:eb:ba:d3:11:0b:a1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:11 2026 GMT
Not After : Jun 4 05:48:11 2027 GMT
Subject: CN=0F0E9140C165B53B47EFFABE17C60EC37A8A45A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:55:83:e6:f9:66:6b:8a:9d:2e:9b:df:12:
5e:6f:e3:7a:46:5c:0a:cd:48:fa:44:5a:df:df:98:
14:b4:2c:eb:26:6e:18:be:ab:f6:37:a7:5f:63:59:
e3:3b:76:ae:89:44:ea:ef:a1:2d:4f:86:09:bd:7f:
43:64:38:b6:dd:b1:57:3e:ee:58:7b:0b:2a:40:e2:
a8:7c:8f:8b:8e:aa:bc:11:ff:ca:63:2c:22:05:a9:
38:c9:5f:1a:7d:56:da:e0:ff:8e:2d:5f:c2:d4:35:
d9:06:f5:0b:5a:5d:6f:9d:12:8d:da:6d:76:18:bf:
21:1c:61:f7:45:b0:0e:83:27:1e:0e:35:b1:ff:6c:
f8:41:90:d4:9b:74:2d:97:5a:0e:ed:16:be:ac:8d:
2e:e5:53:df:1b:dc:4d:77:4e:b9:ae:54:e3:4e:78:
f5:2a:55:e9:00:1c:59:c2:cf:e4:97:c8:dc:a7:94:
3c:23:25:1b:f5:a1:fe:3e:c6:91:54:6d:7c:11:3d:
60:08:11:22:f4:6a:1b:39:60:65:79:68:81:89:cf:
fe:3d:c2:cb:53:51:ad:54:66:94:45:43:8d:d6:18:
36:da:fe:dc:a9:3b:7a:78:8d:77:b5:7e:ec:57:ce:
af:2b:6f:42:cb:85:1e:d8:d9:44:c2:83:0f:73:a5:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0E:91:40:C1:65:B5:3B:47:EF:FA:BE:17:C6:0E:C3:7A:8A:45:A3
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e342e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:56:36:24:a6:e2:23:ab:42:2d:a2:20:be:9c:6d:36:2f:2e:
56:46:1d:c0:90:84:6d:56:4c:e5:a3:88:21:95:67:ef:e2:a7:
c0:ec:a5:ff:53:31:c7:37:f2:55:38:f0:5d:a6:8a:10:e7:df:
4e:f9:90:d3:f2:75:fe:e7:aa:20:d2:41:66:c6:86:a7:fe:76:
71:0d:b7:53:79:0a:04:c5:07:ad:ab:aa:a7:d2:20:f7:3a:5a:
d3:f9:74:2a:08:1f:27:d8:67:23:00:76:de:35:b9:30:e5:11:
c0:f6:4a:4e:af:37:9d:f4:cc:15:c2:4f:23:15:0e:60:93:45:
2c:36:16:d6:37:49:b3:18:41:54:92:c1:0d:b9:76:8e:e4:19:
c8:4f:3e:b8:b7:ee:ce:15:81:5b:03:19:45:b1:04:fb:8b:1b:
e7:26:a9:e1:7d:e6:30:96:6c:7f:c8:a8:98:47:6c:a6:71:0f:
bd:f6:06:ee:ef:4a:46:2d:ff:98:5c:33:1e:70:de:af:ef:0c:
2e:30:a6:93:3f:3a:f0:95:28:38:c4:95:40:29:23:74:6a:0e:
2b:39:41:40:93:fc:74:3d:d6:7b:69:4c:03:fb:c8:1f:0b:04:
fb:fe:e9:1a:85:03:45:33:dc:e5:3b:0a:2b:df:b9:6a:2b:c0:
ec:3a:ad:ee
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUSK+MsHcELi4PcZEyyuu60xELocQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQzMTFaFw0yNzA2MDQwNTQ4MTFaMDMxMTAvBgNV
BAMTKDBGMEU5MTQwQzE2NUI1M0I0N0VGRkFCRTE3QzYwRUMzN0E4QTQ1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2lWD5vlma4qdLpvfEl5v43pG
XArNSPpEWt/fmBS0LOsmbhi+q/Y3p19jWeM7dq6JROrvoS1Phgm9f0NkOLbdsVc+
7lh7CypA4qh8j4uOqrwR/8pjLCIFqTjJXxp9Vtrg/44tX8LUNdkG9QtaXW+dEo3a
bXYYvyEcYfdFsA6DJx4ONbH/bPhBkNSbdC2XWg7tFr6sjS7lU98b3E13TrmuVONO
ePUqVekAHFnCz+SXyNynlDwjJRv1of4+xpFUbXwRPWAIESL0ahs5YGV5aIGJz/49
wstTUa1UZpRFQ43WGDba/typO3p4jXe1fuxXzq8rb0LLhR7Y2UTCgw9zpbuDAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUDw6RQMFltTtH7/q+F8YOw3qKRaMwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMjMz
MzYyZTM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfsBDANBgkqhkiG9w0BAQsFAAOCAQEAfFY2JKbiI6tCLaIgvpxtNi8uVkYd
wJCEbVZM5aOIIZVn7+KnwOyl/1MxxzfyVTjwXaaKEOffTvmQ0/J1/ueqINJBZsaG
p/52cQ23U3kKBMUHrauqp9Ig9zpa0/l0KggfJ9hnIwB23jW5MOURwPZKTq83nfTM
FcJPIxUOYJNFLDYW1jdJsxhBVJLBDbl2juQZyE8+uLfuzhWBWwMZRbEE+4sb5yap
4X3mMJZsf8iomEdspnEPvfYG7u9KRi3/mFwzHnDer+8MLjCmkz868JUoOMSVQCkj
dGoOKzlBQJP8dD3We2lMA/vIHwsE+/7pGoUDRTPc5TsKK9+5aivA7Dqt7g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:19 2026 by rpki-client