
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34302e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e34302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: V6J4xH/iy1DaovhoTLpaVgd/Usyz+oGSTyLOHeM+hzo=
Subject key identifier: 24:73:CE:83:68:D0:34:CC:C6:EE:2C:8F:F3:B4:E4:C8:C0:BA:FE:7C
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 0BA801062AF5034EF56ABEEDA6343BC37AA841CE
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34302e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:51:16 +0000
ROA not before: Fri 05 Jun 2026 05:46:16 +0000
ROA not after: Fri 04 Jun 2027 05:51:16 +0000
asID: 24426
IP address blocks: 103.236.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a8:01:06:2a:f5:03:4e:f5:6a:be:ed:a6:34:3b:c3:7a:a8:41:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:46:16 2026 GMT
Not After : Jun 4 05:51:16 2027 GMT
Subject: CN=2473CE8368D034CCC6EE2C8FF3B4E4C8C0BAFE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:dc:45:14:0c:71:dd:25:d9:94:d0:e1:65:
6d:93:ac:07:4a:19:45:56:10:35:5f:9f:e7:58:3e:
6a:d3:ba:ef:5d:ec:80:f6:5d:03:27:e1:d1:61:3e:
88:89:72:f1:2b:fc:9b:a3:2e:45:da:f5:f6:6b:fa:
75:51:08:fd:65:54:93:fc:39:d7:e2:06:e2:5d:9f:
c9:68:9c:e0:6c:72:f5:83:48:ed:98:50:f7:82:65:
f4:13:04:d5:d6:20:9f:d6:f4:6c:99:df:87:8d:db:
41:49:e8:22:67:57:54:d1:f1:27:62:67:13:8e:60:
be:af:ea:29:f5:12:32:e8:f7:db:d3:e6:5d:d6:40:
36:9b:19:94:a0:ac:41:e7:c4:04:ec:19:3e:39:35:
14:df:ec:b9:c4:b5:76:7c:c0:43:47:00:ff:d9:54:
d5:79:a1:34:ab:84:38:60:85:f5:c6:9b:39:87:a1:
22:a8:f2:3d:30:e0:b4:43:f7:a6:74:b3:d9:91:bf:
1b:8d:a8:37:ac:2e:6d:b0:b7:74:b4:12:b7:fc:21:
91:dc:57:36:7d:53:2d:04:ed:c8:2d:50:24:97:70:
ee:82:1e:27:5a:13:c1:d6:48:32:42:75:24:e7:2f:
cb:ab:60:ee:7c:1d:ea:db:1d:26:68:8e:14:16:de:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:73:CE:83:68:D0:34:CC:C6:EE:2C:8F:F3:B4:E4:C8:C0:BA:FE:7C
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34302e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.40.0/22
Signature Algorithm: sha256WithRSAEncryption
27:fb:9e:51:30:e1:55:93:24:d7:ce:5c:d4:73:92:e3:e2:2e:
2a:a8:bc:46:c8:52:7b:35:59:0e:0b:40:db:1f:61:31:9d:40:
a2:5e:d8:05:89:5b:07:88:ec:45:8a:03:05:8a:2b:30:3e:f4:
d5:cb:af:2b:14:b9:c9:19:8b:06:53:b8:48:4a:7c:e6:49:c8:
bb:9b:b0:3f:c3:d6:cb:b0:59:a5:a1:96:57:db:f0:cf:5c:0a:
3e:ac:b0:ed:96:7c:11:27:4f:83:d7:3a:1a:d1:27:75:9f:ca:
9a:2b:45:04:3d:25:bf:af:cf:a3:8f:8c:37:7e:75:69:08:9a:
3f:8e:f4:00:c1:78:2c:ac:de:65:d3:2d:1a:af:07:77:c5:98:
18:a5:73:cb:3b:bf:db:12:5c:01:27:ab:ba:5e:ba:b0:67:1e:
75:68:45:19:27:40:e8:23:8d:1b:92:22:90:59:00:ef:30:a6:
33:ae:2e:db:6b:51:6a:99:64:dd:43:68:77:e4:48:2c:31:c2:
34:5d:68:94:77:8e:f9:b3:76:e1:e7:42:2d:64:0c:87:eb:ff:
43:cf:70:05:50:71:85:51:5c:ee:3c:96:94:06:5c:ac:58:7c:
ec:1b:6c:3c:20:76:f9:60:5b:0d:1b:89:7f:83:fb:43:51:e7:
4c:ae:59:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:52 2026 by rpki-client