
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e382e302f32322d3232203d3e203234343236.roa
File: 3130332e3233362e382e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: Buy+EGUH3jyAIkG/uOHoJRYg1QEpkhoMOE5TlNsZ4aE=
Subject key identifier: 06:73:FB:0F:CE:B2:28:63:7D:76:64:69:FD:CD:C7:F4:CB:AF:1B:3A
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 4E4A3330F1E29B8C61E0AC80B0544881E3FA4813
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e382e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:11 +0000
ROA not before: Fri 05 Jun 2026 05:43:11 +0000
ROA not after: Fri 04 Jun 2027 05:48:11 +0000
asID: 24426
IP address blocks: 103.236.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4a:33:30:f1:e2:9b:8c:61:e0:ac:80:b0:54:48:81:e3:fa:48:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:11 2026 GMT
Not After : Jun 4 05:48:11 2027 GMT
Subject: CN=0673FB0FCEB228637D766469FDCDC7F4CBAF1B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:eb:60:60:a0:49:8c:eb:c4:bb:ea:67:43:
70:cd:78:75:ab:e5:df:a9:0a:d9:09:dd:4e:93:ee:
ec:82:96:aa:f5:53:81:c0:15:34:9b:8d:e0:43:65:
c1:f1:65:bf:dc:34:26:dc:99:00:e7:30:b7:6e:6e:
17:73:57:ac:c3:12:f8:af:ba:13:66:3e:1b:fb:cc:
30:04:23:b7:19:80:62:d8:e6:9b:a2:45:e7:60:b1:
31:35:0e:f6:5a:68:02:e4:d4:ae:22:98:65:88:72:
55:7d:09:08:8b:61:4f:91:57:f0:99:cd:31:25:2f:
17:b1:9d:17:95:4f:98:26:9a:09:fe:3b:14:f1:fa:
36:2f:f6:df:bf:d5:fb:70:46:0e:71:0f:f4:28:08:
4b:14:96:5b:10:50:2b:77:cf:54:c4:3c:c9:38:9c:
b9:f6:fa:0c:fe:c4:86:b8:10:13:1e:a2:6b:70:7f:
6a:56:f6:d5:85:0d:05:f2:d9:24:55:41:dd:f3:8d:
a5:98:60:4e:49:a9:fb:31:95:bc:ce:cd:85:a6:6d:
60:66:2b:c6:3e:41:4b:85:6f:eb:fa:d9:df:7f:a5:
7a:ee:c7:e3:f6:b1:31:45:a7:38:6f:13:cb:5a:ca:
7c:30:80:80:37:d1:bb:20:77:fa:f8:4e:0a:38:44:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:FB:0F:CE:B2:28:63:7D:76:64:69:FD:CD:C7:F4:CB:AF:1B:3A
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e382e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.8.0/22
Signature Algorithm: sha256WithRSAEncryption
87:65:58:14:5b:6d:ca:fd:c8:6d:25:13:26:23:af:ed:82:c0:
e0:4d:47:17:dd:08:f4:d3:82:c2:e0:b4:39:2d:d2:ea:05:3d:
12:a3:fe:df:83:68:17:b9:09:83:b9:61:8d:e9:69:73:14:df:
63:ae:20:bd:f0:44:52:87:8d:5f:61:e6:80:aa:3d:0c:03:93:
68:ab:9d:13:43:48:50:de:37:3a:db:d1:42:fd:a8:f0:3a:f0:
71:97:eb:b3:67:52:e1:dd:0c:15:e1:42:23:53:1f:e5:6a:f0:
4e:81:f4:41:0f:ee:9b:6f:4c:5a:75:83:b4:1e:1e:b4:98:63:
ac:1a:0a:b0:40:45:bc:f7:5f:5a:a0:51:55:73:e4:e3:f2:d3:
17:6b:92:df:06:19:0e:50:b1:47:1c:8a:fe:ac:f6:e5:47:fd:
a8:a8:5a:44:48:b5:b8:44:87:33:a8:3a:14:c8:da:fe:9a:0c:
cb:62:eb:01:f9:c2:1f:ff:d3:2a:91:25:3f:fa:49:99:82:34:
b0:ca:88:5c:5d:3a:19:8e:ca:35:26:08:24:4b:c7:2f:8b:ed:
cc:02:e5:a8:af:05:15:52:32:88:bb:47:81:95:fc:5d:8f:c9:
d9:fb:93:3e:5d:d0:c3:92:29:c2:f8:75:a7:b3:0f:c5:a1:46:
d9:60:6f:ce
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUTkozMPHim4xh4KyAsFRIgeP6SBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQzMTFaFw0yNzA2MDQwNTQ4MTFaMDMxMTAvBgNV
BAMTKDA2NzNGQjBGQ0VCMjI4NjM3RDc2NjQ2OUZEQ0RDN0Y0Q0JBRjFCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/letgYKBJjOvEu+pnQ3DNeHWr
5d+pCtkJ3U6T7uyClqr1U4HAFTSbjeBDZcHxZb/cNCbcmQDnMLdubhdzV6zDEviv
uhNmPhv7zDAEI7cZgGLY5puiRedgsTE1DvZaaALk1K4imGWIclV9CQiLYU+RV/CZ
zTElLxexnReVT5gmmgn+OxTx+jYv9t+/1ftwRg5xD/QoCEsUllsQUCt3z1TEPMk4
nLn2+gz+xIa4EBMeomtwf2pW9tWFDQXy2SRVQd3zjaWYYE5JqfsxlbzOzYWmbWBm
K8Y+QUuFb+v62d9/pXrux+P2sTFFpzhvE8taynwwgIA30bsgd/r4Tgo4RLfTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUBnP7D86yKGN9dmRp/c3H9MuvGzowHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMjMz
MzYyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfsCDANBgkqhkiG9w0BAQsFAAOCAQEAh2VYFFttyv3IbSUTJiOv7YLA4E1H
F90I9NOCwuC0OS3S6gU9EqP+34NoF7kJg7lhjelpcxTfY64gvfBEUoeNX2HmgKo9
DAOTaKudE0NIUN43OtvRQv2o8DrwcZfrs2dS4d0MFeFCI1Mf5WrwToH0QQ/um29M
WnWDtB4etJhjrBoKsEBFvPdfWqBRVXPk4/LTF2uS3wYZDlCxRxyK/qz25Uf9qKha
REi1uESHM6g6FMja/poMy2LrAfnCH//TKpElP/pJmYI0sMqIXF06GY7KNSYIJEvH
L4vtzALlqK8FFVIyiLtHgZX8XY/J2fuTPl3Qw5Ipwvh1p7MPxaFG2WBvzg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:53 2026 by rpki-client