
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
File: 3130332e33352e33322e302f32302d3230203d3e203234343236.roa (raw, json)
Hash identifier: baT0Y3rnlxqg6+Tjpm14IlEpAZB1yw2BqbplTQCBQ10=
Subject key identifier: E4:59:53:EA:19:99:8B:98:A5:6F:9E:16:68:38:59:50:CF:70:B6:CE
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 11F1CE8C2B0DEC5702A6F16062A3B695842BB994
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:51:16 +0000
ROA not before: Fri 05 Jun 2026 05:46:16 +0000
ROA not after: Fri 04 Jun 2027 05:51:16 +0000
asID: 24426
IP address blocks: 103.35.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f1:ce:8c:2b:0d:ec:57:02:a6:f1:60:62:a3:b6:95:84:2b:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:46:16 2026 GMT
Not After : Jun 4 05:51:16 2027 GMT
Subject: CN=E45953EA19998B98A56F9E1668385950CF70B6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:b6:df:21:36:b7:ab:e2:8b:3a:7c:bf:12:
cc:6d:55:64:e0:f9:c9:8f:1a:8b:d1:26:c1:0f:b0:
68:8d:05:ac:35:fb:84:c7:3f:9b:0b:b6:32:e6:c1:
3e:a7:a8:65:a3:34:05:84:56:fd:91:7c:d1:84:b7:
e6:a2:1c:40:69:f6:92:65:2a:73:b5:73:a6:ae:fd:
f8:c6:57:ae:f0:2b:25:d3:ff:eb:a6:0b:9e:dc:8d:
a4:b3:8a:f5:c1:8f:06:7a:e0:08:e1:c9:32:bd:cb:
72:13:56:43:5c:a9:85:82:a2:f1:5c:bc:12:cb:aa:
19:11:23:04:e9:60:38:be:03:20:c0:7e:0c:38:11:
5b:00:35:7e:82:a3:26:d6:a2:a5:9e:16:9a:6a:f2:
5c:65:2a:d5:0f:25:9e:c2:8b:51:8e:1d:e6:dd:20:
b0:57:26:7c:ab:75:da:ca:c3:b4:87:48:61:95:38:
f1:6c:61:84:e9:a7:25:7e:54:22:57:58:4c:d5:d4:
36:4a:9a:06:eb:a4:c8:99:6b:bf:66:80:cc:15:65:
4a:a3:4d:6e:be:e9:32:90:d7:01:c1:bf:78:53:45:
20:a5:cf:b9:ee:a0:b4:a8:d6:53:73:86:21:37:30:
a8:c2:c5:64:82:f2:d3:d7:b9:f5:b6:a5:4e:83:33:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:59:53:EA:19:99:8B:98:A5:6F:9E:16:68:38:59:50:CF:70:B6:CE
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.32.0/20
Signature Algorithm: sha256WithRSAEncryption
81:5f:83:86:e0:80:92:28:4f:d5:2a:65:fd:33:14:86:6b:cd:
ec:a0:d0:8c:51:1b:6b:dd:17:fa:79:3a:d3:7c:36:f9:e6:e9:
13:51:dc:63:25:6b:04:8b:f2:61:b2:03:1d:37:66:fb:6a:99:
87:7a:c1:8d:f3:16:76:65:50:33:0f:ad:56:1e:48:50:78:39:
f0:5c:f7:52:39:64:9d:eb:97:6d:3b:df:9f:2c:71:1e:32:cf:
0b:91:92:67:20:77:82:3f:5d:2e:73:58:08:42:31:2e:2a:98:
79:02:20:95:d7:d5:26:2f:dc:a6:a9:8d:3c:a2:3a:19:ed:9c:
ef:07:67:20:de:c5:52:83:15:3e:cd:e8:19:76:ac:44:de:80:
81:e7:c3:8b:af:d8:eb:80:a5:cf:9e:8b:56:07:2e:c5:cd:f1:
fd:d0:8c:1d:37:c4:ae:d1:22:15:3a:00:03:bd:1d:04:f4:e2:
16:fd:51:c5:29:51:09:e6:3c:24:f0:c0:42:1c:72:50:4d:d1:
c6:b2:bb:7d:85:d1:35:be:82:ef:4b:2d:e3:e4:e9:a7:dd:0f:
80:4c:95:9e:b7:9c:33:d7:db:94:5f:1f:8e:fe:67:13:97:ca:
41:87:05:99:03:b3:54:c6:a7:47:e6:b7:0c:01:05:c0:1a:ba:
e6:49:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:26 2026 by rpki-client