
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38352e302f32342d3234203d3e203233373234.roa
File: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=
Subject key identifier: C1:3F:69:CA:09:30:81:65:E9:2D:06:B2:EB:73:0D:8A:19:82:F1:67
Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial: 143025A4DA6250DD2AE2D6B8C0481B13BE0AE3A0
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38352e302f32342d3234203d3e203233373234.roa
Signing time: Wed 15 Apr 2026 08:59:32 +0000
ROA not before: Wed 15 Apr 2026 08:54:32 +0000
ROA not after: Wed 14 Apr 2027 08:59:32 +0000
asID: 23724
IP address blocks: 103.235.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:30:25:a4:da:62:50:dd:2a:e2:d6:b8:c0:48:1b:13:be:0a:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Validity
Not Before: Apr 15 08:54:32 2026 GMT
Not After : Apr 14 08:59:32 2027 GMT
Subject: CN=C13F69CA09308165E92D06B2EB730D8A1982F167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:2c:13:b0:89:bb:a0:ae:5d:c4:1c:47:a6:
bb:01:4e:dd:78:c9:0a:59:47:b1:85:fe:8e:e3:a6:
67:bb:59:55:10:40:64:b4:7d:5a:9d:ce:e1:08:6d:
3d:92:70:e2:d1:0b:cf:48:c9:6f:2c:89:eb:9a:1b:
59:6f:23:b2:f5:b4:6c:b4:ad:59:b0:7f:41:d5:bf:
0e:97:da:92:2b:1e:c2:9f:f4:17:26:9d:cd:f7:22:
44:8d:e8:14:27:77:ac:cb:53:a0:d2:26:ff:37:6f:
9d:5e:b2:85:88:3c:77:d5:ca:29:5c:3f:67:dc:70:
31:e5:dc:8c:b2:df:cb:c0:ef:44:4c:97:f2:6e:ce:
92:2b:33:11:1f:44:9e:a8:84:50:70:27:4e:a2:6f:
9c:2f:04:56:df:1f:75:ba:26:04:5a:98:5a:bb:3b:
19:b5:be:5b:14:9c:8f:c2:a4:2e:fb:f3:ed:79:5a:
f4:44:fb:ff:34:01:a8:d6:b1:65:78:95:cc:d2:86:
d5:ed:38:ed:bc:81:35:02:d0:19:96:b7:27:e2:0d:
16:28:6f:8b:cb:92:5b:47:c4:94:bc:bb:2d:90:41:
eb:25:8d:c0:16:36:be:22:93:a4:ff:21:e3:c4:4b:
86:7c:17:49:2b:9a:35:d3:cc:0f:b0:1b:ac:0f:60:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3F:69:CA:09:30:81:65:E9:2D:06:B2:EB:73:0D:8A:19:82:F1:67
X509v3 Authority Key Identifier:
keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38352e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:41:71:c2:17:de:a5:af:c7:8f:ca:cc:9c:46:16:6a:4f:77:
46:d1:0f:0a:36:f3:27:bf:f7:24:2a:50:30:5c:b5:e0:b7:41:
53:a0:d0:e3:19:8d:23:5d:74:7c:2d:e3:03:e2:af:ba:3f:e7:
28:cd:66:1b:2d:9d:09:8c:d8:81:2c:0d:78:ca:3f:e7:dc:31:
bd:62:86:62:a9:ef:c4:f1:12:7f:a9:aa:0b:23:ab:a9:2d:c5:
9e:0d:81:08:ff:a3:a0:32:a1:ae:c5:5c:62:73:19:d0:f7:1e:
5f:4e:0e:c6:3b:47:c0:e7:2c:77:ec:6b:01:eb:e9:8f:3a:ac:
dd:f9:f2:37:6d:77:6d:4e:37:0d:e6:23:5a:c7:e4:b0:05:54:
5b:47:a4:74:e7:37:8d:85:ad:a8:b0:51:95:37:70:39:66:3f:
2c:d7:f6:2b:7d:3a:5f:7d:de:c3:a8:d9:65:13:9e:5a:0a:25:
56:e3:ec:89:5c:96:98:ad:23:fb:8b:2d:fc:24:55:ce:b8:7b:
e2:e7:ce:3e:8a:59:1f:ce:d0:4c:81:5f:a7:56:7f:c2:f3:ea:
e1:42:4c:7b:d7:8a:c0:bc:d2:ba:6c:c9:1f:91:71:4a:87:bb:
88:b7:19:f1:45:19:1f:0d:57:03:eb:6d:0c:fa:f5:ee:3e:87:
cd:66:4a:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:26 2026 by rpki-client