
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa
File: 3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa (raw, json)
Hash identifier: E3qazXAKXbLAYMehfHjSuwWGeMEVX33ejGlf3IsBBCQ=
Subject key identifier: 78:F6:21:9A:94:15:70:2B:A7:A1:76:08:D7:D7:D7:E6:05:77:B4:29
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 275E8000FB047F6CC10DCCCFE913050D8FE4328B
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa
Signing time: Tue 14 Apr 2026 07:32:01 +0000
ROA not before: Tue 14 Apr 2026 07:27:01 +0000
ROA not after: Tue 13 Apr 2027 07:32:01 +0000
asID: 13378
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5e:80:00:fb:04:7f:6c:c1:0d:cc:cf:e9:13:05:0d:8f:e4:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:27:01 2026 GMT
Not After : Apr 13 07:32:01 2027 GMT
Subject: CN=78F6219A9415702BA7A17608D7D7D7E60577B429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:de:f3:62:0c:61:17:67:20:b3:e7:6e:c9:
f2:a2:a3:0e:9e:e8:63:6f:14:3d:8c:6d:d6:02:86:
e5:73:b3:88:d2:f7:32:5a:64:aa:ea:0e:50:04:0a:
e3:64:6f:54:cb:d2:67:44:e5:bf:7f:01:a4:f1:65:
45:05:6c:cd:99:be:20:0b:1a:24:d0:66:56:e4:d3:
ab:2c:b4:b0:a1:f6:9c:62:1c:f5:46:80:b7:38:51:
4e:ad:d8:3d:6f:a6:4c:9d:74:17:2f:5e:0f:00:08:
95:ed:20:b8:e8:58:1e:11:92:1c:7f:77:82:40:c9:
65:0d:22:c5:e0:eb:21:be:3a:d5:cc:7d:eb:1e:91:
3f:4d:f2:f0:0d:88:e1:7c:f3:e0:5e:48:71:2c:54:
e2:7c:50:ad:66:1d:94:65:72:3d:cb:45:c4:28:15:
3b:a6:e9:4d:ba:7c:96:44:2a:f0:9a:94:70:e0:f1:
8c:f0:c8:67:9a:b8:c5:32:b7:9f:b8:c5:3a:a6:87:
08:14:ae:25:25:17:63:d1:7f:9e:14:f5:a2:96:b1:
d9:f5:f1:80:2f:b8:59:0e:1b:fb:85:e8:f2:6b:da:
d7:4a:5a:c3:48:92:b8:27:a8:70:30:9c:d2:2a:aa:
37:0c:94:63:f6:3e:c5:51:92:7e:38:58:0c:f9:05:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:21:9A:94:15:70:2B:A7:A1:76:08:D7:D7:D7:E6:05:77:B4:29
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:c0:b7:8e:c2:b6:af:6c:64:24:3a:b0:3f:66:5b:0e:f6:e0:
1d:66:b4:9b:a9:6c:32:2f:c0:80:c3:86:c0:0e:e1:a3:d9:a7:
c7:f2:e5:ef:08:2a:3f:e8:f1:22:48:5f:08:ea:6b:5d:d9:df:
f6:0c:d4:e1:a1:19:57:34:7e:b4:37:c2:ed:3a:ab:eb:28:a6:
ef:88:dd:d3:35:0e:48:7d:05:83:c3:27:f7:d4:44:62:28:c5:
12:2d:92:53:08:15:6f:9b:52:b7:58:66:7e:15:b4:44:9a:f0:
7a:f1:23:5b:7d:b9:f0:e3:6a:7f:1a:72:ac:33:f6:13:45:59:
64:61:e5:52:eb:c1:a4:66:5f:a5:a4:41:a9:50:36:d6:5c:60:
9e:d1:68:22:de:18:39:93:03:8b:d4:13:9a:c4:e9:b3:07:e4:
2c:cf:0b:e8:9e:9f:39:1c:50:13:56:2a:38:cc:11:28:3f:36:
4a:70:ca:a0:ec:bc:07:ea:35:d3:5c:ab:0a:3c:79:75:6a:44:
2e:bb:40:df:01:e4:01:2e:c2:df:4c:a7:69:11:bb:df:73:37:
6a:f4:73:6d:44:9a:83:90:74:b7:b0:fa:da:41:b7:bc:d0:67:
da:85:04:2e:c6:0b:aa:a7:c5:01:b0:4c:32:2d:83:63:28:3c:
87:96:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:12:52 2026 by rpki-client