
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203536303436.roa
File: 3130332e3230352e3235322e302f32322d3232203d3e203536303436.roa (raw, json)
Hash identifier: iXWqqzv50EMSdHqsZ4gwzOOHtSm/EAuT14Gth1Kun/c=
Subject key identifier: 8B:75:00:9A:91:19:C6:8C:2D:6E:5B:CE:E5:30:03:3B:30:B3:A9:B6
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 557D04C920D81DFD1E649591634FFA6607CEADCF
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203536303436.roa
Signing time: Tue 14 Apr 2026 07:32:01 +0000
ROA not before: Tue 14 Apr 2026 07:27:01 +0000
ROA not after: Tue 13 Apr 2027 07:32:01 +0000
asID: 56046
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7d:04:c9:20:d8:1d:fd:1e:64:95:91:63:4f:fa:66:07:ce:ad:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:27:01 2026 GMT
Not After : Apr 13 07:32:01 2027 GMT
Subject: CN=8B75009A9119C68C2D6E5BCEE530033B30B3A9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:db:af:d2:f4:f6:bb:a0:36:29:dd:99:1b:
57:0d:c7:db:ff:c4:1e:e4:da:49:9c:e3:16:29:00:
fd:14:b6:40:93:93:d1:84:04:68:16:38:16:a9:b8:
e2:67:69:90:4b:60:cc:b5:b3:de:4d:2d:a2:16:84:
c7:5b:8a:ad:a7:0b:95:03:82:50:fe:79:f7:29:ba:
88:7f:c7:f4:c7:33:d2:eb:13:e5:dc:80:e9:41:63:
f2:8a:36:2d:5c:5a:5a:fb:ee:ba:85:8a:d6:7f:19:
36:e4:ad:22:26:3d:40:5e:d9:fe:b3:66:00:1c:07:
d9:15:6c:fc:d4:70:2c:e4:61:e4:5a:0c:48:61:f6:
1e:48:76:4f:09:0a:2c:49:61:c2:75:e3:d9:4c:2b:
5c:ad:1b:89:48:36:89:db:0d:4d:46:27:9c:55:d5:
be:94:42:a9:80:92:a5:22:ec:60:72:d3:92:ca:40:
4b:a7:66:f6:bd:5e:1d:61:79:29:d4:0d:89:37:af:
a2:cb:48:61:e5:df:4a:14:3b:da:19:fc:3d:58:04:
f4:1d:06:24:7a:d6:b1:09:08:ae:8c:aa:e9:96:a1:
14:06:88:da:96:10:74:18:1b:e3:eb:9c:6c:da:86:
62:0b:b0:8b:b5:1a:6f:2b:81:12:4f:1a:aa:7e:c7:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:00:9A:91:19:C6:8C:2D:6E:5B:CE:E5:30:03:3B:30:B3:A9:B6
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
81:99:a2:cd:8c:d8:0e:69:2b:9c:31:da:b5:a0:64:c1:bc:6b:
83:c7:fc:a4:18:67:92:4a:ec:02:e2:1a:08:dd:fb:f4:9a:90:
7f:12:22:9e:fb:5e:64:79:3b:a1:32:fe:48:32:e8:bb:09:ee:
96:6b:02:25:da:60:3c:e3:20:a8:4e:3d:fb:52:39:3a:c2:3c:
cc:1a:86:a7:d1:34:2c:2d:a2:8d:80:a6:b0:d1:20:4c:ab:b6:
7d:19:1c:f0:f5:2d:e4:51:81:1f:1c:a2:dd:35:25:f8:b0:68:
ba:0c:c1:1b:31:0a:a6:83:c5:38:1c:9e:6c:ae:63:ec:4e:60:
71:13:63:17:dd:f4:f3:f3:a8:88:03:31:97:90:7c:d1:6a:b2:
69:aa:de:72:67:93:41:ee:cf:90:cc:fe:19:68:1d:eb:1a:09:
88:a2:6f:9e:1e:7d:c2:c7:ca:d4:29:35:dd:f3:d9:09:9b:18:
3c:26:57:c2:44:33:9d:7d:8a:a4:22:89:fc:4f:f6:51:5a:ac:
eb:c9:13:66:51:6f:74:65:ae:26:75:7f:12:3d:24:47:17:e9:
0f:c1:8f:df:34:12:39:de:03:59:4d:e6:b4:af:05:f2:b3:59:
a2:8a:2e:08:59:42:7a:57:8b:a8:cb:66:a1:65:f0:b5:f4:5b:
c4:02:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:55 2026 by rpki-client