
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa
File: 3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier: /c8WP97/waU6H7N/9kbI2FM6+PkmjqOsVyxiXwYsJOg=
Subject key identifier: 38:9E:E7:AC:46:86:F0:EE:93:27:C3:ED:A0:71:38:F3:43:BA:88:1C
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 0455CFFD2E0DC7184041B01116DE0B0F83EE49DE
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa
Signing time: Tue 14 Apr 2026 07:54:49 +0000
ROA not before: Tue 14 Apr 2026 07:49:49 +0000
ROA not after: Tue 13 Apr 2027 07:54:49 +0000
asID: 23650
IP address blocks: 103.239.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:55:cf:fd:2e:0d:c7:18:40:41:b0:11:16:de:0b:0f:83:ee:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:49:49 2026 GMT
Not After : Apr 13 07:54:49 2027 GMT
Subject: CN=389EE7AC4686F0EE9327C3EDA07138F343BA881C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:55:b5:c1:19:b4:b0:85:cf:7c:ba:26:d4:
39:42:02:e5:02:8e:3a:53:0a:da:28:f0:4d:1d:ea:
dd:0f:5f:3f:d9:9b:34:49:9e:94:a7:24:7e:d5:92:
54:a6:89:41:ae:84:32:ef:23:80:2e:e3:b0:3e:37:
cc:d8:2d:e4:a6:f7:97:a4:70:4d:2c:dc:9e:66:f7:
8d:76:5b:4c:14:04:35:ac:da:bf:fc:2b:39:7f:bd:
9b:9c:89:86:ae:6a:2a:1d:f4:27:b3:6b:e8:40:c1:
10:03:b6:33:ca:c7:68:f0:d4:0d:0d:9e:75:99:4a:
d4:00:d2:2f:d5:f3:5d:2a:b3:51:48:d8:82:64:ff:
03:bf:de:0f:5d:ae:99:41:d8:5e:1d:04:71:9e:9d:
50:41:99:e2:62:4a:cc:4c:e1:7c:b3:06:51:9a:b8:
19:ef:79:04:22:bf:39:12:22:c7:5a:26:0d:40:78:
03:12:eb:78:0c:a8:d1:34:a2:ec:f1:41:7e:1e:65:
f5:c9:00:26:29:52:14:b2:c4:02:1b:ac:4c:59:cd:
9a:ea:d0:6e:79:29:f4:ef:b4:50:d2:8d:cc:e5:e6:
55:a4:c5:bb:b3:f6:59:ef:78:e7:eb:ff:6e:02:25:
ea:39:4a:9a:40:da:5b:0b:e9:f8:8b:e2:28:20:4b:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:E7:AC:46:86:F0:EE:93:27:C3:ED:A0:71:38:F3:43:BA:88:1C
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:bf:90:5c:ad:a5:d4:c6:57:6c:fc:3b:34:06:d9:e2:33:93:
f0:24:98:5a:88:71:bf:a7:18:9a:8f:7f:2e:ec:e2:86:72:9d:
be:2f:2c:1f:c5:24:98:12:32:b1:94:02:38:d4:93:bc:c3:6f:
59:c7:ea:ea:f7:24:d8:df:ad:99:a5:29:c0:12:a6:0b:1c:49:
9a:87:5f:3e:94:ac:10:f3:49:a8:f4:70:9f:ca:04:a7:e4:5d:
b7:b4:98:b1:a0:b0:cd:0a:d1:dc:26:5f:4e:53:cc:d2:05:e2:
d0:4e:9e:37:25:ae:98:38:b0:3b:68:14:43:23:9a:4c:ec:e5:
e7:7e:9b:79:81:7a:a5:fa:66:49:88:78:02:ef:ce:6c:cd:e9:
ce:08:e5:c9:18:27:a2:0d:d6:21:0d:26:98:1f:ba:5c:3a:74:
0d:e0:01:8c:e6:45:30:5d:f7:70:11:24:02:5c:a1:bc:9a:8a:
86:d1:60:3e:fa:59:7e:77:cf:0f:eb:db:93:3e:cc:5f:70:c5:
b1:a5:6a:fb:00:fc:64:15:c4:c7:ce:e5:c6:5f:57:14:00:e2:
1c:8b:14:04:9e:42:21:a3:d3:95:7b:2d:e9:68:33:61:1a:a8:
48:ec:e0:0c:e3:8b:1a:01:b3:41:63:75:80:b2:77:c8:34:15:
15:e8:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:24 2026 by rpki-client