
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203633353637.roa
File: 3130332e3233392e3234342e302f32322d3234203d3e203633353637.roa (raw, json)
Hash identifier: WiWr3Wu8J5ZExSdRwcxzfD/PGw0ncF1BITbfiAjWUJA=
Subject key identifier: E6:00:1B:C1:6E:4C:FD:57:70:D9:A8:07:2A:FB:64:44:3D:EC:82:D2
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 475A5FFE2414110EC1008830A999B5A516C82EBF
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203633353637.roa
Signing time: Mon 28 Sep 2026 01:00:41 +0000
ROA not before: Mon 28 Sep 2026 00:55:41 +0000
ROA not after: Mon 27 Sep 2027 01:00:41 +0000
asID: 63567
IP address blocks: 103.239.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 07:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5a:5f:fe:24:14:11:0e:c1:00:88:30:a9:99:b5:a5:16:c8:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:41 2026 GMT
Not After : Sep 27 01:00:41 2027 GMT
Subject: CN=E6001BC16E4CFD5770D9A8072AFB64443DEC82D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:9a:88:a3:33:06:44:5b:a5:57:12:53:93:
58:e5:92:a5:f9:64:1c:bd:0e:97:fa:6f:b0:18:db:
46:ac:3c:b5:3b:39:b7:68:c8:8d:f6:25:9e:42:54:
9e:31:94:7f:51:a1:bd:20:dc:ee:b4:1e:56:9c:0a:
8c:d0:68:1c:b9:35:f9:01:48:ca:e2:97:75:1e:45:
07:a6:f4:72:56:52:4b:9d:42:25:e9:89:28:2c:2a:
f2:6a:e6:24:19:db:1f:83:04:c4:c9:90:7c:af:12:
e2:b0:ed:d7:61:2e:ad:89:35:96:34:36:34:6a:14:
f8:ee:3d:67:0a:6a:39:1d:75:48:e7:36:89:59:76:
4c:5e:31:e4:c1:39:bc:08:e7:45:af:1f:04:d6:b6:
aa:8b:b7:d0:b8:70:36:e7:6a:5c:f5:2f:89:1a:d6:
fa:02:8f:04:dc:df:6e:99:02:77:fe:7d:c6:00:88:
e6:05:e9:21:dd:0a:ad:1a:3e:d0:2e:a3:55:33:52:
e0:02:45:c3:e3:60:3a:a0:c4:e5:d9:82:bf:a0:4b:
74:0e:b4:e5:8b:e3:4b:65:cd:b9:9f:76:fb:d0:9c:
06:d5:2a:18:60:17:5b:1a:b3:df:eb:ec:ad:a1:bb:
25:ee:3a:6a:0b:19:bb:c6:11:00:2a:f6:dd:88:f3:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:1B:C1:6E:4C:FD:57:70:D9:A8:07:2A:FB:64:44:3D:EC:82:D2
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203633353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:e3:86:bf:63:ba:15:17:e2:89:a0:d3:4d:e7:cd:16:4e:24:
df:53:68:b6:0c:04:db:41:71:63:da:71:7d:83:d8:5f:2c:e1:
a1:de:6a:8b:70:36:71:2b:70:9a:a2:8c:08:da:c2:ca:b8:bd:
77:33:de:d8:1f:77:9d:eb:d4:50:93:af:0c:00:da:1e:6f:b7:
fd:8d:cc:a7:06:82:11:b9:d2:9a:a0:bf:39:a2:56:8d:ff:6b:
3c:38:d6:ed:8b:b4:db:83:70:9b:bd:41:ec:3e:c8:c7:85:43:
85:46:8c:8a:73:79:df:7a:a8:9a:83:b2:fc:42:9e:31:67:fe:
91:60:e3:e8:3e:6b:1a:f9:67:d1:11:1a:b7:7f:bb:68:c0:c0:
66:5e:63:2d:46:9a:04:f6:8d:65:f0:2e:c7:76:03:ad:dd:d5:
37:03:f4:e9:01:93:12:3a:b8:16:be:99:75:d8:5b:3e:63:bf:
55:b8:ae:70:57:58:ec:8d:3d:a5:49:02:4c:51:c6:32:9e:74:
94:3d:17:e3:71:2d:20:f1:9a:18:c2:8a:65:35:17:38:d7:64:
63:b3:1a:b1:c1:9d:0f:0c:15:f9:03:8f:5f:96:7c:0b:73:fe:
99:65:50:08:1c:2f:4f:ba:ad:25:53:d5:6b:23:55:88:5e:02:
4b:db:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:41:20 2026 by rpki-client