
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32322d3234203d3e2034313334.roa
File: 3130332e33372e34342e302f32322d3234203d3e2034313334.roa (raw, json)
Hash identifier: 48BEzR66MtjxKyydqiySa+dRnObn9i+08ndrgvytW2w=
Subject key identifier: F3:94:AE:56:F5:83:D6:7C:55:3E:5F:BE:CD:6C:13:5C:E0:36:1D:DF
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 412EE2B35C12E66B97CDB9EFAC064EA22B59040C
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32322d3234203d3e2034313334.roa
Signing time: Tue 14 Apr 2026 07:58:05 +0000
ROA not before: Tue 14 Apr 2026 07:53:05 +0000
ROA not after: Tue 13 Apr 2027 07:58:05 +0000
asID: 4134
IP address blocks: 103.37.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2e:e2:b3:5c:12:e6:6b:97:cd:b9:ef:ac:06:4e:a2:2b:59:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:53:05 2026 GMT
Not After : Apr 13 07:58:05 2027 GMT
Subject: CN=F394AE56F583D67C553E5FBECD6C135CE0361DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:0e:57:b1:24:5d:95:f0:7f:3e:66:42:1d:
10:66:05:ca:fe:28:54:5e:14:fa:34:1c:5a:33:50:
e1:23:35:66:27:e9:ef:2c:fa:0c:23:2c:d6:41:b9:
d2:5f:f1:b5:a0:04:0e:ac:60:c5:d2:03:71:fc:41:
94:11:f2:f4:07:40:73:af:43:94:9b:aa:1f:6e:84:
81:91:02:4c:4c:9a:51:81:35:b2:85:3e:dc:ac:be:
ac:39:c6:60:b3:c9:02:ec:0d:ed:fd:f8:0a:20:b0:
3d:3b:9b:fb:74:2b:99:c7:df:fa:3c:ad:cd:e5:a0:
29:a2:88:24:e4:ba:3e:f8:0c:e9:ed:cd:41:33:f1:
54:76:fb:f8:8f:63:29:12:60:8c:7e:8b:f4:96:52:
e6:9e:7b:8e:75:d6:67:66:87:35:3f:32:c1:e6:93:
c9:fa:86:d1:5d:aa:35:83:71:29:b1:26:d3:58:38:
c3:d5:26:c0:c7:8d:d2:92:b0:38:4a:cc:7f:9f:42:
db:67:38:e4:cb:34:a3:34:ac:b1:c3:fd:f6:05:96:
87:31:68:bc:ca:c8:d4:a4:53:ef:17:e4:fa:5b:48:
eb:61:f2:c3:cd:9c:b8:04:03:77:32:3c:db:87:1b:
8e:9c:5e:9c:13:eb:0f:fa:b4:63:dc:bc:f3:b5:63:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:AE:56:F5:83:D6:7C:55:3E:5F:BE:CD:6C:13:5C:E0:36:1D:DF
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32322d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:cf:52:c8:9b:17:f4:77:9b:2f:11:c0:9a:b8:dc:23:1a:0b:
33:e4:a4:0d:f7:62:ba:9d:33:d6:b3:4a:b9:be:c8:67:4c:62:
9b:51:71:7e:0e:e5:e4:be:7b:8d:fa:ca:26:ee:ae:73:c1:0e:
dd:d7:d6:29:73:ee:e7:94:02:0e:fa:80:09:05:bf:1e:f1:0e:
66:39:69:3b:0f:6e:6e:a5:ee:40:73:fc:2a:ae:64:b7:ab:3b:
1f:5f:64:bc:bb:c3:ea:5b:51:90:4a:0d:ee:bc:57:4f:f7:76:
d5:94:ab:c1:18:be:3c:ea:61:1d:dd:e0:ba:ee:ff:7b:24:28:
b6:f4:9e:12:ab:db:96:64:3c:fa:8d:05:e7:ff:4f:15:15:76:
1b:12:d6:92:3e:9d:08:70:bf:44:ba:50:f2:e5:6b:2f:8f:95:
3d:d2:00:d3:b7:e5:76:ac:b6:3a:51:6d:c8:ab:5d:cf:89:6a:
d9:49:5b:1d:ce:fe:de:f9:b3:b5:54:24:c4:f2:ef:82:b2:6f:
30:af:0b:9c:39:b8:b2:18:f8:a4:15:96:9b:7d:fe:67:ae:e0:
34:a6:1a:45:de:53:c9:57:c8:70:e2:ea:6f:30:cf:ab:e4:6d:
d6:b5:1c:6f:e5:c8:40:ff:e9:78:a7:85:40:b0:b6:c7:a4:c2:
da:70:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:07 2026 by rpki-client