
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034313334.roa
File: 3130332e33372e34342e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: EcyvRFAXa8SN7E9YJRnJnocbqSyBn5jECDUvejPbhEk=
Subject key identifier: FD:4C:74:28:02:32:F7:8B:A1:E0:BB:98:69:E6:CC:98:F4:31:DA:C3
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 56268CBDA61F8CC853AB02B525EC4683284A8345
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034313334.roa
Signing time: Mon 28 Sep 2026 01:00:35 +0000
ROA not before: Mon 28 Sep 2026 00:55:35 +0000
ROA not after: Mon 27 Sep 2027 01:00:35 +0000
asID: 4134
IP address blocks: 103.37.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:26:8c:bd:a6:1f:8c:c8:53:ab:02:b5:25:ec:46:83:28:4a:83:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:35 2026 GMT
Not After : Sep 27 01:00:35 2027 GMT
Subject: CN=FD4C74280232F78BA1E0BB9869E6CC98F431DAC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:7e:50:22:6f:53:cf:db:99:53:fb:27:c4:
20:52:3e:51:70:22:5c:84:0c:11:b2:84:8b:54:22:
9e:c9:0c:47:94:8c:55:23:3d:51:a3:1a:97:7e:71:
e4:06:7a:17:6c:15:61:bc:56:ae:9a:d4:e1:6d:65:
9a:c6:e3:f3:f9:a9:cc:69:59:40:83:aa:2a:57:d8:
92:7f:9f:6e:a0:1d:1a:8a:5a:27:98:0f:9c:cf:99:
6b:79:8c:c7:08:19:c0:76:3b:8f:ce:da:e4:12:f5:
6f:7d:21:25:ed:63:f1:08:57:a8:d5:6f:95:bb:7c:
21:76:89:7d:7b:24:85:96:81:e8:b5:29:f7:60:ce:
6f:ba:dd:df:9d:f5:33:9c:da:0d:1d:1c:08:fe:93:
6d:b4:29:2c:9c:3e:4f:07:da:a6:94:0f:01:61:74:
f0:c0:35:ca:c0:ef:41:7b:8d:2a:38:94:27:7f:ce:
e3:9a:f2:07:26:24:cb:04:7f:f1:f3:29:a3:9c:bc:
16:73:7d:3d:47:fe:01:5f:26:f0:21:74:c2:7e:d4:
fd:c4:c4:1c:0c:0f:d1:c1:a9:09:b4:04:73:4d:de:
d3:d7:2d:ae:1f:13:8a:17:ba:54:52:c5:ed:fe:7b:
51:1d:e9:01:33:f8:1e:cf:e6:f4:60:b1:16:5f:b5:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:74:28:02:32:F7:8B:A1:E0:BB:98:69:E6:CC:98:F4:31:DA:C3
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
82:46:4c:53:b6:73:6c:6e:96:0c:3b:dc:99:45:15:14:f5:e0:
ae:72:d4:3f:00:d3:0c:eb:03:ac:f1:73:15:7a:23:20:56:25:
80:8c:59:99:39:a3:eb:a7:63:d5:b4:d9:06:a4:ba:dc:25:2b:
34:5a:a3:2a:21:c5:ea:35:a5:ce:44:ed:85:5c:e5:6f:8b:ef:
05:30:d6:8d:93:4c:eb:14:1a:13:ff:64:4c:a0:ad:53:e5:95:
4b:65:16:f5:11:04:39:85:07:06:6d:2a:c5:7e:8c:58:01:c2:
e5:b1:3c:65:d1:65:3e:23:ae:a4:9e:b8:ca:39:91:e6:46:bf:
f3:e8:82:a1:a0:42:6d:90:f9:bc:9c:41:23:cf:42:b1:f5:27:
2d:ef:8a:d8:87:1c:0a:82:74:d6:b0:36:22:90:46:a5:1b:a3:
25:e8:68:8b:4d:aa:0b:13:71:35:ad:0a:7d:d4:e7:e9:8b:c6:
dc:d4:63:5e:de:3d:da:5d:78:9a:47:d9:2e:1e:cb:2d:ce:aa:
22:a8:fc:76:b9:05:de:8e:fb:47:47:26:30:8a:a9:61:db:5a:
69:40:67:a0:22:0d:8b:fe:da:7a:8d:a0:a5:cb:0b:a8:09:90:
61:f0:cb:1b:ca:af:5f:c5:f4:2f:6a:44:e7:e3:b2:eb:f3:a3:
28:6f:e8:96
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUViaMvaYfjMhTqwK1JexGgyhKg0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzVaFw0yNzA5MjcwMTAwMzVaMDMxMTAvBgNV
BAMTKEZENEM3NDI4MDIzMkY3OEJBMUUwQkI5ODY5RTZDQzk4RjQzMURBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsuH5QIm9Tz9uZU/snxCBSPlFw
IlyEDBGyhItUIp7JDEeUjFUjPVGjGpd+ceQGehdsFWG8Vq6a1OFtZZrG4/P5qcxp
WUCDqipX2JJ/n26gHRqKWieYD5zPmWt5jMcIGcB2O4/O2uQS9W99ISXtY/EIV6jV
b5W7fCF2iX17JIWWgei1Kfdgzm+63d+d9TOc2g0dHAj+k220KSycPk8H2qaUDwFh
dPDANcrA70F7jSo4lCd/zuOa8gcmJMsEf/HzKaOcvBZzfT1H/gFfJvAhdMJ+1P3E
xBwMD9HBqQm0BHNN3tPXLa4fE4oXulRSxe3+e1Ed6QEz+B7P5vRgsRZftYsPAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU/Ux0KAIy94uh4LuYaebMmPQx2sMwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3
MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnJSwwDQYJKoZIhvcNAQELBQADggEBAIJGTFO2c2xulgw73JlFFRT14K5y1D8A
0wzrA6zxcxV6IyBWJYCMWZk5o+unY9W02QakutwlKzRaoyohxeo1pc5E7YVc5W+L
7wUw1o2TTOsUGhP/ZEygrVPllUtlFvURBDmFBwZtKsV+jFgBwuWxPGXRZT4jrqSe
uMo5keZGv/PogqGgQm2Q+bycQSPPQrH1Jy3vitiHHAqCdNawNiKQRqUboyXoaItN
qgsTcTWtCn3U5+mLxtzUY17ePdpdeJpH2S4eyy3OqiKo/Ha5Bd6O+0dHJjCKqWHb
WmlAZ6AiDYv+2nqNoKXLC6gJkGHwyxvKr1/F9C9qROfjsuvzoyhv6JY=
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:22:33 2026 by rpki-client