
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
File: 3130332e34302e31322e302f32322d3232203d3e203133333738.roa (raw, json)
Hash identifier: eTgStNrILLEQn6PYKaBT8itPS7H8pR6GNIRhhcECj+Q=
Subject key identifier: F7:87:4B:C5:B6:DC:70:99:C0:F6:E9:01:64:1E:1D:D0:A4:05:E6:C4
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 3BF8E73CA19FBE2D3ED1F2D6E2761B23E6B200C2
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
Signing time: Tue 14 Apr 2026 07:34:11 +0000
ROA not before: Tue 14 Apr 2026 07:29:11 +0000
ROA not after: Tue 13 Apr 2027 07:34:11 +0000
asID: 13378
IP address blocks: 103.40.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f8:e7:3c:a1:9f:be:2d:3e:d1:f2:d6:e2:76:1b:23:e6:b2:00:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:29:11 2026 GMT
Not After : Apr 13 07:34:11 2027 GMT
Subject: CN=F7874BC5B6DC7099C0F6E901641E1DD0A405E6C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:87:b1:e4:6f:f2:33:8e:48:99:19:97:2d:21:
b4:24:6d:e3:89:b7:0a:2c:ba:57:75:5a:c2:aa:c3:
ec:6d:71:8f:60:8d:8a:91:ca:e4:2b:33:c8:1c:a7:
72:89:8a:2a:12:f1:1c:15:1a:8d:36:3c:2d:1f:d7:
3b:aa:08:74:2b:1a:7e:71:90:b7:77:ea:01:9d:78:
d5:8e:c6:a2:6b:b6:32:fa:e3:10:b1:64:d3:1e:b0:
d9:27:e3:c8:2e:e4:49:ae:99:92:90:10:a0:24:f7:
ef:82:1b:7e:19:5c:f4:e8:0c:a2:5f:53:a1:90:09:
d1:f0:14:78:52:21:7b:8a:9e:37:07:2c:d6:f2:50:
cb:4c:b8:57:ba:cf:7a:f3:bd:24:fa:c6:00:c2:58:
8f:51:27:d4:83:f7:5f:7f:9f:57:cf:da:5d:6b:75:
dd:cb:0f:65:0f:4b:b2:10:08:23:51:e4:91:98:6f:
24:5a:da:95:d5:2a:94:3a:2d:eb:a3:aa:62:24:97:
0b:8c:bf:79:d4:cd:07:f3:4e:33:9e:4e:16:b1:6f:
95:20:19:91:b4:7c:75:c7:bc:fc:31:b0:1d:ce:94:
52:c7:17:48:94:b2:85:2e:fc:eb:e4:03:bf:8c:fa:
70:bd:e7:60:1b:f7:d7:3a:dd:5d:87:20:e9:39:cd:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:87:4B:C5:B6:DC:70:99:C0:F6:E9:01:64:1E:1D:D0:A4:05:E6:C4
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:75:11:eb:89:1d:5f:7b:a7:be:e1:02:4c:12:7e:43:e6:e5:
0e:c9:f9:06:66:0c:7e:94:f8:ea:d4:9f:e9:77:ec:f5:1b:9e:
b3:10:3c:0d:cb:89:94:14:60:f1:61:9b:40:79:0a:04:20:69:
b3:58:04:28:c2:bf:be:44:31:23:a0:6a:24:ab:fd:01:e7:1d:
57:6c:04:15:f1:d8:3a:25:1d:4c:91:a9:2b:38:f4:7f:33:8f:
68:5b:d9:81:0a:3e:8c:16:a7:db:14:9f:08:58:c0:52:13:83:
07:a3:f2:c0:7d:aa:0f:43:4e:4f:07:a9:c6:d3:ec:52:14:d0:
1f:82:2e:1e:45:9f:bf:b3:b9:63:4a:ac:07:61:bf:ab:59:47:
35:06:6e:6a:48:08:33:f0:91:3a:b7:87:55:c0:f5:c6:88:06:
55:ca:c7:0c:72:88:3b:70:fd:33:bd:ef:a8:c0:2b:44:21:a7:
1e:2f:a7:ab:0f:1d:1f:75:5e:b0:00:f7:8f:40:3f:36:5b:78:
6b:59:37:ad:2b:2e:42:4e:8c:f4:c0:06:9e:44:ae:ce:d9:96:
a4:cc:56:fc:70:c8:ba:11:ac:8b:93:83:77:37:57:4a:ff:5b:
0c:e2:d7:62:cc:63:bc:a5:ea:fc:e4:a9:0e:e6:d8:75:da:26:
3e:26:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:00 2026 by rpki-client