
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
File: 3130332e34352e3136302e302f32322d3234203d3e203133333738.roa (raw, json)
Hash identifier: kUZ7KcfVFnED9sfnL7AkisPNMkuCJI+ii50jloiZfWI=
Subject key identifier: 94:11:2C:2C:9A:D2:C6:C6:20:6B:10:59:C2:F5:83:76:65:9F:0D:AC
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 07F0EFF18D98085F36827FB6A23922B0CE98A31F
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
Signing time: Mon 28 Sep 2026 01:00:35 +0000
ROA not before: Mon 28 Sep 2026 00:55:35 +0000
ROA not after: Mon 27 Sep 2027 01:00:35 +0000
asID: 13378
IP address blocks: 103.45.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f0:ef:f1:8d:98:08:5f:36:82:7f:b6:a2:39:22:b0:ce:98:a3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:35 2026 GMT
Not After : Sep 27 01:00:35 2027 GMT
Subject: CN=94112C2C9AD2C6C6206B1059C2F58376659F0DAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:e3:58:90:d1:1b:bc:4f:b8:58:53:e7:6e:
78:a8:6e:ba:8c:c3:31:53:f4:10:72:c6:9d:92:86:
75:66:71:09:27:07:f0:ce:db:3d:3a:c0:19:9f:1d:
d2:a9:00:71:d8:20:ab:29:9c:2f:1b:01:a2:52:77:
23:e0:90:e7:ea:38:fb:3e:19:31:ad:3e:86:a2:7a:
18:e3:92:56:54:39:b8:05:5a:ea:bd:c7:16:8e:4b:
6c:02:4a:ca:a4:f2:0b:8f:f2:72:3e:91:be:7f:46:
3d:8a:be:8d:9b:0d:57:88:dc:4c:1a:a3:a6:64:20:
b5:7d:10:9d:e1:d4:4d:3b:f1:1a:22:20:20:0e:12:
2f:b9:07:0e:44:df:7c:48:96:ea:82:2c:5f:3d:05:
aa:49:82:e6:76:c1:95:fd:30:db:b1:43:52:ff:a9:
de:75:95:52:2f:a5:00:81:cd:8d:23:56:7a:46:45:
b7:97:25:a5:d5:c0:90:ac:5c:c5:0d:3b:b2:db:0b:
11:7e:70:10:0f:81:75:05:54:36:da:29:05:e4:37:
95:5e:17:b6:af:41:5a:96:70:9d:0f:0e:4b:fd:e9:
e1:5b:e9:bc:34:47:c9:ab:c4:ae:cb:39:d5:b4:2a:
a4:79:b7:11:7c:09:fa:84:03:5f:5c:f8:3e:0f:cf:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:11:2C:2C:9A:D2:C6:C6:20:6B:10:59:C2:F5:83:76:65:9F:0D:AC
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
95:f7:89:72:35:8c:0a:77:aa:7b:fc:bb:dd:ee:1c:f9:be:00:
2d:da:57:2a:20:c2:ed:7d:bb:98:f6:de:08:ea:43:6b:9b:4d:
cb:f8:be:45:7e:7b:6a:c5:24:04:34:bd:29:04:c1:46:c3:52:
26:9c:99:d8:47:f7:92:81:f5:0a:68:ce:18:52:37:1d:fc:ee:
a0:8b:a3:a0:97:fc:8d:09:13:0c:00:67:98:62:b1:a6:2e:80:
d1:d0:64:2e:5f:d7:db:29:5e:32:db:25:c7:ba:99:87:6e:30:
c5:77:38:b0:b4:c9:7e:c6:da:03:55:d5:38:a8:d3:96:49:e7:
67:92:78:df:f0:4b:a7:c3:82:f9:17:bc:18:d4:c0:fb:02:ab:
75:2c:d2:d1:b7:3b:63:2e:ef:14:bd:8a:86:c5:d3:dd:d2:77:
f3:d2:2a:7f:e0:b1:8b:92:3c:57:43:2c:e3:56:04:0e:bc:99:
5f:25:46:37:b4:31:a9:79:ab:0c:9d:c8:61:08:fa:62:08:fa:
23:ba:98:17:bb:ce:ba:f3:67:81:43:b9:f1:6c:43:17:62:51:
e4:3f:c2:7e:81:9d:31:9c:f6:fa:f5:b1:5f:74:52:ed:ef:cb:
25:16:6f:32:fb:b7:94:02:02:bf:c0:6d:6a:65:20:8a:62:d0:
57:6f:f9:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:08:11 2026 by rpki-client