
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203633353637.roa
File: 3130332e34352e3136302e302f32322d3234203d3e203633353637.roa (raw, json)
Hash identifier: kKDagzxUBWBS6wwiUbACYjfec79yDbyk3F1rHw6zKLM=
Subject key identifier: 23:7B:30:03:74:D6:17:4E:A7:EE:5A:B9:DE:23:15:05:48:D5:0B:A5
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 7196261BCEC2CE8CDB82B63F6987CC9224A8F89D
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203633353637.roa
Signing time: Fri 17 Apr 2026 01:42:17 +0000
ROA not before: Fri 17 Apr 2026 01:37:17 +0000
ROA not after: Fri 16 Apr 2027 01:42:17 +0000
asID: 63567
IP address blocks: 103.45.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:96:26:1b:ce:c2:ce:8c:db:82:b6:3f:69:87:cc:92:24:a8:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 17 01:37:17 2026 GMT
Not After : Apr 16 01:42:17 2027 GMT
Subject: CN=237B300374D6174EA7EE5AB9DE23150548D50BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:e2:84:52:6b:95:0b:ca:10:29:2f:0a:82:
40:e6:49:33:ff:7a:00:96:ad:78:39:38:e4:be:d7:
a7:e1:27:3e:b2:35:69:a2:fb:80:db:ef:5a:b1:c6:
ce:58:b4:0d:44:e4:5e:04:66:45:24:c1:93:8f:a7:
a3:48:e9:df:28:fd:46:46:34:56:9f:59:24:93:23:
e1:0a:6e:60:47:9b:5b:78:08:ab:33:df:b7:d3:bb:
f4:e7:2d:4f:90:71:6d:af:ea:78:93:9a:db:4f:a9:
c3:6b:5e:14:3c:23:e1:fb:42:58:08:ad:65:55:45:
9d:0d:8a:f5:9b:1e:a4:6b:a2:c2:1c:db:3c:7a:01:
a3:54:70:d0:26:d9:e5:40:43:0e:10:7a:27:21:74:
4a:48:7c:0a:7e:84:06:74:38:6e:ce:dc:16:8c:0b:
a4:c4:d2:cd:94:bd:d5:2f:f7:0c:b3:78:50:a0:53:
e7:3b:44:99:b7:0c:92:d6:a7:8e:3b:39:42:2e:8e:
5f:f9:06:12:1c:4b:da:98:62:33:e6:de:59:2a:c8:
c1:c1:ed:aa:6a:ad:3e:36:5d:27:18:22:f9:e7:d7:
6c:db:04:de:09:15:79:3d:67:06:fa:ab:b1:2e:33:
4e:a8:03:60:c1:7a:d0:1d:a0:b1:21:bc:09:f1:3e:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7B:30:03:74:D6:17:4E:A7:EE:5A:B9:DE:23:15:05:48:D5:0B:A5
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203633353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:fa:f7:15:7a:8d:2c:d3:e3:10:86:f0:9d:1d:f4:fa:93:7a:
72:1e:f3:75:2a:b6:86:e1:9a:79:4f:9b:17:00:a9:7c:16:40:
8d:11:4b:47:db:98:6b:1b:52:ea:6b:34:6b:5e:79:8f:88:dd:
3a:07:04:97:9b:48:7a:ab:77:2e:23:6c:a6:1c:c5:de:cb:50:
96:fe:51:0f:c6:32:95:a0:1f:00:54:0f:97:20:02:f0:27:45:
f4:7b:0c:bb:aa:42:42:de:a8:ff:53:fb:79:55:b2:2f:92:9a:
3e:93:dc:2c:da:87:67:9e:f2:d7:f4:b7:26:e5:1a:55:09:78:
70:43:11:08:25:1b:2e:51:56:d3:32:99:09:9e:1a:b1:d7:2f:
ad:f6:d9:a5:a2:dd:02:7c:11:9f:cb:59:38:77:d0:ec:67:ac:
b1:ea:ea:ea:92:1f:4c:d3:e0:81:f6:36:e6:d1:9f:63:f1:64:
c6:fb:1a:8b:12:00:15:48:2b:51:2e:4b:28:50:33:7b:bf:16:
4d:69:53:dc:05:87:f6:75:8c:9d:09:c4:f3:85:be:a5:5d:88:
c0:71:fb:01:2c:84:bc:0c:f8:a0:6b:5c:31:4d:66:9c:e1:b2:
f2:fd:fb:23:bd:fd:57:89:d1:a9:87:42:e6:5b:e5:0d:f2:3f:
ec:b0:b0:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:36 2026 by rpki-client