
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
File: 3130332e38332e37322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: KZM/I2W0ntjertA2PcnAIQJppKLoOEjUEDCJExa16PM=
Subject key identifier: 8C:FA:EF:E8:B1:E1:3C:77:C4:58:CE:3D:AF:9F:F9:03:46:D1:64:EC
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 79EAE547493A3CA798AA62212B62A3385EB71428
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
Signing time: Tue 14 Apr 2026 07:36:58 +0000
ROA not before: Tue 14 Apr 2026 07:31:58 +0000
ROA not after: Tue 13 Apr 2027 07:36:58 +0000
asID: 4837
IP address blocks: 103.83.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ea:e5:47:49:3a:3c:a7:98:aa:62:21:2b:62:a3:38:5e:b7:14:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:31:58 2026 GMT
Not After : Apr 13 07:36:58 2027 GMT
Subject: CN=8CFAEFE8B1E13C77C458CE3DAF9FF90346D164EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:60:7b:73:c6:6f:83:48:50:ff:52:6c:b8:
ba:80:d2:9e:74:21:af:a3:f0:ed:2a:d9:72:15:4c:
fb:c4:4d:c3:32:2f:1c:da:2d:77:29:ae:2a:f4:9a:
3c:9f:96:f2:1e:1e:4b:db:bc:7d:93:e2:98:a0:89:
50:75:74:bb:c5:5d:7a:e1:6b:e5:b3:1e:97:4c:5e:
3c:a8:76:5f:ce:c5:20:dd:2f:7f:c2:a2:1b:a5:bf:
61:73:f8:e3:ff:50:88:b3:3b:33:8a:15:75:33:f3:
31:d4:d2:4c:9d:4c:f5:0f:4c:e1:ee:cc:3a:df:0d:
87:a3:fb:5d:16:f0:46:85:92:ad:f8:86:3f:79:85:
2a:10:30:62:c2:19:67:d7:c6:1b:6c:31:cb:b5:19:
bb:6a:35:d8:76:b4:dd:ad:8c:65:f5:32:df:ed:08:
b6:aa:61:08:d7:a4:d2:b3:eb:f2:d1:17:65:8c:93:
f4:28:b7:23:a8:02:8b:49:b2:84:56:51:f9:7f:c7:
e2:ba:54:9f:ed:84:19:d1:42:72:4a:73:00:bd:0b:
04:24:09:5f:fd:db:b4:bc:d8:f3:a7:dd:bf:f7:eb:
66:b9:2b:c3:f8:e8:53:85:13:34:80:6d:57:77:cc:
09:df:68:fc:86:15:b2:df:7b:e7:15:6a:9b:e8:10:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:EF:E8:B1:E1:3C:77:C4:58:CE:3D:AF:9F:F9:03:46:D1:64:EC
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.72.0/22
Signature Algorithm: sha256WithRSAEncryption
59:49:c7:f2:c8:59:15:60:49:52:cf:89:13:6b:f5:d3:53:d9:
b1:4e:a2:8b:5a:d0:50:3c:6e:9c:f4:f9:30:f2:ce:db:4c:fd:
70:6b:99:e1:d2:26:ce:1a:03:79:82:02:6b:e8:ef:cf:b9:a4:
6b:ce:4d:b6:89:97:0e:5e:4f:1e:72:fc:df:c8:c2:e4:1e:71:
0f:40:bf:44:c3:a8:95:a0:0d:07:9e:c5:48:0a:d2:eb:90:ad:
75:6f:ad:b9:63:1b:cf:b0:c8:cc:d2:db:75:10:99:c4:a1:4f:
61:80:6d:06:5a:e7:25:73:30:72:80:5d:d6:69:58:d7:99:1d:
af:f4:ab:68:fa:b8:51:c9:8b:3d:45:bf:9f:1e:31:e9:7b:95:
01:8c:06:c0:9b:b4:f0:2d:f3:66:c8:f9:c2:59:27:e8:69:fa:
13:e7:4b:70:3b:21:78:78:83:64:da:5d:a4:ad:87:46:33:43:
e3:56:8c:ef:9d:72:07:09:0d:bc:9f:67:a1:58:92:42:0f:01:
e1:e6:96:75:0b:6f:1d:4b:73:46:8c:5f:26:3e:c8:a4:46:72:
80:5a:71:72:46:3a:24:40:1a:22:60:d8:6b:fb:b3:4a:b8:74:
c7:a1:0a:09:eb:ea:72:b6:be:97:8c:40:bc:d5:96:ff:83:f8:
fd:cc:9b:f7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUeerlR0k6PKeYqmIhK2KjOF63FCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MTQwNzMxNThaFw0yNzA0MTMwNzM2NThaMDMxMTAvBgNV
BAMTKDhDRkFFRkU4QjFFMTNDNzdDNDU4Q0UzREFGOUZGOTAzNDZEMTY0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMvGB7c8Zvg0hQ/1JsuLqA0p50
Ia+j8O0q2XIVTPvETcMyLxzaLXcprir0mjyflvIeHkvbvH2T4pigiVB1dLvFXXrh
a+WzHpdMXjyodl/OxSDdL3/Cohulv2Fz+OP/UIizOzOKFXUz8zHU0kydTPUPTOHu
zDrfDYej+10W8EaFkq34hj95hSoQMGLCGWfXxhtsMcu1GbtqNdh2tN2tjGX1Mt/t
CLaqYQjXpNKz6/LRF2WMk/QotyOoAotJsoRWUfl/x+K6VJ/thBnRQnJKcwC9CwQk
CV/927S82POn3b/362a5K8P46FOFEzSAbVd3zAnfaPyGFbLfe+cVapvoEJGPAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUjPrv6LHhPHfEWM49r5/5A0bRZOwwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzODMz
MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnU0gwDQYJKoZIhvcNAQELBQADggEBAFlJx/LIWRVgSVLPiRNr9dNT2bFOoota
0FA8bpz0+TDyzttM/XBrmeHSJs4aA3mCAmvo78+5pGvOTbaJlw5eTx5y/N/IwuQe
cQ9Av0TDqJWgDQeexUgK0uuQrXVvrbljG8+wyMzS23UQmcShT2GAbQZa5yVzMHKA
XdZpWNeZHa/0q2j6uFHJiz1Fv58eMel7lQGMBsCbtPAt82bI+cJZJ+hp+hPnS3A7
IXh4g2TaXaSth0YzQ+NWjO+dcgcJDbyfZ6FYkkIPAeHmlnULbx1Lc0aMXyY+yKRG
coBacXJGOiRAGiJg2Gv7s0q4dMehCgnr6nK2vpeMQLzVlv+D+P3Mm/c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:55 2026 by rpki-client