
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32342d3234203d3e20313531323936.roa
File: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (raw, json)
Hash identifier: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=
Subject key identifier: 98:67:27:36:75:65:6D:24:88:45:1C:8C:55:78:45:BB:D0:21:7A:B2
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 0766BD6B48EC27214773201B7C5B9B0A9F9936D9
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32342d3234203d3e20313531323936.roa
Signing time: Fri 17 Apr 2026 07:56:57 +0000
ROA not before: Fri 17 Apr 2026 07:51:57 +0000
ROA not after: Fri 16 Apr 2027 07:56:57 +0000
asID: 151296
IP address blocks: 103.71.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:66:bd:6b:48:ec:27:21:47:73:20:1b:7c:5b:9b:0a:9f:99:36:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 17 07:51:57 2026 GMT
Not After : Apr 16 07:56:57 2027 GMT
Subject: CN=9867273675656D2488451C8C557845BBD0217AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:03:b2:25:f1:ed:21:56:82:a4:e1:05:a9:
f2:fe:8c:94:1c:39:cb:87:c8:b1:ab:12:70:ba:76:
7b:47:46:77:d9:07:d1:43:04:46:e4:4c:1e:e7:38:
7d:ae:39:d4:42:a3:56:c4:96:24:02:42:35:6f:8a:
14:9e:9d:33:fb:7e:62:8f:25:3a:7b:75:03:b3:ff:
2b:16:ef:45:e2:77:a0:08:6e:03:7e:76:cb:10:d4:
f6:82:ea:61:af:d2:e3:dc:af:0a:ed:44:af:26:4b:
a6:26:58:49:d9:53:a9:b1:f1:f4:f2:ad:5f:8f:07:
9f:1e:d5:69:06:8f:07:1b:da:05:b7:c5:b8:a0:bd:
c2:02:ab:89:1b:ce:b3:46:00:18:c6:78:85:66:23:
b6:d8:aa:00:54:6e:c9:30:6c:97:33:46:0a:a5:4e:
d4:36:ab:22:31:ac:47:4b:df:bf:4c:57:37:62:39:
0e:c9:10:ab:23:d1:09:49:ce:45:69:64:0e:9a:33:
a2:af:f3:21:cf:31:91:bb:c2:16:8e:05:a2:7f:9d:
e9:d2:4e:23:33:c5:0c:d7:f6:cb:7e:69:8d:1f:0a:
e1:a9:39:59:29:ff:dd:50:23:ce:42:e4:ba:58:02:
35:4e:9e:cb:57:6b:77:b3:56:4e:b1:bc:79:b8:01:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:67:27:36:75:65:6D:24:88:45:1C:8C:55:78:45:BB:D0:21:7A:B2
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32342d3234203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.68.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f1:24:40:19:11:6e:47:cc:86:f1:a0:26:06:9f:e0:65:52:
83:01:84:1e:ec:f4:c4:7e:b7:c8:0f:b3:8a:e4:e0:f1:db:96:
0d:28:5c:3e:1d:19:59:7d:6d:47:f7:d4:87:f5:0a:22:82:0f:
90:13:08:fd:c1:59:26:74:c0:f7:8c:d6:cf:2e:8b:41:19:69:
e2:2e:e8:d8:5c:56:16:f2:8e:55:b0:61:8c:19:ed:b4:ee:f9:
f8:7f:e5:cc:69:f3:b1:17:e7:b6:45:b7:b3:1c:88:8b:23:b3:
75:33:77:d9:c6:0c:60:ed:19:c9:55:1b:32:57:7b:42:bc:01:
25:fc:23:71:98:c2:93:04:30:6a:31:db:c2:f6:0d:75:77:68:
fd:16:14:63:b1:c0:0c:89:48:ad:18:3a:c6:b4:74:48:24:3c:
89:23:4f:64:f6:31:02:f0:f3:c5:16:41:a8:be:8d:f5:f3:1e:
04:c9:fd:25:8e:72:9f:7a:04:a4:0c:8b:f1:c2:01:46:7b:e3:
2d:9a:ef:e4:ac:88:85:66:de:9c:8a:ec:4e:64:f4:62:66:6e:
fc:e9:81:17:b0:b7:62:8a:02:1d:29:83:7e:6d:06:f5:29:d3:
e9:ea:b8:bd:6e:cc:db:7d:2d:49:35:12:d4:07:25:91:87:14:
6c:17:d6:16
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUB2a9a0jsJyFHcyAbfFubCp+ZNtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA0MTcwNzUxNTdaFw0yNzA0MTYwNzU2NTdaMDMxMTAvBgNV
BAMTKDk4NjcyNzM2NzU2NTZEMjQ4ODQ1MUM4QzU1Nzg0NUJCRDAyMTdBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAwOyJfHtIVaCpOEFqfL+jJQc
OcuHyLGrEnC6dntHRnfZB9FDBEbkTB7nOH2uOdRCo1bEliQCQjVvihSenTP7fmKP
JTp7dQOz/ysW70Xid6AIbgN+dssQ1PaC6mGv0uPcrwrtRK8mS6YmWEnZU6mx8fTy
rV+PB58e1WkGjwcb2gW3xbigvcICq4kbzrNGABjGeIVmI7bYqgBUbskwbJczRgql
TtQ2qyIxrEdL379MVzdiOQ7JEKsj0QlJzkVpZA6aM6Kv8yHPMZG7whaOBaJ/nenS
TiMzxQzX9st+aY0fCuGpOVkp/91QI85C5LpYAjVOnstXa3ezVk6xvHm4AbKTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUmGcnNnVlbSSIRRyMVXhFu9AherIwHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDg4MTAyNS8wLzMxMzAzMzJlMzcz
MTJlMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzkzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGdHRDANBgkqhkiG9w0BAQsFAAOCAQEAU/EkQBkRbkfMhvGgJgaf4GVS
gwGEHuz0xH63yA+ziuTg8duWDShcPh0ZWX1tR/fUh/UKIoIPkBMI/cFZJnTA94zW
zy6LQRlp4i7o2FxWFvKOVbBhjBnttO75+H/lzGnzsRfntkW3sxyIiyOzdTN32cYM
YO0ZyVUbMld7QrwBJfwjcZjCkwQwajHbwvYNdXdo/RYUY7HADIlIrRg6xrR0SCQ8
iSNPZPYxAvDzxRZBqL6N9fMeBMn9JY5yn3oEpAyL8cIBRnvjLZrv5KyIhWbenIrs
TmT0YmZu/OmBF7C3YooCHSmDfm0G9SnT6eq4vW7M230tSTUS1AclkYcUbBfWFg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:22 2026 by rpki-client