
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37302e302f32342d3234203d3e20313531323936.roa
File: 3130332e37312e37302e302f32342d3234203d3e20313531323936.roa (raw, json)
Hash identifier: HhwCFDNCWuwBRPXnrmz8lxbiscoLe884ROhfF0UchqY=
Subject key identifier: 13:1E:83:93:35:D9:4F:54:93:86:11:CB:AD:3F:F0:FA:A9:35:C2:29
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 08C1F5F6CC55AF0E76B7CFC44934C594073043AA
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37302e302f32342d3234203d3e20313531323936.roa
Signing time: Fri 17 Apr 2026 07:56:56 +0000
ROA not before: Fri 17 Apr 2026 07:51:56 +0000
ROA not after: Fri 16 Apr 2027 07:56:56 +0000
asID: 151296
IP address blocks: 103.71.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c1:f5:f6:cc:55:af:0e:76:b7:cf:c4:49:34:c5:94:07:30:43:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 17 07:51:56 2026 GMT
Not After : Apr 16 07:56:56 2027 GMT
Subject: CN=131E839335D94F54938611CBAD3FF0FAA935C229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:ab:e3:95:f3:cc:bb:68:f8:54:7b:51:56:
62:71:a1:58:85:a3:b5:b8:96:ce:98:cf:cc:74:92:
db:11:01:17:2f:b0:ba:99:8a:c7:25:d1:70:16:69:
42:f8:59:d3:38:d5:7c:4f:87:b1:75:1e:0a:25:96:
53:13:df:04:51:5f:21:d2:0e:66:2d:34:fe:2b:b5:
f0:03:f3:33:45:70:41:1f:da:c7:6a:1d:de:79:98:
50:57:7a:99:5b:0d:68:5f:2a:10:e2:52:3d:b2:6b:
3e:10:e1:47:2e:32:75:01:a3:20:ce:8f:a3:73:5e:
3c:bf:4c:a5:94:08:d7:0d:c9:d8:c7:d0:5c:ed:92:
05:8a:d3:49:74:fc:19:32:1e:c4:72:95:88:c3:97:
1c:45:74:d6:8d:4e:f6:f3:57:85:69:56:d2:7b:47:
7a:6a:8a:4c:43:e8:cc:c3:cc:35:d3:2b:a5:8a:32:
98:74:d4:f0:ed:8d:12:36:0c:e7:95:16:9a:7c:98:
0a:f9:76:e7:c1:f8:2e:9b:72:59:62:63:5c:97:71:
ae:97:a0:95:ef:3a:0d:92:9f:e6:ce:81:1a:f5:20:
54:7e:69:67:73:5a:ac:80:0e:25:79:f3:3a:a5:b7:
ff:47:26:8b:d0:ec:2c:74:01:aa:94:fa:46:79:30:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:83:93:35:D9:4F:54:93:86:11:CB:AD:3F:F0:FA:A9:35:C2:29
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37302e302f32342d3234203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a4:57:59:6e:fd:b6:a3:3b:8c:9c:c8:d0:52:53:be:35:bd:
a9:b6:06:f6:7e:56:97:59:4d:aa:f2:28:2e:35:53:f3:a8:be:
34:79:05:2c:d0:64:3d:a2:43:9c:34:0c:4b:4e:41:4f:ab:6f:
2b:6d:6f:6a:ae:6e:64:3f:d8:bd:87:b0:a7:26:c1:58:fb:44:
37:5d:fc:f9:cd:41:0f:19:84:73:96:e4:a3:40:ef:42:b8:5e:
1c:6e:a1:da:4f:f9:21:77:c9:bc:e4:af:55:a9:1a:56:cf:9a:
8a:33:11:00:df:49:9b:df:b5:cc:3f:bb:f2:f8:bd:02:cd:fc:
a0:77:ee:b4:dd:c1:e9:9f:81:29:af:23:03:b7:06:d0:f6:d0:
90:4b:6f:be:42:3e:59:bc:da:92:3e:98:9f:2f:5a:63:91:de:
05:76:de:1c:9d:c4:fc:a5:b5:75:57:0e:90:5d:0d:d6:d2:3b:
c9:77:34:2a:b4:04:d9:e0:90:ca:e7:71:48:2b:18:75:02:37:
bb:ab:76:8d:01:47:ec:be:d9:fc:8b:69:33:76:d9:a6:e8:be:
5a:17:02:62:b5:7f:53:f4:2d:b3:94:f3:7f:20:eb:0f:a8:04:
db:32:79:31:d2:0c:2b:06:d6:6d:c0:10:49:8b:a1:2e:6f:0e:
e6:f0:15:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:23 2026 by rpki-client