
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37312e302f32342d3234203d3e20313531323936.roa
File: 3130332e37312e37312e302f32342d3234203d3e20313531323936.roa (raw, json)
Hash identifier: J8ODmN8Qi0L+Nv1SOHSEtxGSOvswd3ISDX4Y3WI+yYc=
Subject key identifier: CF:9B:A1:C4:C2:07:6C:2A:A8:FB:85:30:F3:C6:47:A1:0E:8A:D0:75
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 1C7BF8FFF60FC614F607DC4B378B7C8B808C92F5
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37312e302f32342d3234203d3e20313531323936.roa
Signing time: Fri 17 Apr 2026 07:56:57 +0000
ROA not before: Fri 17 Apr 2026 07:51:57 +0000
ROA not after: Fri 16 Apr 2027 07:56:57 +0000
asID: 151296
IP address blocks: 103.71.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7b:f8:ff:f6:0f:c6:14:f6:07:dc:4b:37:8b:7c:8b:80:8c:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 17 07:51:57 2026 GMT
Not After : Apr 16 07:56:57 2027 GMT
Subject: CN=CF9BA1C4C2076C2AA8FB8530F3C647A10E8AD075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:e9:70:46:51:d4:33:3c:0c:f6:f2:79:f7:
2b:cc:5c:8a:1b:fb:74:df:b4:f2:2d:3d:7c:e4:ea:
fc:40:d3:e4:57:90:d5:4b:2f:47:74:90:ec:78:0e:
ee:be:9e:63:f8:1f:2c:a6:47:84:19:bc:ec:5b:d9:
8e:48:98:59:fd:47:07:b5:27:f5:e8:b4:08:85:60:
34:a2:2a:15:04:63:7c:ae:d8:de:3b:ee:2d:79:e3:
44:35:45:b9:35:cf:61:c1:b3:6a:8d:08:be:1c:9c:
00:1c:4d:e8:0f:04:4e:c6:54:5a:7d:7f:ee:65:a5:
57:a6:7c:54:a7:47:7d:0c:ac:6d:b0:e0:4b:b3:72:
ac:dc:3d:3c:5d:4c:8e:2b:17:ea:a7:a5:d8:60:f5:
3b:a4:a6:95:1f:98:03:68:39:e5:57:ec:f5:6a:1b:
9b:5d:e5:32:fb:36:1c:4c:a5:66:c0:19:64:5e:7d:
d2:b2:21:8a:da:e6:94:3f:d2:47:13:78:2b:fc:83:
41:9e:68:74:c3:8b:ed:e0:cd:2d:2a:66:a5:2c:97:
fb:2a:94:a1:ec:79:15:ee:b4:e8:1f:7f:f5:81:f6:
9d:45:6f:2b:3c:24:d4:e8:1d:37:78:77:2a:6f:57:
f3:37:3e:89:0c:f9:eb:eb:c6:2a:ad:99:9e:f7:07:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:A1:C4:C2:07:6C:2A:A8:FB:85:30:F3:C6:47:A1:0E:8A:D0:75
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37312e302f32342d3234203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.71.0/24
Signature Algorithm: sha256WithRSAEncryption
05:76:5e:98:de:ba:f0:84:e4:3f:67:cc:ef:df:f3:96:9d:a1:
b5:19:7a:89:13:90:19:15:4a:d0:a9:a8:e9:98:d2:66:ae:48:
38:82:8c:e2:47:45:bb:ae:91:a1:04:02:0a:b7:c2:80:63:1c:
6b:38:fe:45:22:d0:76:4c:95:61:fb:f3:b8:90:1e:7e:c8:1f:
d5:42:69:73:32:1d:ea:45:03:8a:30:60:e3:95:90:00:24:fa:
c4:60:c1:eb:3d:a2:21:01:aa:c0:10:80:b6:31:d6:07:58:42:
55:3e:49:5a:3a:b1:41:27:8e:ba:12:56:92:13:b5:b6:50:6e:
bb:6f:e7:c0:a7:c7:77:e9:86:d5:31:16:be:db:41:06:8f:8c:
e6:5c:98:e2:de:41:89:e4:e2:ee:19:72:24:fe:5d:05:80:b0:
37:ea:5c:aa:6b:62:90:a3:3b:f9:29:cf:37:49:30:e9:1b:16:
bf:b8:ba:79:fe:a3:b5:4a:e0:28:50:a2:fd:8c:5a:c8:a2:df:
e9:00:34:d7:a0:6b:e9:ce:bc:54:36:af:89:e2:27:5f:a2:97:
07:9f:5f:b0:ed:69:20:8e:a5:50:5d:10:0f:bc:5e:cf:a0:a8:
c4:52:15:b6:e4:ba:ab:cd:66:4f:90:6a:1f:c7:ea:f0:19:da:
08:bc:d2:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:22 2026 by rpki-client