
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37322e302f32342d3234203d3e203633363331.roa
File: 3130332e37372e37322e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier: x17cHSRYcX/Kt66624cs2XAt5w4hzS22OUj6QmZWVd8=
Subject key identifier: 36:16:7D:22:EC:C1:4B:58:8F:AC:D1:E9:53:B0:59:75:5E:66:BA:12
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 1B2B0B0614C61D4636BE6F50800D30D9B8C0104E
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37322e302f32342d3234203d3e203633363331.roa
Signing time: Thu 16 Apr 2026 07:09:24 +0000
ROA not before: Thu 16 Apr 2026 07:04:24 +0000
ROA not after: Thu 15 Apr 2027 07:09:24 +0000
asID: 63631
IP address blocks: 103.77.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 13:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2b:0b:06:14:c6:1d:46:36:be:6f:50:80:0d:30:d9:b8:c0:10:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Apr 16 07:04:24 2026 GMT
Not After : Apr 15 07:09:24 2027 GMT
Subject: CN=36167D22ECC14B588FACD1E953B059755E66BA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:f3:01:05:f8:b5:22:60:96:b6:23:32:16:
19:ab:4d:a3:91:de:2c:96:1a:26:dd:84:eb:70:57:
cf:ba:0c:57:89:9f:e3:1e:f9:f0:f8:ab:f7:b2:09:
55:ea:23:44:90:00:60:95:78:02:aa:e4:07:cc:91:
07:4a:04:7e:1a:cf:0c:44:e8:9c:aa:3e:b0:17:86:
ef:02:ef:61:e5:74:73:ae:ae:98:48:b5:8c:f3:53:
ab:1b:2e:67:71:b8:1b:7f:b8:f6:3e:15:d2:1f:95:
17:c6:8c:da:cb:8e:64:d2:db:91:95:ba:b8:e3:71:
46:cb:17:d4:d6:e8:5d:4a:25:8d:57:ca:de:5c:29:
f7:b4:5f:4e:be:c6:a5:17:c5:07:c1:ce:37:24:e4:
d0:dc:4b:eb:bb:28:ec:eb:8e:d0:e7:93:57:d3:b4:
58:f7:6d:c1:92:53:e5:08:56:65:64:50:19:ec:f8:
18:d3:6b:0b:f3:1d:b4:73:dc:5f:23:c7:98:b0:1b:
aa:76:bb:34:06:e0:73:37:e5:8a:98:4e:58:ad:3b:
ad:53:ed:13:8b:76:ee:23:1a:7e:15:c6:38:c7:20:
9f:09:13:df:76:3a:aa:58:e4:e0:d6:b1:6b:f7:a9:
b0:1b:2d:d4:5a:ac:91:b2:75:dc:11:cc:37:05:c8:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:7D:22:EC:C1:4B:58:8F:AC:D1:E9:53:B0:59:75:5E:66:BA:12
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37322e302f32342d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.72.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0a:ba:e9:5e:92:d2:fb:83:79:92:93:b4:57:43:ef:16:f1:
97:9c:18:4d:80:18:b3:30:ce:3a:fa:51:1f:41:a5:69:d4:b7:
00:b0:28:4a:3e:7d:17:fd:09:ec:68:13:fd:1f:df:78:58:5c:
38:c8:fb:71:97:f4:8f:bc:d1:9c:9b:5d:86:22:49:7a:1c:ad:
fe:d9:cb:65:30:0c:6a:95:c3:10:e9:c0:38:e5:1a:48:d2:5d:
84:bb:22:38:d1:95:6f:31:06:37:10:2b:d4:a2:39:ff:e9:7c:
8b:ff:de:09:d0:11:5e:8d:49:b1:90:ee:67:fd:1e:e8:dd:05:
25:ac:b1:c2:86:43:3d:ca:53:46:e6:34:17:c0:55:f3:16:cd:
d5:4e:10:3f:8f:fb:70:15:74:5d:a7:d1:38:04:32:b2:81:d8:
c9:3d:e4:c5:1d:dd:95:f2:b4:df:ef:73:78:90:46:9a:b2:99:
75:f2:99:6c:8c:08:47:7e:ba:4d:14:43:d6:4c:57:07:00:73:
01:8f:69:bd:ec:0b:94:2f:6a:14:0f:2c:1e:02:2f:94:57:c5:
77:b3:39:05:b8:a2:66:e8:3d:c4:75:58:2d:ea:d1:66:78:f8:
75:32:53:e8:6a:8a:cb:35:d8:36:bb:7f:c8:ed:f7:c6:66:74:
92:31:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:38 2026 by rpki-client