
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: rgwahK35BHsUtzTFqulEq/atJOCazdcYV2WgFuWtENc=
Subject key identifier: A8:72:26:1E:52:49:0C:59:26:60:FA:AD:A0:A5:BD:8C:F1:07:D4:C9
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 4982C4576AA31BFBBE700D301FB9A7BC0558D105
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:49 +0000
ROA not before: Sun 31 May 2026 08:14:49 +0000
ROA not after: Sun 30 May 2027 08:19:49 +0000
asID: 151270
IP address blocks: 103.236.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:82:c4:57:6a:a3:1b:fb:be:70:0d:30:1f:b9:a7:bc:05:58:d1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:49 2026 GMT
Not After : May 30 08:19:49 2027 GMT
Subject: CN=A872261E52490C592660FAADA0A5BD8CF107D4C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:82:15:62:9a:f8:63:2f:46:ae:55:33:2f:
83:8b:4f:26:42:b1:df:57:16:29:89:57:76:40:0d:
c8:8a:e3:0b:41:a9:bb:66:83:51:ae:da:64:eb:6e:
c3:8c:8a:be:11:71:7e:36:3b:e8:32:dc:20:96:f2:
bd:dc:9c:2a:86:d7:3f:8b:7e:22:26:04:1a:b0:c7:
ae:13:06:c0:da:1f:6e:ff:2b:f0:d5:ec:d8:ff:5f:
f1:dc:f2:35:ca:4f:24:b7:cf:50:91:7c:01:a2:56:
fe:d3:bd:78:28:1b:f6:fe:7b:c4:c8:67:37:d0:f0:
2d:0a:b0:f6:b6:18:5f:57:c2:8f:21:82:c0:a6:81:
35:51:d0:3a:96:8d:f9:6a:fa:05:7d:7a:6f:2a:4a:
0e:72:e0:16:95:20:c4:50:79:ec:b8:e2:86:aa:0a:
09:2f:54:25:82:f7:cb:95:22:3b:8c:08:e3:d8:a4:
91:f8:29:5a:03:1d:46:2f:42:bc:9f:92:e8:73:6b:
df:54:a7:e8:e8:c7:2b:f2:4b:c8:71:4e:56:8f:de:
90:70:d1:cb:70:2f:00:38:ef:99:09:4f:1a:07:2e:
4b:4b:71:2f:c4:2c:f3:d2:b9:14:d0:f7:81:5c:b1:
eb:c6:2d:b3:1a:48:8c:29:bb:1e:1f:2f:2b:82:4d:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:26:1E:52:49:0C:59:26:60:FA:AD:A0:A5:BD:8C:F1:07:D4:C9
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.68.0/24
Signature Algorithm: sha256WithRSAEncryption
71:93:e7:1e:a0:d0:c9:21:72:b3:4c:bb:12:aa:02:be:be:aa:
e1:40:fd:88:1c:65:47:4f:98:a6:32:8a:f6:43:08:e6:3e:de:
c6:b9:c1:75:be:7f:82:83:78:14:e4:a2:57:51:12:19:d9:5c:
d6:c8:a9:ee:91:01:ed:63:03:d3:5f:c6:a0:6d:9d:37:97:88:
5f:1e:23:0d:c5:6c:00:44:0a:13:88:88:0b:71:13:f0:1d:f1:
2f:85:fc:16:df:24:ef:b0:ed:02:24:c5:2c:50:d9:8f:0f:db:
b0:f6:35:63:6b:71:4e:35:90:ea:a5:97:08:ad:b8:ac:ad:81:
d3:49:31:a4:9b:f2:e0:9e:8d:76:0c:07:84:ac:af:45:85:33:
9c:f7:45:ff:2c:0a:e0:7d:15:e3:c5:46:55:0e:f7:81:4c:70:
55:d3:d5:37:fa:ca:d5:e7:21:9d:db:a2:7f:77:a6:1a:24:db:
6d:46:62:7e:ae:14:12:07:9f:74:79:e8:01:a2:d6:66:2c:be:
3c:d2:53:fa:5f:3a:ab:1b:32:c2:55:40:ac:dc:31:81:f0:73:
7f:cb:2d:46:cf:9e:bc:3a:1c:fb:9b:3a:b4:a5:25:ab:9c:2c:
a2:c9:d2:f8:02:5d:74:21:36:a4:37:30:e1:de:b6:dd:d4:46:
bd:d4:fa:28
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUSYLEV2qjG/u+cA0wH7mnvAVY0QUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjA1MzEwODE0NDlaFw0yNzA1MzAwODE5NDlaMDMxMTAvBgNV
BAMTKEE4NzIyNjFFNTI0OTBDNTkyNjYwRkFBREEwQTVCRDhDRjEwN0Q0QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjlIIVYpr4Yy9GrlUzL4OLTyZC
sd9XFimJV3ZADciK4wtBqbtmg1Gu2mTrbsOMir4RcX42O+gy3CCW8r3cnCqG1z+L
fiImBBqwx64TBsDaH27/K/DV7Nj/X/Hc8jXKTyS3z1CRfAGiVv7TvXgoG/b+e8TI
ZzfQ8C0KsPa2GF9Xwo8hgsCmgTVR0DqWjflq+gV9em8qSg5y4BaVIMRQeey44oaq
CgkvVCWC98uVIjuMCOPYpJH4KVoDHUYvQryfkuhza99Up+joxyvyS8hxTlaP3pBw
0ctwLwA475kJTxoHLktLcS/ELPPSuRTQ94FcsevGLbMaSIwpux4fLyuCTdTZAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUqHImHlJJDFkmYPqtoKW9jPEH1MkwHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsRDANBgkqhkiG9w0BAQsFAAOCAQEAcZPnHqDQySFys0y7EqoC
vr6q4UD9iBxlR0+YpjKK9kMI5j7exrnBdb5/goN4FOSiV1ESGdlc1sip7pEB7WMD
01/GoG2dN5eIXx4jDcVsAEQKE4iIC3ET8B3xL4X8Ft8k77DtAiTFLFDZjw/bsPY1
Y2txTjWQ6qWXCK24rK2B00kxpJvy4J6NdgwHhKyvRYUznPdF/ywK4H0V48VGVQ73
gUxwVdPVN/rK1echnduif3emGiTbbUZifq4UEgefdHnoAaLWZiy+PNJT+l86qxsy
wlVArNwxgfBzf8stRs+evDoc+5s6tKUlq5wsosnS+AJddCE2pDcw4d623dRGvdT6
KA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:05 2026 by rpki-client