
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e36392e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: bCDM74V4qLs95z6JiZJc+sb2iUbhlOrWc9v4zBFdpNc=
Subject key identifier: C8:F5:F3:30:15:91:2A:52:D0:55:11:D4:90:79:F2:BE:7E:35:7D:73
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 2C32869AF5E2CE3F9E50BA082C356DCCB253AEB9
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:50 +0000
ROA not before: Sun 31 May 2026 08:14:50 +0000
ROA not after: Sun 30 May 2027 08:19:50 +0000
asID: 151270
IP address blocks: 103.236.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:32:86:9a:f5:e2:ce:3f:9e:50:ba:08:2c:35:6d:cc:b2:53:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:50 2026 GMT
Not After : May 30 08:19:50 2027 GMT
Subject: CN=C8F5F33015912A52D05511D49079F2BE7E357D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:69:78:60:1f:18:14:01:af:d8:b9:3a:32:
c9:c5:78:6d:70:99:4b:5b:99:13:2b:32:3d:9a:32:
f8:fa:fd:be:6e:01:99:14:4c:46:11:5d:f0:ac:72:
33:e6:91:cd:a7:7d:01:f0:10:82:57:c9:ff:5e:c3:
fb:7f:99:72:0a:cf:e8:22:e0:45:7e:41:9b:cc:0d:
53:c4:e8:3d:c1:d8:6d:2b:b7:98:fb:a5:75:49:2f:
ec:14:cc:fd:68:5b:91:fe:ff:07:64:a2:30:ad:7c:
03:ce:42:c5:b8:cf:d7:20:d6:03:be:82:67:6e:c3:
97:17:87:2b:70:a1:42:a0:fb:1c:d5:72:75:09:5c:
72:9b:29:51:ac:01:ae:c1:e2:58:04:1b:79:0d:e2:
ec:89:e7:e0:d1:ec:26:24:11:be:76:2e:fb:3a:7c:
4f:de:7f:8e:74:da:01:71:4d:33:ac:55:4d:1f:75:
7a:19:2d:6e:f6:02:45:d1:dd:60:a0:df:b4:64:87:
63:f5:56:d3:c2:94:3d:cb:3a:d4:c5:19:23:65:e3:
fd:4a:4a:01:b8:27:a2:34:52:b3:73:08:17:a3:a1:
b5:85:bb:a9:ca:88:84:e2:8b:29:85:5c:14:8f:35:
e9:de:6e:2a:88:b9:74:ef:4b:7f:d1:04:68:0b:b4:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:F3:30:15:91:2A:52:D0:55:11:D4:90:79:F2:BE:7E:35:7D:73
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.69.0/24
Signature Algorithm: sha256WithRSAEncryption
87:15:d3:14:80:43:d1:73:e1:99:55:9d:9c:1c:52:af:95:8d:
fa:b9:04:34:5c:ce:70:ef:65:63:06:de:69:0e:ec:10:34:7d:
e5:eb:f9:7c:af:c6:01:64:32:41:39:98:fd:53:f7:d1:e8:58:
81:1d:5e:63:ba:3c:f3:b1:2d:bd:4d:4c:ca:f9:c7:ba:ed:95:
3d:3f:ad:51:e7:c8:43:ba:0a:82:ac:c5:d6:bb:4a:32:73:57:
10:69:4e:56:55:71:80:11:04:18:88:f2:68:45:6f:ef:2c:38:
19:63:5c:f5:aa:ec:4b:41:69:bb:36:05:e2:d6:ac:55:b7:d0:
70:b5:46:13:bd:8d:7b:a6:57:fd:4a:71:fa:5c:f6:d8:3e:ea:
bb:bf:8b:9c:c0:59:e5:e6:4d:48:f1:c7:d4:2f:b7:78:24:a5:
84:2d:a5:52:87:ea:79:77:d9:ee:12:6c:15:16:a2:4e:7a:36:
ef:9b:f4:dc:bb:a6:fd:3b:ae:48:46:90:70:0e:ec:fb:99:3b:
24:f0:8b:54:0a:00:7c:f5:18:01:bf:c4:d1:04:c0:f5:30:20:
26:51:8a:cb:54:85:37:dd:fa:49:e7:4d:4a:f2:5d:d2:0c:fe:
9c:75:fa:8b:9c:df:f8:70:a9:57:01:13:52:50:b6:22:3b:92:
94:70:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:54 2026 by rpki-client