
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37302e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e37302e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: ELaqvOxpUvhPE9oanWCILyELgBrTihbiaCkLKF94aEM=
Subject key identifier: ED:82:16:BC:62:59:29:18:BC:4A:6D:FC:C5:A4:A3:A6:24:11:1B:AC
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 079DDC94D168942611EC4359B43072BB04632305
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37302e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:49 +0000
ROA not before: Sun 31 May 2026 08:14:49 +0000
ROA not after: Sun 30 May 2027 08:19:49 +0000
asID: 151270
IP address blocks: 103.236.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9d:dc:94:d1:68:94:26:11:ec:43:59:b4:30:72:bb:04:63:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:49 2026 GMT
Not After : May 30 08:19:49 2027 GMT
Subject: CN=ED8216BC62592918BC4A6DFCC5A4A3A624111BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:97:01:d9:a5:42:a0:6e:30:1b:16:1a:2f:
81:b1:3b:dc:09:a1:f2:ef:23:af:72:69:7c:34:93:
9b:b9:70:bf:2d:f8:c0:39:7a:62:3b:8c:c0:ea:23:
28:16:9a:75:dd:24:e6:1a:a2:9a:76:78:4d:73:49:
3e:48:21:50:53:98:e6:0e:12:9c:e8:30:1e:15:c3:
df:55:1e:57:61:f0:24:75:39:07:93:f5:a4:63:79:
8d:d4:79:5f:e1:c0:0d:2e:00:43:f1:cf:49:57:1f:
c2:64:48:8a:db:9c:37:1a:e8:6a:f4:2a:cb:6d:57:
96:dc:89:16:fb:07:54:4f:bd:9e:f1:9a:74:90:69:
f2:f5:88:15:13:c0:ff:56:66:5a:d6:a9:8e:83:b2:
05:f7:6e:8e:2b:a6:bb:3e:b3:a8:60:d3:94:c7:8e:
00:25:2e:c1:2f:8b:24:36:fa:35:8d:3d:6b:74:f3:
a2:0f:f9:a1:48:c1:98:d2:44:db:d2:1a:88:8a:e2:
10:c3:24:37:69:b3:8a:15:69:c6:c6:92:d4:7d:f5:
a5:3c:aa:ba:24:4d:2e:d4:0b:47:7d:0b:53:c5:aa:
0d:75:03:dd:d0:f0:48:4e:66:6c:ab:06:9f:2b:1c:
46:dc:64:ee:6c:37:bb:09:51:6e:ee:e1:ee:30:a9:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:16:BC:62:59:29:18:BC:4A:6D:FC:C5:A4:A3:A6:24:11:1B:AC
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37302e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:eb:d9:bb:ee:c1:d8:d4:c2:0d:e3:81:c1:95:95:68:ed:74:
cd:4e:8d:88:1c:ed:5a:b7:f9:06:91:74:96:1a:a9:0b:92:26:
21:43:93:48:fe:ef:73:57:12:91:e1:9e:7c:a3:ec:64:4c:8b:
30:e9:df:cc:da:68:6d:cf:a6:78:c1:2f:82:26:d5:16:ce:72:
08:e6:1c:87:ec:33:39:c2:3d:3a:06:93:c5:a8:0e:aa:ea:a3:
f8:3a:6c:a2:69:04:e3:bb:fb:cc:32:f8:b8:25:4b:49:77:53:
21:0a:8c:f9:ad:37:20:aa:ca:96:65:3f:93:26:00:1f:4c:26:
af:93:e0:ff:87:5a:eb:b7:1a:c3:93:ba:ba:09:45:dc:5f:49:
c6:7d:87:a7:bb:bf:93:b1:c2:a6:18:b0:0b:a3:38:6c:c3:d4:
9f:b4:8a:7a:18:43:ad:fd:73:15:17:a0:b8:cf:70:02:17:29:
fb:38:82:af:61:b9:dd:24:c3:ed:74:41:30:e7:1a:dd:15:44:
3e:00:81:e2:1c:d6:99:7f:15:72:84:c9:47:79:08:89:c7:f8:
a4:12:46:c1:6d:b7:85:fe:a0:c0:79:a1:ac:ed:aa:3f:d0:0b:
f9:41:66:6f:f9:c8:80:84:67:8a:14:e0:ab:84:10:bb:95:a5:
30:f2:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:56:44 2026 by rpki-client