
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: T0iRG1LSk3N7SvUJEd9KIPoUpnKwQSWSnEmEp+hpnHg=
Subject key identifier: 79:2E:66:F2:17:DE:65:A6:43:83:E4:22:DD:05:8B:90:BF:54:7F:18
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 401F11907428DE55DCF0F06F04355E80F3E88E34
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:49 +0000
ROA not before: Sun 31 May 2026 08:14:49 +0000
ROA not after: Sun 30 May 2027 08:19:49 +0000
asID: 151270
IP address blocks: 103.236.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1f:11:90:74:28:de:55:dc:f0:f0:6f:04:35:5e:80:f3:e8:8e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:49 2026 GMT
Not After : May 30 08:19:49 2027 GMT
Subject: CN=792E66F217DE65A64383E422DD058B90BF547F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:78:fc:ef:c7:6b:ff:a4:87:9f:9d:17:b3:65:
3a:d9:7e:e0:0c:71:b1:33:3c:aa:b1:a3:5f:5d:0c:
02:bb:35:34:b5:cc:32:de:38:fb:6f:1b:7d:fa:d6:
4e:a8:cc:94:f7:5d:c6:27:c4:36:6b:f8:22:db:0c:
64:2f:d1:60:9d:ee:9c:7f:44:db:17:f6:58:4c:83:
20:7c:c2:86:68:96:38:2f:e8:2f:8e:18:22:36:02:
5b:70:a3:12:26:e2:08:f5:bd:2f:68:4c:9c:3d:cb:
1d:0a:db:cc:b0:43:3f:21:6c:54:aa:2b:46:38:5c:
80:5f:23:51:23:3d:76:db:bf:e3:51:9a:73:cc:9e:
86:44:57:37:bc:ed:e4:1b:46:2a:35:d8:15:b7:aa:
29:68:bd:7f:4c:f9:d5:f3:fc:d3:f9:72:85:cb:5d:
52:65:db:d4:fb:88:9b:bd:b5:8f:31:73:5d:3c:39:
39:46:9a:65:e3:db:1e:3f:9b:24:ec:2f:39:5c:24:
c1:ef:48:c0:1d:2f:3b:7f:36:32:83:08:25:06:91:
2d:ba:a7:a5:ee:c9:8b:a3:50:7a:53:af:fc:2a:f7:
16:9e:74:f6:d1:92:d6:5c:b6:58:16:23:9d:a6:24:
34:f6:cf:19:30:40:45:69:b2:1f:3b:17:80:e6:22:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:66:F2:17:DE:65:A6:43:83:E4:22:DD:05:8B:90:BF:54:7F:18
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.72.0/24
Signature Algorithm: sha256WithRSAEncryption
92:86:c8:c1:e5:65:13:48:fb:9d:b7:f1:74:e5:e6:59:17:99:
a6:de:84:5c:31:6a:5d:60:df:30:d5:1a:66:19:c6:71:06:73:
60:1a:cd:25:4e:ea:47:3b:3c:56:58:b0:f3:c4:ae:6a:db:cb:
2f:fe:79:f4:f6:e7:93:12:03:df:cd:30:e0:11:ed:6c:92:5e:
60:40:bb:ea:26:4c:c3:0f:92:9f:4e:8e:9f:ed:0e:52:d9:8d:
98:97:a0:b4:63:72:9d:3f:f2:c5:2f:c5:37:78:b4:55:2f:90:
98:ea:fe:3b:12:e0:05:d0:83:23:33:bf:17:18:8f:5f:e0:d2:
27:0d:42:5a:fc:d4:44:ba:9d:ab:c1:45:f6:9b:5f:5d:41:78:
0a:ae:06:50:d5:12:64:6f:fc:b1:64:85:b1:24:8e:82:ab:fb:
f6:83:c9:ab:2a:15:e8:48:85:c9:71:d9:64:1e:96:c3:eb:bb:
13:87:e9:0a:32:29:e9:1f:7f:e2:c5:25:7e:b9:60:7e:3b:c8:
df:80:58:12:3e:c0:21:05:ab:b4:14:6f:c8:72:d7:2f:9b:f1:
50:47:d8:d4:0e:15:52:9f:73:21:d2:3c:3a:9e:f1:98:77:09:
a2:3a:62:13:f3:eb:7f:a8:57:32:03:1e:52:cb:7f:fe:16:c3:
0b:72:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:47 2026 by rpki-client