
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37332e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e37332e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: JbuwQ4joE9oIrzdaS8tKeaV2QxT2k1frxpSRzjFfYLw=
Subject key identifier: BD:D5:FD:AD:68:C1:C8:10:3B:5A:0F:71:06:4F:96:B1:5A:78:3F:4B
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 2A8AC00A643E0486DADAD84BD25AB90450911F60
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37332e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:49 +0000
ROA not before: Sun 31 May 2026 08:14:49 +0000
ROA not after: Sun 30 May 2027 08:19:49 +0000
asID: 151270
IP address blocks: 103.236.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8a:c0:0a:64:3e:04:86:da:da:d8:4b:d2:5a:b9:04:50:91:1f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:49 2026 GMT
Not After : May 30 08:19:49 2027 GMT
Subject: CN=BDD5FDAD68C1C8103B5A0F71064F96B15A783F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:5b:b0:9b:e1:66:1d:ed:a3:da:2f:43:ed:
ec:57:67:63:e2:94:91:22:49:d7:1e:62:e3:40:b7:
53:2d:e2:57:85:c3:00:0b:4a:9d:c5:fb:4a:08:23:
90:fe:9d:8d:4e:ba:d8:42:6d:6f:bf:ae:d5:4d:45:
39:22:55:7e:c0:e5:2d:ac:1f:7c:e8:ca:b8:ec:bb:
2a:4b:b7:29:62:9b:01:e5:ab:c2:51:13:13:63:40:
52:6c:08:9a:97:a6:c2:e7:6c:f7:5e:38:7b:a7:a3:
36:75:d8:52:da:bc:f4:96:c0:f2:56:2e:0f:11:b4:
45:06:11:58:d3:cd:d6:ba:ff:ee:c3:84:f6:25:6a:
58:f5:cd:fe:86:47:3b:f3:01:35:dc:9d:04:5f:f6:
0a:6a:a5:58:9a:5a:8d:99:a4:a3:36:20:3f:72:6b:
df:98:a1:e0:ae:5e:ff:f2:0f:90:68:f5:40:d8:02:
ef:4d:c6:31:5c:ea:3c:bc:c3:a4:e0:70:7f:ae:31:
05:73:2b:46:9b:9c:fe:03:cf:c3:eb:59:df:d4:14:
2f:88:b5:2e:4c:77:62:51:0a:65:cb:17:ec:8a:22:
9f:70:98:99:10:25:80:0b:c8:6d:1b:fb:01:6e:90:
9d:39:e8:94:10:95:5e:d1:de:89:e7:a1:9e:65:ea:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:FD:AD:68:C1:C8:10:3B:5A:0F:71:06:4F:96:B1:5A:78:3F:4B
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37332e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.73.0/24
Signature Algorithm: sha256WithRSAEncryption
97:af:c3:76:e3:8f:de:21:dd:6d:18:82:b9:37:95:8e:0b:a5:
10:e0:04:72:d8:02:cf:cd:77:54:e2:19:66:a3:a7:01:20:2e:
6b:ec:98:f0:43:f8:d4:4c:27:02:6e:ce:47:f6:54:39:b3:93:
7d:ad:de:a2:69:e7:e4:f3:a4:21:ff:32:40:1d:3b:c7:b7:68:
ce:1c:f5:d3:03:07:44:b1:1e:03:61:c1:a4:da:d0:ae:49:64:
c5:a1:2e:58:2a:b8:79:b1:0f:15:d0:e1:48:b8:a1:fb:b2:b7:
b6:0b:63:e4:86:f9:f2:bf:51:a2:9f:55:db:64:df:75:1a:02:
17:1e:52:db:b5:81:f4:21:6b:3b:7a:84:59:7f:98:55:1f:4b:
1a:b7:24:f8:91:51:2a:8a:96:1b:d4:e1:b2:a7:87:1f:28:f8:
a3:60:8d:c3:1c:7d:f8:e4:0c:2a:63:e6:fa:2d:ea:b5:92:57:
16:37:0a:b0:2c:24:d2:61:5e:cf:9f:0d:46:7f:36:7f:b1:e8:
1c:39:5b:7f:ae:7a:16:64:f8:e9:3a:39:b3:96:0e:f7:0f:47:
9d:2f:8d:e4:bd:23:6d:48:de:7d:b5:73:03:ed:37:95:0a:0c:
ee:6f:86:8d:09:d2:77:1f:8b:41:c2:22:67:da:04:a4:67:d6:
9a:b8:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:08 2026 by rpki-client