
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: gxwezrVXiIKGsVvDtYSFR/kcwiLMit2NuAXJU/AjvEw=
Subject key identifier: 58:C6:30:3C:7F:47:FF:0F:D1:95:BC:B6:39:F2:69:B9:64:D9:F7:52
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: A284207C0D618565AE1F94788746A6D4729897
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:50 +0000
ROA not before: Sun 31 May 2026 08:14:50 +0000
ROA not after: Sun 30 May 2027 08:19:50 +0000
asID: 151270
IP address blocks: 103.236.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a2:84:20:7c:0d:61:85:65:ae:1f:94:78:87:46:a6:d4:72:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:50 2026 GMT
Not After : May 30 08:19:50 2027 GMT
Subject: CN=58C6303C7F47FF0FD195BCB639F269B964D9F752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:7b:6e:77:16:31:26:a5:86:01:66:9e:71:
32:8f:09:20:ee:d4:68:60:a0:a9:4b:2c:16:96:9c:
cf:07:c2:90:cc:25:6a:48:f3:56:fa:76:55:7a:38:
80:0b:87:7b:18:74:c0:2c:f1:e5:a7:eb:58:a2:b4:
96:dc:5d:d7:41:45:e6:cc:80:fd:27:12:f8:df:43:
09:2e:fc:81:17:b5:71:4c:b4:6c:18:34:a0:28:d6:
e4:8a:b6:32:d3:96:b9:a8:16:ca:4f:7c:1b:78:e5:
62:6a:74:4e:a4:6e:e8:5a:b0:73:49:af:fe:6a:4d:
e2:16:da:16:ee:05:d0:55:03:9e:c5:0f:79:a2:09:
8b:10:70:76:f6:82:0c:9c:00:0a:30:c0:81:ea:8d:
a2:73:ed:c9:8b:e0:2e:04:71:12:2a:3a:db:a4:62:
6b:30:70:44:fa:29:7a:43:18:cf:62:f8:ea:0d:67:
f0:ec:1a:bd:9e:a1:08:59:ca:4f:fa:85:54:f1:92:
80:52:8c:8f:75:f0:3b:bc:3a:43:8d:78:e7:41:8e:
77:9e:74:1f:21:d1:82:71:6c:3b:42:a2:cb:b5:f4:
ed:a4:d3:2c:ad:1a:18:77:18:40:31:e0:a7:4d:21:
29:03:be:0e:00:2b:49:ad:13:da:f2:26:ab:d6:bd:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:30:3C:7F:47:FF:0F:D1:95:BC:B6:39:F2:69:B9:64:D9:F7:52
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.78.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ff:6a:9a:e3:c9:f4:0e:4e:ca:41:1a:0d:1b:9c:ce:0c:41:
71:0e:e3:ed:bd:1a:47:fd:32:56:1d:cc:64:45:d1:06:c2:d4:
e0:f0:88:cb:c3:b0:51:18:9f:59:19:d8:89:36:35:11:79:f0:
48:55:a5:0e:5a:b1:61:c0:ab:b0:f4:2c:4f:84:9e:df:cb:65:
1d:e1:b7:21:f9:df:08:4f:f3:28:b2:84:90:d0:1a:d1:ec:a6:
96:ad:5c:eb:a0:0a:dc:20:d4:bd:87:6c:29:ef:56:9c:ec:de:
c5:11:d0:b2:04:a8:1d:64:63:af:c5:d9:f7:b9:b6:c9:14:e9:
14:55:cd:2d:bc:fb:3d:c3:8a:f5:6b:85:e5:6a:dc:a1:ae:44:
df:cd:f3:80:77:3d:27:af:d0:fc:e6:4d:bf:6b:6f:f6:17:d9:
a7:b2:ed:00:3b:c4:27:dd:b7:fd:cd:4e:3f:39:f0:aa:a4:23:
51:79:2f:de:68:93:33:04:d5:67:0e:ea:c5:29:33:b4:a6:b7:
47:8a:ca:18:52:3c:9f:eb:ba:7e:46:73:79:4b:05:99:13:d3:
a6:59:6a:c7:72:b4:83:1f:02:a4:e7:8a:5c:2d:ed:91:4d:5a:
c3:f0:6a:61:1a:cc:98:46:22:ae:47:ac:b9:d5:cc:ad:01:89:
4a:91:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:58 2026 by rpki-client