
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38322e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e38322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: Jhv1GnEt3rmuFok3c16yLOb+C0eUwT5Pd9nhgtn0GjY=
Subject key identifier: 88:6E:F3:83:75:A5:A0:81:68:8D:0E:3D:EC:D1:D8:90:CA:3C:EB:C5
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 4D91EF4583E452547FCD6EB38ED30A713E389F60
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38322e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:50 +0000
ROA not before: Sun 31 May 2026 08:14:50 +0000
ROA not after: Sun 30 May 2027 08:19:50 +0000
asID: 151270
IP address blocks: 103.236.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:91:ef:45:83:e4:52:54:7f:cd:6e:b3:8e:d3:0a:71:3e:38:9f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:50 2026 GMT
Not After : May 30 08:19:50 2027 GMT
Subject: CN=886EF38375A5A081688D0E3DECD1D890CA3CEBC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:fd:80:dc:5a:31:b7:eb:75:32:8d:8b:63:
db:87:3e:91:bb:8c:b4:f0:e9:19:1a:a7:06:a7:38:
f6:4e:ba:1f:7c:68:09:f2:c2:3e:13:dd:7f:68:85:
f5:0a:94:5a:c2:2e:5e:13:ed:8d:6c:95:87:dc:1d:
9f:53:bd:00:b1:25:5c:f7:67:21:24:9a:67:64:ec:
3d:85:92:c3:bc:2a:ae:e4:8d:19:f9:e4:d7:cd:f5:
0f:61:8a:d6:57:7d:7a:07:83:e4:45:a5:d2:38:76:
cd:a1:db:f0:e0:0d:79:69:71:23:5d:29:e7:10:3a:
1b:c6:f7:77:7d:be:be:21:85:bd:11:ff:5e:0e:8e:
80:0b:48:d8:23:ee:c7:98:a0:0f:7a:d9:1c:14:fc:
9e:05:db:d0:d8:fa:36:03:9b:7b:e3:7e:9c:a8:df:
76:4e:84:4d:11:79:a9:5f:3a:f9:60:45:a9:d5:56:
a2:33:0b:bd:86:3d:f5:a9:fc:b2:4a:21:36:27:24:
f7:4b:f3:87:56:12:c5:2c:b2:07:97:8c:ae:4b:2c:
16:57:e5:46:d2:1f:cf:30:bb:ba:da:32:8d:b1:7b:
14:7f:c8:91:56:15:a2:cb:b9:96:1b:50:53:32:40:
c0:b1:10:b3:69:34:86:95:95:8f:b1:7d:90:0b:7d:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:F3:83:75:A5:A0:81:68:8D:0E:3D:EC:D1:D8:90:CA:3C:EB:C5
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38322e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.82.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5f:89:30:fc:8a:64:f0:7e:4e:5b:68:3c:f5:cc:51:7e:ec:
5a:17:af:42:5d:8b:77:3f:a1:6a:f9:7a:9d:29:ed:0b:9e:db:
11:0b:66:02:b3:f3:d2:fc:a9:f6:e8:71:4e:42:23:03:5d:28:
4d:d7:93:80:9e:04:82:ed:8f:17:11:65:20:e8:8c:54:7b:fd:
1a:81:72:23:c0:af:49:dc:3c:77:dc:ac:c7:45:9e:58:34:be:
e3:b0:cc:8a:66:32:df:67:0a:21:b9:ce:af:ff:8f:9e:d7:3e:
af:65:b3:67:15:ae:1a:64:43:74:1c:bd:26:57:99:08:2d:4f:
40:e9:1b:54:12:aa:85:fa:2f:8b:12:74:37:d3:aa:c4:7e:f7:
fb:1a:5c:2d:eb:08:37:35:4f:dd:1c:0c:af:6d:3f:0d:69:19:
35:5d:6e:48:f9:f4:3a:f6:9b:eb:65:09:8f:c0:ca:89:df:3a:
03:a9:50:cf:91:cc:3f:eb:da:06:65:ee:85:96:5d:95:9f:17:
ed:a4:8c:d2:d6:45:20:ee:4a:95:a7:f1:0e:75:c4:0c:a4:44:
07:96:03:e0:69:91:d6:30:64:06:ec:eb:1b:e1:6a:48:8d:0c:
68:9c:ee:c7:6b:56:2e:25:84:c7:cd:17:e4:7d:79:5e:22:84:
c3:53:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:42 2026 by rpki-client