
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e38342e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: x2Sw2EfzxaUdD3L83oaHsILbdvh0ss4wGBH/U4jXvaY=
Subject key identifier: E9:BE:18:9F:B3:37:B6:35:26:12:7D:82:25:01:BF:47:C4:20:F3:2D
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 55FB85B18B590127A8B55CBB12DA5D49AAD2507B
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:49 +0000
ROA not before: Sun 31 May 2026 08:14:49 +0000
ROA not after: Sun 30 May 2027 08:19:49 +0000
asID: 151270
IP address blocks: 103.236.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fb:85:b1:8b:59:01:27:a8:b5:5c:bb:12:da:5d:49:aa:d2:50:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:49 2026 GMT
Not After : May 30 08:19:49 2027 GMT
Subject: CN=E9BE189FB337B63526127D822501BF47C420F32D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:ec:a0:02:a4:73:f4:df:80:39:8b:7c:a8:
b3:69:56:77:11:ae:08:37:be:33:9e:47:45:e7:db:
98:56:e3:fb:f8:41:51:f3:a8:26:f8:44:4b:82:03:
d0:2e:36:21:98:1c:43:ce:ee:8f:37:82:2a:6c:1b:
40:f3:7d:17:31:da:f3:96:3a:d0:9b:6c:83:59:27:
73:cc:f2:15:79:19:b5:ff:75:1b:dc:2c:56:71:21:
81:ae:ce:96:c8:f6:c3:98:69:63:78:40:cd:99:d5:
3d:da:9d:67:04:bb:0e:70:1b:fc:08:8f:60:ed:48:
25:c6:ea:75:ca:ca:10:4c:83:4e:a1:f6:4c:7b:99:
36:f4:ab:3b:30:73:72:55:54:88:ed:8b:60:f1:c7:
54:d1:8c:2a:93:9d:8f:5b:16:d5:b2:7e:11:8a:d1:
ee:a2:8d:6f:8c:68:bc:67:db:a1:1f:2d:84:bb:56:
dc:e8:8f:ac:7f:4a:b6:a0:e8:72:49:cf:86:2d:c6:
3d:1c:14:3c:57:49:8d:1d:58:b9:cc:f5:a2:cc:cb:
04:14:56:f5:e9:72:2c:31:24:29:01:b0:95:57:dd:
06:94:1c:99:24:7d:2c:e0:69:c5:13:2e:39:94:f8:
68:be:c2:22:cf:01:4e:17:e3:bd:98:ea:ae:6d:f5:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:18:9F:B3:37:B6:35:26:12:7D:82:25:01:BF:47:C4:20:F3:2D
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:02:a5:61:cf:61:ba:ec:ee:fd:73:be:ef:b7:3e:e8:cc:38:
8a:9f:21:cd:32:36:e0:5a:80:e0:72:d1:33:8b:34:72:55:f6:
ee:e5:1d:07:bc:56:22:01:84:ff:0d:da:0d:81:d5:66:dd:ec:
51:de:0e:bf:7c:4b:16:ad:3b:d2:fa:76:74:45:7d:69:d9:0b:
43:84:6c:55:a9:46:66:42:5e:8d:aa:bd:26:f0:d8:62:54:33:
bb:25:a2:66:6a:63:0f:09:b9:f0:35:fd:d6:b7:21:4e:f7:26:
92:22:c8:ae:fb:c5:48:20:dc:6d:c5:32:c8:41:84:78:22:e6:
1b:e9:0a:c4:e9:94:4e:cd:63:dd:56:a6:50:e6:d3:d2:0e:25:
27:e7:b2:68:6b:16:87:28:3a:3e:ce:cf:9d:73:7c:68:18:4b:
9b:08:a1:f0:e2:65:31:1a:33:c6:e0:64:6d:ac:d9:81:2e:65:
b7:4f:84:0e:c1:12:bf:fb:fc:a1:a0:03:ed:8b:78:8c:e9:2a:
94:92:1f:24:92:1d:a2:6f:c5:94:59:84:7a:6f:7e:77:c7:97:
24:73:90:06:7a:22:8a:1d:70:4a:b4:6e:00:e5:7b:98:fa:d7:
f6:ca:93:1b:10:aa:a9:51:12:3b:78:3f:28:0f:07:20:40:ea:
f6:d2:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:01 2026 by rpki-client