
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38352e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e38352e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: U+bn7YPrFsMDShGx0+/vNBOoXfCYlGupP77uXgxtOP0=
Subject key identifier: 72:94:E6:0F:D5:70:F7:47:8D:58:9D:2B:A4:39:5A:E0:72:2A:CF:B7
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 386C3F4177CBDF4F529A1C02E93A678998DB1664
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38352e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:50 +0000
ROA not before: Sun 31 May 2026 08:14:50 +0000
ROA not after: Sun 30 May 2027 08:19:50 +0000
asID: 151270
IP address blocks: 103.236.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:6c:3f:41:77:cb:df:4f:52:9a:1c:02:e9:3a:67:89:98:db:16:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:50 2026 GMT
Not After : May 30 08:19:50 2027 GMT
Subject: CN=7294E60FD570F7478D589D2BA4395AE0722ACFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:f6:39:77:6c:fd:02:18:c2:0a:89:54:ea:
c7:4f:3e:6a:23:b8:47:5d:8c:05:5e:4a:29:20:81:
43:b2:ff:d2:00:4b:c6:2b:69:dc:78:0e:81:32:51:
de:5b:4f:02:81:e1:ad:5e:7e:6f:9e:7f:72:32:fe:
2d:21:4a:54:6e:ed:64:ec:5e:9e:a7:93:a6:47:2a:
b4:b5:09:b9:0c:18:49:cf:e8:51:53:b7:a1:27:91:
64:73:d2:b5:1e:7e:1b:98:2c:66:c8:93:96:c5:19:
3d:58:7b:c3:ea:36:ba:af:19:38:8c:68:8a:a6:e3:
02:8f:1c:cd:18:76:db:d5:8b:fc:a9:a7:dc:d4:e9:
e9:a5:0e:d6:27:d7:84:85:c6:31:87:ff:03:92:44:
75:cb:78:ae:c2:27:0b:b1:05:c8:80:7e:cf:16:d3:
62:c8:a1:c5:0b:a1:5b:46:01:1e:06:f7:a3:cf:37:
76:fe:83:39:e3:39:53:da:87:0e:a0:92:66:26:4c:
b0:37:97:33:bf:49:27:32:46:22:53:51:05:f2:66:
19:d6:c1:6a:c8:58:43:4c:43:ff:55:37:ad:71:75:
ba:cd:0a:c6:9b:24:08:fc:c5:aa:5b:55:94:01:fd:
3f:bc:a5:76:b6:36:66:e2:4c:fa:57:e6:4b:9a:dc:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:E6:0F:D5:70:F7:47:8D:58:9D:2B:A4:39:5A:E0:72:2A:CF:B7
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38352e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.85.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9b:3e:71:01:be:c4:33:79:50:0e:8d:50:a3:bd:f7:01:f3:
ff:4d:cd:81:5c:6d:6e:34:40:af:bf:e2:fd:f9:51:7e:df:43:
da:e2:aa:ef:73:c7:43:87:ee:10:c4:d7:44:6e:15:ed:71:bc:
29:71:3e:86:52:73:c1:02:fc:9f:f6:ad:3b:c8:08:c5:12:8f:
d1:46:f5:65:bc:86:92:f4:65:9d:dc:a5:c6:ae:30:b9:69:a9:
7a:c6:50:50:b2:c0:39:76:4b:46:d0:a3:52:db:2d:0d:88:50:
7d:f0:b3:bf:c5:41:a3:98:c9:09:8c:20:e2:25:1f:74:01:37:
07:0d:a4:2b:b9:50:e5:c8:17:53:75:db:a4:7f:81:56:0d:fa:
97:92:6d:ed:f1:75:0c:4e:28:8d:b6:6e:4c:2f:c1:2b:ef:1c:
d9:b5:9f:89:5a:a2:ad:13:93:22:4c:bb:8b:dc:7d:d1:99:3f:
5a:76:9a:b0:25:6d:cf:e0:5d:8e:24:35:23:42:80:67:2e:21:
ad:dc:b7:95:19:be:e8:c7:02:d6:86:46:a7:0e:79:70:82:92:
33:21:97:74:b5:75:8e:4d:89:78:99:8a:24:39:a4:ba:45:c1:
5b:02:0a:a3:03:3d:e3:ca:07:09:b0:59:c4:66:5a:96:2d:a7:
c6:0c:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:03 2026 by rpki-client