
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38372e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e38372e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: n4qElb8HxDEBKRiNFUwCJi4SnK0lBtW6FjpKCulYPsE=
Subject key identifier: D3:AF:31:8D:C7:70:5D:8A:AF:3F:49:6E:65:B1:1A:79:93:64:67:AC
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 550118F2FA8518634FA793D39DF903CA837E75BF
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38372e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:19:50 +0000
ROA not before: Sun 31 May 2026 08:14:50 +0000
ROA not after: Sun 30 May 2027 08:19:50 +0000
asID: 151270
IP address blocks: 103.236.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:01:18:f2:fa:85:18:63:4f:a7:93:d3:9d:f9:03:ca:83:7e:75:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:14:50 2026 GMT
Not After : May 30 08:19:50 2027 GMT
Subject: CN=D3AF318DC7705D8AAF3F496E65B11A79936467AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:ae:7d:5c:76:ab:e7:c2:a2:e7:7c:d2:b4:
7b:3e:78:e2:eb:02:21:ef:4a:8b:9a:70:8d:a0:e2:
c6:48:7d:fb:16:bb:58:10:86:3d:66:14:e6:7b:26:
92:74:09:fd:4c:99:b2:7f:2a:bf:fa:24:16:89:a1:
61:aa:91:a5:4c:e5:6e:39:5e:e0:cd:90:fc:24:a9:
bf:dc:9d:29:d5:17:b0:bc:ef:0b:80:6b:97:dc:ab:
af:8b:cb:82:10:1f:c3:39:78:b0:17:ee:f3:ca:16:
08:41:e4:5d:c3:64:f6:4c:8a:19:ee:11:f0:0e:61:
b1:4c:4a:17:57:1e:e7:55:44:8a:3d:fb:d0:00:8b:
14:b1:c2:96:88:28:69:ea:2f:71:44:1b:78:a8:e8:
8e:3e:29:ce:90:49:a6:f5:7f:5f:d0:26:8c:42:80:
4a:d3:ef:79:92:bd:8a:0c:64:ad:33:93:05:62:1d:
41:13:d3:50:19:44:6d:4a:4d:75:4b:e9:12:2e:73:
c6:85:76:98:5c:d1:06:05:b2:ab:61:b8:7a:df:ec:
dc:a2:45:39:fa:ae:c3:cc:b6:42:86:c7:d3:a0:ed:
a7:f3:b0:b7:cd:7a:9a:31:96:86:cd:43:0e:fa:3a:
a2:01:14:58:a2:c9:d4:72:e4:66:76:ae:47:e0:f5:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AF:31:8D:C7:70:5D:8A:AF:3F:49:6E:65:B1:1A:79:93:64:67:AC
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38372e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.87.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c9:df:90:ac:d5:27:a5:c2:d1:59:44:58:86:d4:04:75:90:
03:24:96:e0:4f:96:eb:ba:f2:1b:81:64:9e:d2:e6:0c:b9:93:
1f:e6:de:44:b2:cd:1f:3b:ae:06:ae:38:61:b5:28:03:48:bb:
26:1c:28:7c:5b:27:f2:74:e9:b2:2e:f9:51:4c:7c:88:1c:02:
73:ec:7f:8c:5b:85:25:10:a9:49:eb:c6:a0:65:d9:5c:99:61:
0e:15:cf:a1:27:29:77:8d:61:e5:c0:af:1d:94:58:5c:75:29:
d1:f5:6a:a2:92:79:5b:aa:60:5e:a3:69:b1:e2:a7:e8:a0:d9:
51:2d:c0:63:16:9b:1f:d7:c3:2d:5f:2c:fe:21:65:b8:d6:7c:
e6:c5:ce:e7:c0:8e:fe:00:ab:20:04:3a:95:c9:9e:a9:74:17:
0a:d0:d2:40:28:05:c7:7f:51:50:55:22:3e:09:ed:ab:44:03:
0e:a9:80:4f:b1:77:17:fb:30:8f:ee:a5:c7:18:e0:bb:14:53:
95:bc:33:46:51:a8:bc:6f:eb:5c:b2:73:73:b1:d7:95:d5:0f:
32:cc:da:47:b2:f5:68:a3:38:de:17:80:fc:6a:75:a6:ef:59:
95:df:66:0a:5e:c3:90:2f:7d:ef:65:36:90:7e:ca:7a:6e:06:
a1:02:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:06 2026 by rpki-client