
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39342e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e39342e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: KyLPqOFuy6L1L+MdrvP8RP36moQ6Lu0qqCyaHgEI2/o=
Subject key identifier: 33:BA:B1:D2:08:48:F1:DA:B2:62:C4:01:1B:D9:C7:A2:01:1C:F8:BD
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 7080BEDD8BC23F0ADCC3460F8A509A0630642D05
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39342e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:20:44 +0000
ROA not before: Sun 31 May 2026 08:15:44 +0000
ROA not after: Sun 30 May 2027 08:20:44 +0000
asID: 151270
IP address blocks: 103.236.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:80:be:dd:8b:c2:3f:0a:dc:c3:46:0f:8a:50:9a:06:30:64:2d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:15:44 2026 GMT
Not After : May 30 08:20:44 2027 GMT
Subject: CN=33BAB1D20848F1DAB262C4011BD9C7A2011CF8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:9d:9c:55:2b:a9:5e:cf:83:0a:7c:69:4a:
69:04:55:9f:01:5a:81:ea:5c:8f:c8:d6:30:78:71:
56:9c:5c:f6:90:b3:64:2f:dd:55:1c:f2:85:33:e6:
a9:f7:80:c7:c2:b5:54:a2:d1:1d:17:c0:8b:f2:4e:
cb:5a:b8:e5:5a:02:b8:1b:eb:c3:50:0c:43:bb:b3:
be:ee:87:fb:c9:f2:72:e4:a0:4b:fb:5c:8e:45:cf:
ad:5d:2d:0d:2a:f4:b0:fe:14:d8:b9:06:a7:be:a8:
2b:c7:c7:4a:95:12:99:34:62:30:c7:59:c6:09:84:
72:b1:d8:0f:56:84:af:e8:4f:f8:3f:ef:9e:97:65:
19:70:b5:5b:46:ba:07:ec:a5:b2:49:b8:13:a0:63:
40:23:06:33:61:30:9e:b4:39:58:05:f1:a7:b2:de:
20:24:d2:14:6b:7d:16:ba:5e:d3:4b:3b:b3:30:1f:
73:3e:67:d3:c8:c5:2a:a8:6d:53:db:48:50:20:6e:
7b:c9:6f:c9:55:96:f0:b2:9d:46:ad:40:cd:b3:b7:
0a:6c:d2:6c:a0:b6:c7:e5:bd:07:02:6d:f8:dd:73:
12:a4:e7:ae:11:ab:7e:ed:30:96:14:43:bc:f8:88:
77:73:c3:84:68:cb:f9:99:52:e7:38:01:b6:de:8c:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:B1:D2:08:48:F1:DA:B2:62:C4:01:1B:D9:C7:A2:01:1C:F8:BD
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39342e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.94.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5e:0d:31:c8:ad:98:44:91:1b:35:24:16:50:eb:96:07:36:
5c:42:24:d8:2f:db:b9:d8:e8:27:2f:9a:a2:55:6d:24:b5:de:
8d:d8:f6:f6:d4:00:57:a3:6c:e2:2c:a6:da:62:93:91:f4:06:
fe:dd:2c:8c:a4:92:3c:ac:23:97:94:d9:5a:3b:ec:cb:f1:5e:
e8:28:bc:bf:d0:a1:a1:da:97:6f:a2:f5:a3:b3:c6:62:fb:50:
02:fd:53:79:29:23:47:ab:c5:63:73:61:c9:f7:d7:7a:58:e2:
d0:03:ee:64:1b:ad:ae:14:62:51:aa:e7:fe:c1:3c:44:ad:3c:
08:83:6b:e3:a2:3f:ff:f2:9f:71:d5:72:4d:96:57:6f:42:d4:
0b:55:2d:ca:03:54:90:1e:45:1c:b3:03:7f:f1:d4:e9:64:02:
50:52:5e:32:89:99:18:59:50:91:10:22:8c:56:11:2a:80:63:
08:76:85:f7:cf:7e:da:3b:2e:f0:4c:82:54:b5:7d:ab:33:bd:
72:dd:1d:d5:bf:26:fa:54:93:b2:3a:9a:92:a0:d1:cd:41:77:
1f:0b:86:20:ac:23:bf:4b:fb:75:ac:da:01:9d:77:e6:ae:6a:
06:83:9f:e3:d3:07:57:77:d8:58:b3:01:d5:14:b9:72:3f:64:
cb:21:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:01 2026 by rpki-client