
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e39352e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: G+YEYnAu8OE4HGSu6+6rm6dT2JxHaXNlEdXdGyq8HoQ=
Subject key identifier: D3:CF:7C:7A:F2:77:28:81:AD:A5:CA:B2:FA:7B:94:46:36:76:0E:63
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 4C5FFEB3518ADAC96DA7C95EA531A21294B3165E
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:20:44 +0000
ROA not before: Sun 31 May 2026 08:15:44 +0000
ROA not after: Sun 30 May 2027 08:20:44 +0000
asID: 151270
IP address blocks: 103.236.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5f:fe:b3:51:8a:da:c9:6d:a7:c9:5e:a5:31:a2:12:94:b3:16:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:15:44 2026 GMT
Not After : May 30 08:20:44 2027 GMT
Subject: CN=D3CF7C7AF2772881ADA5CAB2FA7B944636760E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:03:c8:91:42:07:a6:bb:fc:80:6e:fc:c6:
75:43:34:11:75:ad:b2:b5:6f:7d:57:37:34:a4:da:
d7:b2:ad:e4:e5:16:38:9c:3c:a6:a9:d5:53:04:ac:
7d:91:f5:5b:05:49:95:75:f8:12:0c:a7:9e:b5:cc:
bb:e4:d8:7d:46:34:f2:ef:90:48:a1:b0:15:08:c5:
c8:a9:05:e8:37:75:a0:6d:16:ed:52:66:17:6f:b4:
89:a2:0c:7d:1f:9b:d4:37:e3:a6:69:51:19:6c:2b:
8e:e0:99:cf:b0:da:3f:2d:73:04:e7:69:59:66:5c:
7e:e2:e2:40:10:4d:8b:6d:5d:f0:05:a4:40:0a:c1:
ff:fc:ed:9a:76:db:32:9a:38:ad:47:e3:5f:1b:c9:
69:c5:bd:41:cd:6e:f1:1f:62:ba:70:fe:d7:f6:7c:
68:61:1e:6f:6e:61:f1:21:6a:0b:0a:f4:36:e8:2e:
df:35:89:07:b4:4d:f1:17:17:5f:78:6f:58:fd:98:
1b:25:35:7d:5a:74:73:7d:ca:32:8d:ae:3d:d1:75:
94:9e:37:ef:36:89:06:11:69:c3:61:89:8f:82:60:
f6:02:d6:a3:83:f4:bd:d7:98:16:d7:63:5c:a9:e2:
7e:0d:0d:9b:e0:6a:28:8f:13:67:7f:57:d1:e5:d9:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:7C:7A:F2:77:28:81:AD:A5:CA:B2:FA:7B:94:46:36:76:0E:63
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.95.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3b:75:75:3b:94:c4:0a:c1:ad:e4:a0:00:5f:3c:6c:e3:37:
40:97:d4:d3:20:da:7e:dc:21:3e:95:de:f7:9c:b9:f0:1b:40:
90:1a:bb:8d:72:ac:7b:71:ef:d7:fa:27:70:43:70:78:1b:3e:
49:f2:da:73:97:56:0c:54:f6:15:3d:47:c6:0f:16:a8:32:5f:
93:95:ed:b7:4a:ce:e4:86:82:69:fb:11:fe:13:d4:cd:22:ba:
5c:c1:a7:a2:7b:e6:93:72:21:27:35:ae:8e:0c:1d:1f:84:86:
c0:e4:95:3c:65:8c:4b:1d:f8:a5:6c:05:ed:2f:1d:9f:b1:0f:
b3:e0:87:e3:dc:fe:91:32:c9:b1:ff:27:05:c7:87:f9:41:7c:
dd:be:d8:9c:3b:c0:63:31:f3:11:4f:a0:85:f3:1e:91:49:23:
f9:0b:bf:de:59:7f:cd:e5:08:3d:02:6f:2a:5c:07:1e:13:28:
6b:77:77:97:1f:c5:2c:53:2f:2e:56:23:f0:52:51:00:9e:14:
89:1e:51:65:44:c4:1d:82:bc:a7:25:f1:33:38:9d:a6:82:b1:
29:b4:57:2f:28:fa:e5:f9:43:39:7e:9f:5f:3e:f1:73:a1:1e:
35:53:2b:69:15:0d:9b:ca:bc:21:b1:80:72:3d:91:72:ad:93:
de:2a:fd:3c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUTF/+s1GK2sltp8lepTGiEpSzFl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjA1MzEwODE1NDRaFw0yNzA1MzAwODIwNDRaMDMxMTAvBgNV
BAMTKEQzQ0Y3QzdBRjI3NzI4ODFBREE1Q0FCMkZBN0I5NDQ2MzY3NjBFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmwPIkUIHprv8gG78xnVDNBF1
rbK1b31XNzSk2teyreTlFjicPKap1VMErH2R9VsFSZV1+BIMp561zLvk2H1GNPLv
kEihsBUIxcipBeg3daBtFu1SZhdvtImiDH0fm9Q346ZpURlsK47gmc+w2j8tcwTn
aVlmXH7i4kAQTYttXfAFpEAKwf/87Zp22zKaOK1H418byWnFvUHNbvEfYrpw/tf2
fGhhHm9uYfEhagsK9DboLt81iQe0TfEXF194b1j9mBslNX1adHN9yjKNrj3RdZSe
N+82iQYRacNhiY+CYPYC1qOD9L3XmBbXY1yp4n4NDZvgaiiPE2d/V9Hl2QUNAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU0898evJ3KIGtpcqy+nuURjZ2DmMwHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsXzANBgkqhkiG9w0BAQsFAAOCAQEAhjt1dTuUxArBreSgAF88
bOM3QJfU0yDaftwhPpXe95y58BtAkBq7jXKse3Hv1/oncENweBs+SfLac5dWDFT2
FT1Hxg8WqDJfk5Xtt0rO5IaCafsR/hPUzSK6XMGnonvmk3IhJzWujgwdH4SGwOSV
PGWMSx34pWwF7S8dn7EPs+CH49z+kTLJsf8nBceH+UF83b7YnDvAYzHzEU+ghfMe
kUkj+Qu/3ll/zeUIPQJvKlwHHhMoa3d3lx/FLFMvLlYj8FJRAJ4UiR5RZUTEHYK8
pyXxMzidpoKxKbRXLyj65flDOX6fXz7xc6EeNVMraRUNm8q8IbGAcj2Rcq2T3ir9
PA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:01 2026 by rpki-client