
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32342d3234203d3e20313531323730.roa
File: 3130332e3233362e39362e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier: bAhCyB0S4NvAydNHVNEj7VwaqA0bhxBLPsW77mXi1Yc=
Subject key identifier: 8E:10:B4:D2:C6:6F:E5:47:C3:CB:A8:98:07:4E:C2:CA:FF:3E:E8:DA
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 575E3FBDE26196C5EFD37607D070297FDE53DA25
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32342d3234203d3e20313531323730.roa
Signing time: Sun 31 May 2026 08:20:43 +0000
ROA not before: Sun 31 May 2026 08:15:43 +0000
ROA not after: Sun 30 May 2027 08:20:43 +0000
asID: 151270
IP address blocks: 103.236.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5e:3f:bd:e2:61:96:c5:ef:d3:76:07:d0:70:29:7f:de:53:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: May 31 08:15:43 2026 GMT
Not After : May 30 08:20:43 2027 GMT
Subject: CN=8E10B4D2C66FE547C3CBA898074EC2CAFF3EE8DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:62:84:88:ca:f5:a0:0e:95:68:2c:26:3f:
a3:53:76:de:3f:54:69:4f:7f:40:f9:21:06:cc:a5:
d0:b1:8c:95:0f:8a:1c:58:8a:2e:49:83:2a:bf:c3:
13:0b:05:13:69:02:da:6e:ad:6f:33:c6:3a:91:45:
d7:93:50:4a:16:f6:86:11:52:9f:d5:4b:5a:f6:a9:
4b:3f:a7:6e:3b:37:fe:4e:7e:ec:fe:44:2d:43:ec:
ad:68:33:7f:53:89:f4:f6:45:3d:6e:b3:52:1a:b8:
37:b3:d5:2b:11:44:fe:18:72:be:27:a3:40:c2:e6:
1a:d2:5a:e4:34:61:6a:66:91:59:76:f3:7a:2d:cd:
07:1f:83:9f:22:83:9d:75:4b:40:db:1d:18:1c:c6:
34:e5:c0:33:c3:a8:19:3c:1a:7f:0d:5f:fa:73:d3:
7d:93:89:41:94:64:a5:54:11:59:55:db:aa:46:5c:
d7:4c:52:4b:7f:d3:ef:8c:00:58:4d:d3:36:eb:49:
4e:fa:60:6f:3c:4d:71:30:43:78:94:27:23:53:ee:
f4:98:86:27:ab:82:4a:3e:30:b9:df:62:ff:3f:94:
ef:34:13:db:5c:40:35:2a:0d:cb:eb:ae:99:26:3f:
a8:61:7b:04:e8:b2:6e:b5:1f:82:43:8e:8e:59:33:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:10:B4:D2:C6:6F:E5:47:C3:CB:A8:98:07:4E:C2:CA:FF:3E:E8:DA
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32342d3234203d3e20313531323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:94:81:40:16:d0:6a:b5:79:ff:3a:eb:05:26:19:82:bf:36:
ae:a8:03:be:38:3f:88:24:4d:3a:61:9e:b2:05:1f:9b:83:d9:
dd:e0:f9:67:ea:38:80:9e:99:c4:a5:e4:a2:f9:65:6a:8b:fd:
8b:fb:65:ec:e1:11:cb:9d:4e:92:56:fd:c4:12:9d:68:71:53:
70:0e:08:22:ac:35:51:4b:84:02:b3:9d:f7:ca:a1:3e:a7:f7:
67:ce:86:e3:06:60:f5:58:87:30:df:20:74:4a:a6:b1:c7:60:
65:dd:be:06:4b:1d:80:9a:95:2e:83:38:80:5e:8f:26:08:0f:
42:15:be:8c:ac:b2:00:71:95:3b:b9:3d:f1:74:2c:86:64:bd:
33:37:54:3d:dc:03:ce:c1:dd:6f:86:86:19:3e:04:4a:16:5c:
30:68:b5:17:0a:0c:60:09:e7:b4:33:86:1f:b2:84:f9:16:90:
f8:18:37:ca:f2:7a:95:1a:ed:02:c6:72:44:97:17:82:2c:03:
39:7d:85:f2:c2:41:96:8d:1d:e7:aa:ae:64:34:54:3b:c7:6d:
e4:07:38:b8:cd:ff:f4:6d:3f:50:97:61:73:22:81:2d:a4:da:
f9:1c:b6:21:a8:53:c3:82:ac:81:2d:d1:b7:bc:d9:2f:95:d2:
b1:84:1a:3f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUV14/veJhlsXv03YH0HApf95T2iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjA1MzEwODE1NDNaFw0yNzA1MzAwODIwNDNaMDMxMTAvBgNV
BAMTKDhFMTBCNEQyQzY2RkU1NDdDM0NCQTg5ODA3NEVDMkNBRkYzRUU4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYr2KEiMr1oA6VaCwmP6NTdt4/
VGlPf0D5IQbMpdCxjJUPihxYii5Jgyq/wxMLBRNpAtpurW8zxjqRRdeTUEoW9oYR
Up/VS1r2qUs/p247N/5Ofuz+RC1D7K1oM39TifT2RT1us1IauDez1SsRRP4Ycr4n
o0DC5hrSWuQ0YWpmkVl283otzQcfg58ig511S0DbHRgcxjTlwDPDqBk8Gn8NX/pz
032TiUGUZKVUEVlV26pGXNdMUkt/0++MAFhN0zbrSU76YG88TXEwQ3iUJyNT7vSY
hiergko+MLnfYv8/lO80E9tcQDUqDcvrrpkmP6hhewTosm61H4JDjo5ZM/RTAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUjhC00sZv5UfDy6iYB07Cyv8+6NowHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsYDANBgkqhkiG9w0BAQsFAAOCAQEAnJSBQBbQarV5/zrrBSYZ
gr82rqgDvjg/iCRNOmGesgUfm4PZ3eD5Z+o4gJ6ZxKXkovllaov9i/tl7OERy51O
klb9xBKdaHFTcA4IIqw1UUuEArOd98qhPqf3Z86G4wZg9ViHMN8gdEqmscdgZd2+
BksdgJqVLoM4gF6PJggPQhW+jKyyAHGVO7k98XQshmS9MzdUPdwDzsHdb4aGGT4E
ShZcMGi1FwoMYAnntDOGH7KE+RaQ+Bg3yvJ6lRrtAsZyRJcXgiwDOX2F8sJBlo0d
56quZDRUO8dt5Ac4uM3/9G0/UJdhcyKBLaTa+Ry2IahTw4KsgS3Rt7zZL5XSsYQa
Pw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:58 2026 by rpki-client