
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3133392e302e302f32322d3234203d3e20313339303231.roa
File: 3130332e3133392e302e302f32322d3234203d3e20313339303231.roa (raw, json)
Hash identifier: 0ls8G7BHtbV6BLsVhBR5xCN3uX1VQZvowFrmsmKvAd8=
Subject key identifier: 36:0F:CD:B2:FA:68:66:1B:12:46:35:60:08:94:E4:C4:73:B3:11:CA
Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial: 2AB14D64670D4DFB88C4C3E19F89DB230E768947
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3133392e302e302f32322d3234203d3e20313339303231.roa
Signing time: Tue 02 Jun 2026 08:36:49 +0000
ROA not before: Tue 02 Jun 2026 08:31:49 +0000
ROA not after: Tue 01 Jun 2027 08:36:49 +0000
asID: 139021
IP address blocks: 103.139.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b1:4d:64:67:0d:4d:fb:88:c4:c3:e1:9f:89:db:23:0e:76:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Validity
Not Before: Jun 2 08:31:49 2026 GMT
Not After : Jun 1 08:36:49 2027 GMT
Subject: CN=360FCDB2FA68661B124635600894E4C473B311CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:7f:78:49:66:cd:9f:98:5e:2d:79:07:e1:
83:02:2f:a3:8c:d8:a3:d5:5e:89:53:22:92:a7:69:
0f:e4:8a:e5:37:83:b9:a6:92:e1:38:0f:61:0b:e9:
43:0c:0d:83:dc:76:a1:b7:39:36:52:27:82:07:0a:
9f:b7:d8:84:b5:08:a2:d7:19:d2:e9:09:8b:73:96:
06:80:a5:36:a7:ac:95:a5:0b:86:37:97:bb:72:45:
2b:32:e4:bc:60:55:db:c0:76:94:75:bc:6b:80:e6:
a4:91:15:85:b8:2d:cf:65:8d:fd:1a:64:e0:e5:ae:
c8:2f:b5:21:2b:9e:69:b4:1f:60:1d:45:d9:03:04:
30:2e:72:f6:43:6b:fd:81:4e:9b:01:2b:a1:4e:e1:
c6:47:05:66:5e:93:78:10:b5:69:3b:3c:00:0d:3d:
67:5e:f8:36:52:64:ae:f1:af:eb:19:10:be:b5:c0:
c0:a3:01:48:f3:53:58:81:4f:51:e2:70:eb:d1:46:
46:e3:2e:da:ab:c6:76:da:0c:09:63:3a:a2:b4:1a:
34:07:41:b4:2f:3a:55:a0:8e:b4:e8:d2:76:7a:1e:
fa:06:59:da:75:5f:4b:1b:8d:3c:ea:91:a6:36:9f:
e8:f2:98:75:c9:ef:01:73:49:a1:0f:c0:a6:b7:5f:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0F:CD:B2:FA:68:66:1B:12:46:35:60:08:94:E4:C4:73:B3:11:CA
X509v3 Authority Key Identifier:
keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3133392e302e302f32322d3234203d3e20313339303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:8e:a4:15:00:2c:8a:7c:bc:8f:03:f5:28:ec:fa:c5:c5:3c:
0d:37:60:69:71:96:0e:64:b7:99:86:09:09:b4:7e:00:fa:17:
c3:79:19:f1:41:3f:85:5b:37:b4:17:43:b3:40:2c:cd:1a:ec:
18:ce:d5:72:a3:b9:25:6e:59:8a:28:81:86:b1:9f:63:43:32:
77:e9:19:ec:92:5d:25:04:de:e4:a7:53:42:e2:82:84:a8:68:
34:0b:aa:e4:1e:27:02:31:d6:4e:1f:7d:64:41:1c:8c:bf:99:
a4:7d:60:7a:57:99:47:62:15:13:89:8f:6c:58:fc:d8:aa:ef:
cf:f0:df:b7:98:84:31:b0:a8:61:ca:ef:12:1c:c4:85:44:f5:
27:a4:36:98:42:c0:7c:ce:20:43:10:b8:9c:7c:69:c9:1f:a7:
10:21:b3:e8:2d:b3:a1:c4:9b:ba:f5:8a:0e:4a:66:63:0c:0e:
82:a4:dd:ef:6d:0b:3a:0a:a8:a3:0d:c9:7f:f4:93:b8:f5:14:
f4:8c:c4:11:da:d4:c1:9b:d4:c2:b6:ec:c2:d4:d7:f5:3f:6a:
79:06:12:b8:ed:78:f5:db:d5:55:3a:69:00:8a:49:9f:e5:a1:
cd:e2:7d:23:a3:34:26:0f:92:7b:46:e6:cc:4a:f9:fe:38:fd:
8e:1b:a1:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:47:07 2026 by rpki-client