
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130362e31342e302e302f31352d3234203d3e203337393633.roa
File: 3130362e31342e302e302f31352d3234203d3e203337393633.roa (raw, json)
Hash identifier: X9B3G/0KPD2nenQ2JO1Gt14x3vOlzC4plr3DaVVr8hY=
Subject key identifier: 83:0A:97:9B:D2:F3:6C:CF:20:CC:87:04:33:20:58:14:DD:65:09:8F
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 7558693CD8C355CB0442FD30BF4AE747BA94EBBF
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130362e31342e302e302f31352d3234203d3e203337393633.roa
Signing time: Fri 17 Apr 2026 02:34:07 +0000
ROA not before: Fri 17 Apr 2026 02:29:07 +0000
ROA not after: Fri 16 Apr 2027 02:34:07 +0000
asID: 37963
IP address blocks: 106.14.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:58:69:3c:d8:c3:55:cb:04:42:fd:30:bf:4a:e7:47:ba:94:eb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: Apr 17 02:29:07 2026 GMT
Not After : Apr 16 02:34:07 2027 GMT
Subject: CN=830A979BD2F36CCF20CC870433205814DD65098F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:4f:30:24:3e:89:e9:ec:91:93:45:68:1d:
9d:27:6b:77:ca:d5:98:1f:79:af:fb:b0:e5:c7:fa:
a4:d3:b0:b7:87:d5:7e:33:36:92:95:90:ab:93:ee:
88:d8:b4:0c:43:8c:dc:56:f4:71:c1:64:15:19:6c:
bd:d9:e3:cb:c6:43:7c:1e:dd:44:3c:71:b2:b6:02:
3a:ad:80:46:94:e9:9d:9a:15:86:ef:12:fd:ca:1f:
dc:1b:0e:41:a2:73:84:7c:3a:ed:3d:20:95:27:65:
cc:0a:1b:48:25:43:df:0b:92:84:be:ae:2e:03:76:
c7:fd:df:67:0d:07:20:1c:95:c6:08:50:18:7d:af:
3a:af:21:1d:53:12:29:c5:67:4e:c2:e5:6d:06:b7:
52:c3:ea:b4:9d:a2:fe:a2:9e:d4:97:97:c7:46:29:
da:80:24:5f:29:ee:dd:17:6a:f5:76:54:9f:48:88:
50:b0:82:d0:e1:1f:31:84:3a:2a:0e:c5:e1:12:18:
17:fb:0d:f9:f5:75:a7:f3:e1:94:b3:07:e1:fe:36:
b6:8f:55:1f:ea:19:75:50:6b:62:59:3a:81:09:c4:
6d:66:b8:79:c4:66:c3:79:b0:64:74:a4:58:ff:64:
79:f4:77:1c:c7:09:aa:80:cb:ef:bf:10:16:0e:40:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:97:9B:D2:F3:6C:CF:20:CC:87:04:33:20:58:14:DD:65:09:8F
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130362e31342e302e302f31352d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.14.0.0/15
Signature Algorithm: sha256WithRSAEncryption
89:b0:d6:59:9b:c8:2a:81:42:ff:4c:b1:ef:ac:be:a3:0c:a8:
55:95:bf:92:88:ae:61:e8:1d:6a:2a:c8:e5:2b:42:67:65:9f:
b9:89:95:4f:90:0e:a4:77:56:18:9a:38:61:e4:88:09:c2:6e:
bc:22:27:78:62:82:bd:d3:a5:15:0f:c1:78:00:39:8f:f4:af:
39:fc:39:7b:f0:b7:11:0a:0c:a3:74:f1:87:f8:51:ab:8f:d5:
1d:d3:0c:84:bf:a7:1f:5e:e9:e3:05:b8:b4:37:1d:ca:48:18:
81:65:fe:60:4b:65:c1:77:13:25:08:69:c1:bf:cb:26:5c:cb:
b5:a7:86:61:a3:f4:b5:37:a3:60:7d:89:4d:cb:f1:84:88:5f:
aa:3a:ef:ac:cc:9d:2a:ec:06:14:27:c9:f5:a0:23:5b:52:fe:
45:40:61:c6:47:45:32:e4:1e:0c:c7:ef:8a:aa:c1:ec:5f:f4:
b5:36:af:9e:15:e9:84:1d:6b:54:84:2f:05:1b:b3:3f:41:5f:
a6:8b:fa:5a:04:28:25:8b:29:ad:d3:23:85:a5:4f:ba:78:c3:
71:23:10:ee:7f:8e:db:2b:7f:1d:12:d5:c9:98:f5:1d:fa:c3:
38:88:89:e9:bc:82:1e:05:f0:4f:34:85:a8:73:62:74:f6:21:
5b:45:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:40:04 2026 by rpki-client