
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa
File: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (raw, json)
Hash identifier: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=
Subject key identifier: E3:4C:A9:A9:F9:00:EF:F0:69:77:97:56:13:7E:71:DC:71:C2:C8:D4
Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894
Certificate serial: 78B2F3761BC9A58BB813AA48454A6F96CB512764
Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa
Signing time: Tue 09 Jun 2026 02:27:02 +0000
ROA not before: Tue 09 Jun 2026 02:22:02 +0000
ROA not after: Tue 08 Jun 2027 02:27:02 +0000
asID: 140726
IP address blocks: 103.28.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b2:f3:76:1b:c9:a5:8b:b8:13:aa:48:45:4a:6f:96:cb:51:27:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894
Validity
Not Before: Jun 9 02:22:02 2026 GMT
Not After : Jun 8 02:27:02 2027 GMT
Subject: CN=E34CA9A9F900EFF069779756137E71DC71C2C8D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:cd:48:81:2b:ec:a7:13:77:58:65:8f:64:
2c:f9:bc:5b:eb:70:36:f2:97:eb:4a:29:79:cc:ca:
1e:27:be:d1:c2:28:8b:87:b3:8e:d7:8b:49:09:dc:
ed:79:1f:fb:f3:1b:e2:6c:d6:a4:99:d2:55:42:07:
58:a3:0a:a6:a4:90:22:d2:a5:dd:ed:f2:e0:3d:39:
dd:f4:de:06:92:bd:35:d6:0d:54:45:34:25:8e:24:
96:3c:27:dc:e8:ad:c1:f0:7c:0b:3e:6a:cc:b1:dc:
c9:74:44:99:8f:f0:78:0b:45:9b:1a:31:84:1c:12:
d0:aa:6f:a9:e0:38:44:79:8b:f6:b4:a8:14:a0:2e:
35:4b:b6:82:4d:e9:23:fe:f9:f6:de:21:95:74:26:
bd:59:20:c5:32:8c:7a:c2:f2:dd:24:fb:56:0e:2f:
82:18:60:37:86:ed:e5:cf:ee:d5:53:05:45:1c:92:
4a:3d:7b:74:f8:0e:c7:b7:73:ea:ba:58:7b:79:b8:
03:49:a5:1b:8c:e5:7f:e7:9f:53:ae:36:6c:07:d7:
a7:51:87:60:f7:5b:38:e3:10:84:29:45:d4:af:27:
ec:1d:42:7b:2f:7c:9e:81:26:c9:6c:7f:64:dd:a2:
50:10:f4:33:d6:75:fb:10:d0:67:de:04:82:81:66:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4C:A9:A9:F9:00:EF:F0:69:77:97:56:13:7E:71:DC:71:C2:C8:D4
X509v3 Authority Key Identifier:
keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.206.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a1:7b:d9:88:b1:d2:95:9b:f5:33:c7:72:78:2a:95:24:89:
e7:1b:66:30:9d:70:ae:2e:5c:13:37:5a:11:c0:86:4c:a7:6c:
14:51:53:56:4d:0c:98:98:3d:be:84:c2:0d:4b:f9:7c:1b:b4:
9f:8f:cc:7b:90:a9:c4:a0:fd:e5:63:b9:c0:76:b1:f5:04:07:
62:ae:56:59:2e:e2:90:52:86:6d:58:67:8d:ce:cf:00:e8:a5:
07:5b:8a:47:27:cb:1e:e6:00:99:46:99:7a:ea:16:c4:e7:d9:
da:39:70:24:37:70:2d:45:a3:88:2f:39:b8:0e:0f:0a:d2:75:
13:b2:2b:86:dc:44:77:c0:0a:b6:70:c8:d4:a9:b9:6e:59:f4:
99:b4:b8:0b:cf:91:31:a9:83:19:4a:7d:d3:86:91:20:0c:13:
72:43:d4:32:e1:c3:4e:bb:db:9b:9b:37:73:0f:74:31:2a:3c:
91:9a:2d:60:38:79:b6:ab:54:f8:05:65:ec:c2:1d:fd:c0:40:
76:60:f1:be:99:1a:38:00:73:48:91:02:82:51:ae:f4:94:3a:
e5:11:a5:80:45:19:70:b2:1d:c1:f8:b5:17:05:27:86:cc:ed:
f6:2e:07:9e:f3:e2:1e:cf:bc:c0:3e:94:3b:b8:a4:54:01:4d:
ee:a6:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:42:08 2026 by rpki-client