
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa
File: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=
Subject key identifier: 3F:A7:54:22:7E:44:96:9D:7A:82:9B:C5:12:70:DD:52:E8:A8:36:BD
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 7EFA01517AB6D9E798DFFA2616CFBB5465D51709
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa
Signing time: Sat 06 Jun 2026 14:52:51 +0000
ROA not before: Sat 06 Jun 2026 14:47:51 +0000
ROA not after: Sat 05 Jun 2027 14:52:51 +0000
asID: 63655
IP address blocks: 103.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fa:01:51:7a:b6:d9:e7:98:df:fa:26:16:cf:bb:54:65:d5:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 14:47:51 2026 GMT
Not After : Jun 5 14:52:51 2027 GMT
Subject: CN=3FA754227E44969D7A829BC51270DD52E8A836BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:6f:62:d5:f4:d7:4a:04:5c:76:b2:38:f0:
2c:f2:8c:3a:c4:c2:76:58:5b:e7:c8:ad:ef:48:b7:
4a:08:70:b5:73:56:89:15:24:3a:25:cf:1c:55:93:
0d:31:8c:2d:ba:f3:16:37:f4:33:d8:7d:c5:05:48:
df:72:1f:e7:2f:ef:c2:f7:90:50:f0:81:30:4a:9d:
93:ca:91:79:72:d2:4d:58:2a:a1:a2:ce:39:48:a2:
9b:ce:d0:f9:de:44:db:17:bd:9a:cc:3f:52:ee:02:
0c:54:d8:e3:bc:db:fb:cb:5f:fc:52:e3:ab:ac:cf:
a8:d6:a0:93:75:65:82:90:f4:8d:ac:24:fe:ff:ec:
5e:a0:ac:47:61:0b:39:f1:3f:0a:8e:b7:3e:c6:eb:
c2:1b:b9:8f:01:95:e9:34:f2:60:6a:f0:f0:a8:1e:
71:f0:d2:d1:8c:0f:e9:2b:f4:46:0f:1a:57:04:aa:
8c:8d:ef:f3:fe:9a:7b:5c:fc:b2:bc:62:83:56:82:
29:87:76:37:93:0a:6d:2e:6a:7a:af:12:80:7a:b2:
8d:f2:e8:98:fd:78:cf:ce:40:66:87:e1:8a:98:81:
34:d2:6f:5d:16:85:f9:3f:d2:94:f9:95:00:c8:eb:
39:0f:bd:dc:62:1b:9a:05:cc:d8:61:e6:65:5f:c3:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A7:54:22:7E:44:96:9D:7A:82:9B:C5:12:70:DD:52:E8:A8:36:BD
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:43:d7:ec:65:75:04:2c:d3:bb:be:3f:40:80:db:1a:7c:79:
30:87:31:de:10:85:a2:31:f2:c2:d8:44:3d:68:bf:53:4f:39:
86:d4:e0:e1:4f:7b:0f:9e:7c:ac:fb:92:6b:12:c8:19:87:10:
ca:69:52:9f:b7:a4:ce:17:1d:66:3b:af:07:e4:d5:59:3a:15:
0c:4e:4a:69:bd:85:cd:c3:c5:6f:82:93:d1:ea:eb:9a:56:86:
40:03:7e:bf:a8:80:4d:6f:c2:54:00:7b:a8:b2:9b:2c:96:ac:
ec:b9:a6:dc:76:85:df:4a:99:b2:70:ef:67:6e:38:ef:e9:f1:
af:e5:28:81:ad:03:0f:59:f0:82:27:b3:b1:53:ef:c7:67:53:
d6:8c:19:b3:08:e8:f7:84:a6:e6:33:ef:6d:bd:95:b9:9d:4b:
ac:25:d1:ff:42:2b:bd:0c:c8:fa:3a:4a:54:d1:af:3e:47:a6:
6d:06:9c:e6:e5:92:73:94:4e:4c:05:11:da:19:31:9a:52:d1:
ea:e0:4b:f2:65:a6:4c:1e:bd:3e:54:49:57:f3:50:d6:a5:56:
dc:72:3b:bc:ae:06:67:42:05:e6:ad:e8:e6:36:88:b8:34:e1:
53:92:66:00:41:d6:7b:5c:83:a9:ef:dc:3c:3b:1c:27:95:29:
b3:2c:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:46 2026 by rpki-client