
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa
File: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (raw, json)
Hash identifier: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=
Subject key identifier: F5:50:E8:4B:7F:EC:07:D9:7C:93:B4:20:25:38:88:F2:1A:97:9A:38
Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Certificate serial: 7A8AA9B51149E169176035F2284BA7B7AC663BE5
Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa
Signing time: Thu 04 Jun 2026 16:16:24 +0000
ROA not before: Thu 04 Jun 2026 16:11:24 +0000
ROA not after: Thu 03 Jun 2027 16:16:24 +0000
asID: 140726
IP address blocks: 103.14.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8a:a9:b5:11:49:e1:69:17:60:35:f2:28:4b:a7:b7:ac:66:3b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Validity
Not Before: Jun 4 16:11:24 2026 GMT
Not After : Jun 3 16:16:24 2027 GMT
Subject: CN=F550E84B7FEC07D97C93B420253888F21A979A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:4b:44:33:6c:2e:98:77:d9:88:db:95:d6:
90:0b:91:b4:f1:0d:ec:ec:d2:2b:a9:b2:03:10:20:
0b:38:61:b1:9c:07:74:50:08:2a:41:ad:1c:9f:95:
9a:f1:8f:7b:70:1a:4e:ae:d8:0b:df:e7:c7:c4:82:
e7:31:6e:52:7c:2e:8f:56:f5:cf:17:bd:51:6c:ba:
8f:cf:e0:63:08:66:c8:d5:6b:8e:57:39:e8:12:97:
69:a2:d8:2d:bf:5b:a7:7c:bd:cc:ec:76:f6:6b:aa:
cf:86:2b:45:18:85:2a:20:a0:98:0d:da:b9:81:ac:
eb:93:67:f1:41:6a:76:02:9e:b5:30:90:2d:bc:ac:
10:e3:90:88:ff:92:51:87:1b:d1:db:86:cb:a9:58:
02:6f:b3:42:61:0e:7d:c6:83:7e:81:4b:0e:dd:b7:
cd:28:d3:b7:8d:49:c7:fa:39:4f:d6:81:d5:d8:7b:
3f:d7:52:ea:e1:20:99:d6:41:b9:e2:38:48:bc:26:
72:34:2f:b2:94:94:4d:c5:e2:68:a5:e0:df:c9:22:
ab:1b:75:92:3d:4d:0c:df:4f:83:f4:3e:39:23:51:
8e:ca:af:aa:17:47:7b:b0:49:eb:ad:9f:19:0a:1a:
22:f2:53:a3:c2:4d:5d:c4:9f:5a:53:5a:6d:ef:e7:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:50:E8:4B:7F:EC:07:D9:7C:93:B4:20:25:38:88:F2:1A:97:9A:38
X509v3 Authority Key Identifier:
keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.14.134.0/23
Signature Algorithm: sha256WithRSAEncryption
81:01:69:a7:f9:0f:fd:57:ab:0f:98:68:d7:3d:82:a5:79:c4:
d7:27:4e:cd:8a:b4:c8:84:33:a1:1f:be:9b:9d:89:7c:ea:7a:
64:46:9b:5b:0c:32:27:46:25:8d:bf:00:6a:b9:7b:b0:44:fd:
bd:67:05:67:c1:24:bf:41:b0:10:78:57:0c:ab:77:73:c0:83:
ff:73:bc:0d:8e:bb:3a:8b:c6:29:62:52:bc:23:99:c7:7b:2c:
f2:0e:0c:ca:23:37:c7:8e:f8:f7:9e:ce:a4:fb:e8:3b:9e:a3:
0f:bf:b3:05:5a:e1:c8:e3:91:24:45:2b:59:f1:d3:68:04:6e:
e5:ac:8b:dc:f1:98:2b:75:4e:62:24:14:d8:67:35:ae:ab:86:
87:e2:76:ad:d2:42:db:9f:e1:2f:bb:39:aa:1f:4c:29:25:3d:
ae:2e:4e:53:64:d1:19:01:3a:69:9c:db:0e:ab:fc:4f:ed:88:
71:ee:5b:2c:c2:f7:8b:c0:2c:af:ff:5b:39:6e:7b:c3:4b:11:
65:ae:98:29:2f:be:66:9d:4c:65:db:6c:4f:b7:55:9f:6d:4e:
69:30:4b:27:93:57:f4:dc:8e:1b:c2:4b:b5:cf:2c:49:3d:62:
e5:7d:92:a9:0f:a6:4f:0f:21:36:f5:a6:d5:11:f9:49:02:2a:
93:bf:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:58 2026 by rpki-client