
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa
File: 3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier: Kbc2X0VP7C3m3lXwC3QYmP+Anp96pYrDBmtlsHz1SDs=
Subject key identifier: D2:83:64:3C:4F:24:97:F1:46:E4:F1:50:B6:C9:16:7A:4C:44:5C:26
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 34B5B85BB4BA49A9736E8055031CB26E6BC7653C
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa
Signing time: Sun 28 Jun 2026 13:40:14 +0000
ROA not before: Sun 28 Jun 2026 13:35:14 +0000
ROA not after: Sun 27 Jun 2027 13:40:14 +0000
asID: 56046
IP address blocks: 103.229.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 22:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b5:b8:5b:b4:ba:49:a9:73:6e:80:55:03:1c:b2:6e:6b:c7:65:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:35:14 2026 GMT
Not After : Jun 27 13:40:14 2027 GMT
Subject: CN=D283643C4F2497F146E4F150B6C9167A4C445C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:6d:8a:e7:2e:fc:13:86:3b:0b:45:22:f9:
e6:42:09:f6:97:b8:fe:40:43:2b:5d:a0:9b:27:3f:
be:06:dd:00:44:90:0f:1d:9a:eb:a3:b9:83:bb:0a:
5f:3d:74:2f:72:44:ea:1e:b9:e6:79:3f:f0:6c:78:
64:08:f8:fa:00:cf:3b:12:87:7c:cf:86:cf:1b:75:
98:5a:5f:9c:f9:5f:da:52:22:5b:1c:f6:74:53:d7:
66:03:7a:b5:ea:d5:d0:52:92:16:54:7c:53:c4:c8:
fe:4c:a3:3a:a0:a1:bc:06:be:39:de:20:17:87:60:
e0:31:d9:4e:25:3a:4a:5c:99:72:13:5a:b6:23:71:
de:a1:6e:81:53:18:87:70:bf:68:d1:05:19:4c:91:
54:dd:01:41:16:81:d6:0d:32:fd:1a:5a:e0:d8:4f:
98:1d:0f:35:bf:99:5d:4a:5a:16:97:0e:b9:01:14:
07:7d:29:54:e2:9f:27:95:aa:87:50:38:1d:60:5d:
2a:0a:61:42:5c:b3:b4:fd:7e:a9:dc:67:33:31:0d:
06:b0:8f:bb:95:c0:23:d9:50:a9:ea:b1:94:5f:68:
7f:bd:92:26:11:72:c6:38:20:1f:d6:6b:5d:3e:e9:
e1:23:b0:4e:e3:c5:b7:b1:e7:dc:0c:aa:4f:6c:ab:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:64:3C:4F:24:97:F1:46:E4:F1:50:B6:C9:16:7A:4C:44:5C:26
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:6e:7e:14:14:7b:fc:9a:7c:fe:76:fd:d6:73:7f:ae:d9:5a:
2f:19:46:b3:e4:3d:73:7a:b3:79:e8:17:ab:d0:84:2c:60:3d:
cd:49:e2:41:3b:a2:8a:46:1e:09:bf:7d:99:1e:88:9e:41:15:
39:ee:39:af:7c:6f:51:07:c5:dc:d0:69:51:6a:48:8c:20:7b:
58:88:c8:cc:f7:34:79:6f:da:67:b2:66:78:54:83:a9:d2:6a:
81:be:c0:b2:4d:ba:e2:4d:08:5e:7d:97:5b:5a:ae:d8:34:b3:
30:86:82:60:4c:d7:65:3a:4d:05:50:46:85:67:36:1c:02:89:
01:a4:a8:4d:44:22:df:76:76:9e:5a:3d:f5:84:cd:37:9f:9c:
57:7f:d9:92:8e:bf:da:92:45:55:26:6c:2e:1f:f0:46:71:fd:
cd:23:aa:48:54:8b:12:7d:fc:47:33:f5:a7:2e:59:d8:67:cb:
b6:b4:80:64:1b:ca:5b:4e:c9:d4:60:6d:3b:d9:5c:5d:81:80:
c4:fd:85:51:db:b0:ac:0e:f7:2d:73:6d:5d:c8:59:ef:bc:4d:
5c:b0:3f:74:da:51:da:be:cf:68:3b:06:be:35:a8:17:29:b2:
a5:5d:37:c1:9f:84:c3:72:26:c4:b9:e0:03:58:3e:09:2b:0f:
62:94:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:39:20 2026 by rpki-client