
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37382e302f32332d3233203d3e203536323832.roa
File: 3130332e3232372e37382e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: UoYSslVTKemb5mth/QeqdHkVEKl+P3E+cfekl2Z+4g0=
Subject key identifier: BA:13:CB:59:10:BD:7B:67:EA:D9:7C:B4:D2:2A:70:4F:38:78:E0:97
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 24F37B73DD9F8D06A0EB9E1464B546E2F840A9DA
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37382e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:36:24 +0000
ROA not before: Tue 09 Jun 2026 06:31:24 +0000
ROA not after: Tue 08 Jun 2027 06:36:24 +0000
asID: 56282
IP address blocks: 103.227.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f3:7b:73:dd:9f:8d:06:a0:eb:9e:14:64:b5:46:e2:f8:40:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:31:24 2026 GMT
Not After : Jun 8 06:36:24 2027 GMT
Subject: CN=BA13CB5910BD7B67EAD97CB4D22A704F3878E097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:8f:6b:7e:25:f4:d4:6b:36:6d:b1:fd:83:
52:1f:ee:87:5d:e6:3c:0d:b0:2d:6b:d0:7f:da:22:
d5:e2:c1:ec:23:b5:78:bd:fb:1e:90:ff:85:73:87:
6c:73:bf:9e:9b:a2:b3:eb:b1:34:97:60:6c:6c:7c:
4e:38:59:b9:d0:82:f7:7e:af:57:0d:dc:d2:74:2f:
7d:c2:29:3a:bf:7a:01:ec:ac:e2:3a:2b:12:f4:70:
5e:60:6a:72:a3:18:56:6b:fb:4a:11:94:c6:84:7c:
f2:a0:18:8c:08:07:1a:f9:78:4b:84:a4:16:bd:5d:
1a:bb:75:2b:78:12:6e:9b:30:78:ac:a4:05:86:0a:
10:1d:90:15:c0:00:9b:ba:44:0f:08:cf:ca:cb:bc:
2a:33:5c:99:69:ab:fb:44:20:6a:0f:a4:e5:5a:ea:
d5:d3:60:f7:e7:49:06:e5:0b:69:94:dd:6d:d7:21:
b7:4c:3a:7e:5c:06:34:a6:11:03:6a:fb:aa:63:7a:
4f:3e:f8:ff:71:e9:aa:17:46:e9:d7:4e:13:6b:88:
b9:e4:6a:69:47:29:0d:f3:bd:57:76:06:df:09:37:
6d:89:be:d9:fc:46:df:f7:4c:f9:88:3a:70:3b:60:
03:1c:66:9c:62:2f:ef:c7:96:11:f4:db:9c:5d:b6:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:CB:59:10:BD:7B:67:EA:D9:7C:B4:D2:2A:70:4F:38:78:E0:97
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37382e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.78.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c5:61:a7:90:0d:12:21:c5:b5:09:17:4a:74:6e:8d:9d:dc:
d6:cc:aa:21:4f:c7:3d:94:0f:70:5d:8c:59:a3:f1:fc:41:c7:
9b:61:89:09:98:d3:f0:a6:22:3b:ec:db:52:dc:1c:f6:f5:40:
c6:d6:45:ee:b5:83:3e:0f:7f:98:97:5c:64:60:06:1b:53:5c:
c3:c8:35:f2:49:8a:81:74:82:e0:b1:0c:c0:dd:bf:da:47:89:
29:5a:69:8b:0e:c3:46:b3:ab:f7:d1:9e:fa:03:c4:29:3f:d4:
b4:54:3c:be:8e:2e:4f:54:69:ab:95:35:1e:50:b4:31:bb:6f:
fb:d5:00:1b:a4:7e:36:d7:88:80:51:37:c1:55:5d:28:5c:5a:
e0:5c:d6:45:0e:ce:16:ab:a0:b2:1b:51:0b:dd:39:91:aa:f3:
5f:cb:ee:45:a8:59:4b:8e:35:ec:95:ee:ae:d7:97:a5:d1:85:
72:a4:73:fa:ba:0a:90:5d:49:12:c9:7f:fe:29:eb:64:93:bd:
72:7e:31:f5:b7:9e:86:97:5c:98:96:9e:45:b1:13:c9:71:54:
de:14:03:81:8d:45:d9:22:bb:c9:09:3e:49:5f:8f:b4:32:45:
ad:01:a1:7b:2f:44:26:6a:84:ca:76:4a:8b:d4:7e:0c:9c:be:
eb:d1:5a:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:25 2026 by rpki-client