
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32312d3231203d3e203233373234.roa
File: 3130332e3233312e36342e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: jQyS8Nf4X+3x8nMTS5p8Tx7cZEuUOpPwuzXX4SxAPgU=
Subject key identifier: 41:33:32:6C:EB:40:31:D4:2C:B4:13:7B:67:D6:82:46:58:52:84:78
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 4CFF291574E8C2E66929585D457A6CF333140383
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32312d3231203d3e203233373234.roa
Signing time: Tue 09 Jun 2026 06:47:04 +0000
ROA not before: Tue 09 Jun 2026 06:42:04 +0000
ROA not after: Tue 08 Jun 2027 06:47:04 +0000
asID: 23724
IP address blocks: 103.231.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ff:29:15:74:e8:c2:e6:69:29:58:5d:45:7a:6c:f3:33:14:03:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:42:04 2026 GMT
Not After : Jun 8 06:47:04 2027 GMT
Subject: CN=4133326CEB4031D42CB4137B67D6824658528478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:89:58:f4:25:23:24:08:55:01:f4:16:28:
04:94:36:5d:25:9e:b2:10:bf:98:bc:c2:66:01:12:
ff:c2:ce:44:46:cd:f1:64:42:24:d6:ac:9a:f8:a4:
d4:4f:73:25:00:c9:bf:dd:95:32:94:e8:75:e9:59:
a4:de:04:b4:a9:28:6a:d7:34:9e:56:0d:0e:ab:91:
12:a0:78:84:94:a7:7b:27:30:2e:92:c4:80:05:f2:
57:5e:2e:59:4a:10:84:91:58:6a:ee:0f:7e:68:fa:
32:3a:34:08:e1:c7:6a:c4:a8:db:6e:c1:e1:0d:d4:
d9:01:2b:22:a2:c9:85:81:c6:48:3a:83:dc:66:c4:
21:95:db:97:73:07:e2:c1:ac:f6:7c:d0:b6:fe:22:
a8:55:10:36:53:fa:99:b6:81:b2:18:ee:09:8d:83:
92:da:f9:ad:b6:c7:d9:a8:e2:21:95:3b:2b:de:18:
63:e1:f4:10:4a:9a:74:d1:c3:be:8e:df:ba:46:27:
c3:81:61:8e:c2:29:fe:85:fd:12:85:d0:61:eb:74:
04:b2:66:ae:e8:c4:05:c8:8b:73:f1:15:35:9c:4e:
07:7b:b4:8b:34:74:4b:62:61:e2:d3:09:c5:2b:25:
8b:95:f4:f5:d5:4e:1e:65:a8:54:51:42:08:05:77:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:32:6C:EB:40:31:D4:2C:B4:13:7B:67:D6:82:46:58:52:84:78
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.64.0/21
Signature Algorithm: sha256WithRSAEncryption
98:7f:a8:07:21:73:b3:fb:67:12:9e:01:06:b1:84:c7:a1:04:
06:9d:7f:10:d4:ce:76:9a:a5:a3:7b:11:cd:0b:eb:23:57:49:
95:d2:a7:d2:2a:e3:bc:eb:36:a7:8c:1e:87:ac:91:6a:de:be:
d3:f6:aa:b3:ce:90:61:bc:5c:4e:cc:97:e7:9e:87:76:47:68:
86:43:e5:1a:86:d9:1b:58:34:fa:ad:19:ae:1a:4e:d3:f1:4e:
4b:7c:02:b3:b9:ec:ef:21:b1:b8:75:7e:ae:e3:16:08:be:1c:
41:9f:ff:c5:98:07:1e:c8:c2:cf:13:3a:9e:27:05:c7:45:02:
0b:25:d2:1e:72:9e:cf:bb:40:db:8f:d0:85:bf:b6:71:1a:42:
2a:9a:39:a4:16:a0:50:59:ce:fd:dc:71:f5:5c:dc:f8:7e:1c:
1e:d3:6f:aa:ee:16:fe:7e:85:60:17:0c:14:13:25:be:21:29:
07:95:51:b2:b5:4a:d7:f3:0d:d5:91:ec:d3:3c:69:4c:cb:ec:
14:b1:07:58:06:7e:0a:25:64:a9:06:52:cf:86:9f:95:90:61:
d9:8e:0f:1d:fc:e9:7b:26:25:07:3a:38:2b:55:80:18:a9:03:
55:c9:cc:66:5a:40:38:33:4e:07:f4:e1:25:24:cf:bd:bc:77:
bd:ca:af:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:23 2026 by rpki-client