
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa
File: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier: QeEJOQ4nVeqdi6bjKTiBxFo5H7hpFJwlb3iy7aluj3E=
Subject key identifier: 97:AC:77:FC:E3:54:28:FF:D9:B0:CE:C3:11:CD:4A:4B:53:A9:BD:C8
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 06BA2C44526DBE80899B0138BC5DFE376880038B
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:39:00 +0000
ROA not before: Tue 09 Jun 2026 06:34:00 +0000
ROA not after: Tue 08 Jun 2027 06:39:00 +0000
asID: 56282
IP address blocks: 103.231.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ba:2c:44:52:6d:be:80:89:9b:01:38:bc:5d:fe:37:68:80:03:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:34:00 2026 GMT
Not After : Jun 8 06:39:00 2027 GMT
Subject: CN=97AC77FCE35428FFD9B0CEC311CD4A4B53A9BDC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:e6:89:40:9d:64:19:f5:16:1f:f8:97:e3:
86:01:d8:04:08:a6:74:1b:28:50:82:c9:9a:6c:79:
39:ed:cd:ae:ed:4b:c1:6a:01:36:8b:e2:1b:8e:63:
d3:de:6b:90:8b:6e:49:7d:30:d4:31:5c:f4:cf:86:
9c:14:25:3e:b4:f9:cf:68:18:69:8d:fc:10:aa:f7:
9d:cd:1c:ea:bd:a5:b7:e7:e6:2f:e6:97:ec:d0:72:
7a:46:1d:dc:ea:97:a8:4b:d8:0d:73:a1:93:e7:43:
4a:51:ab:af:f2:64:95:8a:57:51:15:9b:88:f9:22:
9c:34:3c:60:94:b2:04:36:69:86:92:f8:11:6e:19:
24:78:28:1b:6a:c3:be:53:98:18:de:4c:79:4f:38:
a0:8d:bf:99:94:90:0d:e4:02:7a:87:a4:14:db:b4:
88:fa:96:03:3d:7d:ec:a1:f2:58:9a:09:84:cb:9a:
0e:ba:0b:e4:a3:a8:4e:cd:33:67:b1:75:03:4a:d2:
67:4c:a3:14:4e:72:72:b4:ad:08:b3:86:d5:d1:3d:
81:b8:2d:80:4a:6f:20:00:1d:2b:1f:fc:e6:26:47:
78:1e:5d:22:6c:76:fe:ac:c2:23:d9:4c:64:53:7a:
9d:74:48:b3:0f:e9:2d:83:4c:bd:c7:30:6c:f8:7c:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:77:FC:E3:54:28:FF:D9:B0:CE:C3:11:CD:4A:4B:53:A9:BD:C8
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.64.0/22
Signature Algorithm: sha256WithRSAEncryption
05:18:7a:98:a0:88:c5:93:1a:67:27:0b:cc:61:a1:a4:47:a1:
1b:fb:08:93:53:d8:1c:a7:0c:b6:d8:1d:d4:15:70:fe:f1:a1:
8a:9b:1f:97:26:24:fe:af:f7:74:88:74:27:f5:b8:e1:23:eb:
be:a9:25:1b:6e:9c:81:7d:bc:6f:9c:04:86:2c:9f:bb:87:9a:
22:fe:f1:13:d4:2c:d6:d8:91:b0:32:5f:2e:09:2d:1c:0f:57:
3b:94:23:7c:b7:9e:d0:1a:a2:e5:a4:52:50:11:77:d6:e3:7f:
2b:16:0e:1c:d0:8b:8c:17:45:7f:c2:0e:e6:f7:34:2e:7f:4b:
0a:38:3c:c1:2b:a4:5e:d7:85:28:ae:11:7d:75:b9:eb:8d:e1:
6e:30:ae:7c:6b:55:67:12:e7:4b:8b:1e:04:94:af:42:ae:d8:
b7:5b:ed:56:4d:a8:e1:76:7c:13:c8:4a:1e:07:4b:b3:38:f1:
31:de:38:57:5e:d6:f5:b5:28:8f:e7:d4:5b:7d:21:a8:4b:99:
02:ba:b4:35:3f:f4:ac:24:59:da:9f:80:68:b0:42:d7:35:fc:
62:e8:b3:5d:9c:23:36:11:a4:c3:83:43:fd:b0:37:bd:d5:cb:
ed:8a:b2:ce:9d:c1:6f:f1:ef:34:79:75:e4:3c:62:a5:33:1d:
3e:9a:93:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:23 2026 by rpki-client