
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232362e302f32332d3233203d3e203536323832.roa
File: 3130332e3233352e3232362e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: HNlXjfqA/3H8CPJD7o/POXnTlsymyQnczYHGZQzDkDU=
Subject key identifier: A0:18:05:A4:AD:6F:74:49:9E:94:61:65:81:DE:92:55:1A:58:13:1B
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 61C6B97FA593247663DA7A822B000331FD5A9F41
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232362e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:44:32 +0000
ROA not before: Tue 09 Jun 2026 06:39:32 +0000
ROA not after: Tue 08 Jun 2027 06:44:32 +0000
asID: 56282
IP address blocks: 103.235.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c6:b9:7f:a5:93:24:76:63:da:7a:82:2b:00:03:31:fd:5a:9f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:39:32 2026 GMT
Not After : Jun 8 06:44:32 2027 GMT
Subject: CN=A01805A4AD6F74499E94616581DE92551A58131B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:37:4b:eb:bd:94:36:df:42:59:c1:22:c4:
f8:3b:b4:8d:d7:54:ea:88:a1:60:03:59:eb:b0:7e:
c3:e4:3d:df:f4:18:7d:27:fd:a6:a7:45:f1:8a:b9:
16:31:f7:21:e5:8f:32:a9:18:d5:b9:b3:24:7e:d4:
56:0d:78:da:da:e7:08:90:88:08:b0:22:bd:f2:18:
81:85:f0:d5:3e:65:2a:10:e7:88:c7:10:96:de:14:
b8:45:e5:c1:42:a1:0b:fe:be:45:86:dc:f2:58:86:
b3:f9:84:74:c1:15:fb:0e:ab:55:2d:d3:bd:ad:be:
1b:13:8c:41:aa:b1:9d:28:ff:be:15:f9:50:1f:92:
fd:38:3a:7b:da:0f:80:2c:90:8a:61:9c:18:0f:86:
ef:ba:b0:a3:87:9f:0f:5d:2e:1d:a7:9d:9d:bd:ae:
e4:a8:8e:45:33:cc:7b:68:cd:c0:e4:06:12:f8:77:
c8:f0:e7:e7:b8:e4:10:a3:dc:13:23:29:d1:13:5d:
53:6c:cc:4d:56:2d:61:f0:15:6b:3a:bf:c7:29:f3:
45:35:72:f5:44:29:88:02:65:c6:6f:00:93:a6:81:
c2:28:af:af:6b:b1:43:5d:68:c5:25:52:13:d0:d5:
eb:fe:ef:37:e6:51:a0:82:fe:71:c5:b7:cf:07:e8:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:05:A4:AD:6F:74:49:9E:94:61:65:81:DE:92:55:1A:58:13:1B
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232362e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.226.0/23
Signature Algorithm: sha256WithRSAEncryption
34:8c:34:89:d7:d3:b2:74:5e:af:33:1b:03:d1:29:d3:82:56:
76:fc:09:12:3a:3e:05:ed:ff:81:1b:f2:b0:d4:8d:68:be:f1:
27:e6:97:54:e0:4b:37:dc:a7:82:97:bd:5a:52:1d:09:6c:86:
44:88:0b:92:14:0d:e6:8b:03:41:f2:de:02:7d:61:eb:52:e7:
7d:28:8c:1a:20:cf:f1:d2:af:31:c9:dc:e0:1c:f0:a7:78:88:
ed:e2:7d:86:07:51:bb:ed:3e:ef:7e:b2:8a:90:38:8e:d4:db:
25:df:d9:90:fc:06:f1:ca:65:cb:5b:0f:09:99:b4:a0:90:c9:
28:90:e5:01:8c:8c:2c:3c:aa:d0:2b:5f:b4:52:62:19:15:1b:
45:c7:e9:55:45:8c:b1:a8:69:d7:f1:24:8d:9b:db:f4:74:07:
fe:67:83:a6:49:f7:de:b9:35:9e:24:3c:b8:c6:87:80:18:eb:
28:83:eb:6a:e5:9e:ef:ce:fd:1a:e1:79:f3:88:5d:29:69:03:
24:cd:97:92:45:6a:cf:be:7c:75:bd:1d:67:91:cc:07:87:6f:
a9:24:d4:77:8b:d0:05:51:74:5b:e0:66:95:a7:09:1a:e7:74:
60:4a:bd:02:af:b7:db:d6:63:9e:ad:7d:33:08:8f:70:94:25:
57:31:24:e5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUYca5f6WTJHZj2nqCKwADMf1an0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjM5MzJaFw0yNzA2MDgwNjQ0MzJaMDMxMTAvBgNV
BAMTKEEwMTgwNUE0QUQ2Rjc0NDk5RTk0NjE2NTgxREU5MjU1MUE1ODEzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujTdL672UNt9CWcEixPg7tI3X
VOqIoWADWeuwfsPkPd/0GH0n/aanRfGKuRYx9yHljzKpGNW5syR+1FYNeNra5wiQ
iAiwIr3yGIGF8NU+ZSoQ54jHEJbeFLhF5cFCoQv+vkWG3PJYhrP5hHTBFfsOq1Ut
072tvhsTjEGqsZ0o/74V+VAfkv04OnvaD4AskIphnBgPhu+6sKOHnw9dLh2nnZ29
ruSojkUzzHtozcDkBhL4d8jw5+e45BCj3BMjKdETXVNszE1WLWHwFWs6v8cp80U1
cvVEKYgCZcZvAJOmgcIor69rsUNdaMUlUhPQ1ev+7zfmUaCC/nHFt88H6JWzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUoBgFpK1vdEmelGFlgd6SVRpYExswHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy
MzMzNTJlMzIzMjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMyMzgzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWfr4jANBgkqhkiG9w0BAQsFAAOCAQEANIw0idfTsnRerzMbA9Ep
04JWdvwJEjo+Be3/gRvysNSNaL7xJ+aXVOBLN9yngpe9WlIdCWyGRIgLkhQN5osD
QfLeAn1h61LnfSiMGiDP8dKvMcnc4Bzwp3iI7eJ9hgdRu+0+736yipA4jtTbJd/Z
kPwG8cply1sPCZm0oJDJKJDlAYyMLDyq0CtftFJiGRUbRcfpVUWMsahp1/EkjZvb
9HQH/meDpkn33rk1niQ8uMaHgBjrKIPrauWe7879GuF584hdKWkDJM2XkkVqz758
db0dZ5HMB4dvqSTUd4vQBVF0W+BmlacJGud0YEq9Aq+329Zjnq19MwiPcJQlVzEk
5Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:22 2026 by rpki-client