
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233302e302f32332d3233203d3e203536323832.roa
File: 3130332e3233352e3233302e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: cxw8a9K8w1e7N2AsjUmKs9I+QaiF3cAV3dBmiMPWsTQ=
Subject key identifier: F8:F4:73:4D:A5:D1:95:57:45:D8:ED:14:B6:46:D3:9F:CB:73:55:7C
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 7F569EAEE5004746731DDE26392BA272EC3FE4EA
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233302e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:45:28 +0000
ROA not before: Tue 09 Jun 2026 06:40:28 +0000
ROA not after: Tue 08 Jun 2027 06:45:28 +0000
asID: 56282
IP address blocks: 103.235.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:56:9e:ae:e5:00:47:46:73:1d:de:26:39:2b:a2:72:ec:3f:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:40:28 2026 GMT
Not After : Jun 8 06:45:28 2027 GMT
Subject: CN=F8F4734DA5D1955745D8ED14B646D39FCB73557C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:ae:20:9c:1f:2b:50:82:62:b1:00:cf:56:
75:f1:ce:f4:cb:76:92:dd:e4:1c:b5:14:e2:ab:80:
1a:80:18:bb:8b:b7:2d:e5:5e:2b:f3:b0:6d:2c:96:
f0:f6:7e:2c:59:ab:f0:4d:c4:02:65:14:57:a6:d9:
d1:12:b2:2b:69:21:f3:7e:74:5b:5b:ee:6c:54:96:
c0:9f:c7:98:e4:30:91:f4:2c:48:d4:2a:4d:3c:f2:
28:74:7e:b6:fd:76:5a:6f:2b:5b:c0:58:75:3a:af:
60:bd:dd:19:64:cc:26:5e:0c:1d:00:14:dc:c8:6f:
c5:a8:66:60:0a:93:70:ad:8e:47:5e:8e:f2:19:d2:
ca:f9:31:63:6e:6d:9f:46:97:39:33:3f:3c:08:9b:
aa:4c:7f:ca:cf:27:18:5c:7f:58:39:9a:55:a8:5d:
4b:27:e6:3d:6c:46:af:aa:32:46:c0:85:40:20:2b:
72:cb:19:92:59:57:f6:d7:26:2c:c7:8d:82:1c:fa:
fc:c6:ad:b7:d7:7a:6f:e8:60:3f:34:26:f6:6d:f4:
af:58:ef:9d:64:17:86:d0:ed:70:36:05:21:f8:42:
91:18:bc:69:4a:c7:8a:08:d4:3a:46:8b:e9:b6:80:
42:6d:a2:5c:1e:e7:76:5a:2d:5d:78:48:14:65:58:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F4:73:4D:A5:D1:95:57:45:D8:ED:14:B6:46:D3:9F:CB:73:55:7C
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233302e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:36:5c:96:c7:95:fc:7c:9c:57:37:b3:bf:d4:64:d9:b1:74:
82:db:60:04:b6:52:41:4f:03:37:a0:83:97:05:72:c8:91:ad:
ac:b7:21:67:da:0e:d3:3b:b4:78:91:31:d3:cc:f2:4c:db:70:
77:42:32:c0:0d:f4:fe:13:dc:21:cf:7f:55:41:19:c2:e9:55:
71:04:2e:4b:44:95:15:0b:cb:4e:7f:94:85:63:72:2d:33:16:
31:45:68:92:b4:dc:34:24:24:33:29:b8:a9:53:a4:24:df:10:
cd:c0:1a:07:ce:17:4c:17:6a:de:f3:6c:49:ee:c9:fb:fb:ec:
e8:8a:06:cd:7b:12:a0:dd:e5:0a:e8:1a:33:30:ba:27:b7:5e:
d3:b6:b7:fe:8e:65:24:22:5b:05:5c:a1:03:13:6c:ea:1e:14:
f6:14:53:4e:0a:04:73:e9:d3:09:6b:64:8a:a3:ed:ca:88:b9:
8c:1b:5e:98:f6:b7:75:e7:33:50:65:49:cf:06:56:f5:73:e7:
df:5e:8f:6d:94:93:a5:b1:ac:4f:ba:6e:92:be:b0:ee:f8:22:
5e:ed:16:49:ab:d7:93:57:03:f1:80:5f:4f:4a:38:66:96:3b:
3b:a2:dc:19:ed:ee:f6:6a:e7:86:2d:94:87:20:c9:06:14:f7:
4f:db:ac:19
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUf1aeruUAR0ZzHd4mOSuicuw/5OowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjQwMjhaFw0yNzA2MDgwNjQ1MjhaMDMxMTAvBgNV
BAMTKEY4RjQ3MzREQTVEMTk1NTc0NUQ4RUQxNEI2NDZEMzlGQ0I3MzU1N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3q4gnB8rUIJisQDPVnXxzvTL
dpLd5By1FOKrgBqAGLuLty3lXivzsG0slvD2fixZq/BNxAJlFFem2dESsitpIfN+
dFtb7mxUlsCfx5jkMJH0LEjUKk088ih0frb9dlpvK1vAWHU6r2C93RlkzCZeDB0A
FNzIb8WoZmAKk3CtjkdejvIZ0sr5MWNubZ9GlzkzPzwIm6pMf8rPJxhcf1g5mlWo
XUsn5j1sRq+qMkbAhUAgK3LLGZJZV/bXJizHjYIc+vzGrbfXem/oYD80JvZt9K9Y
751kF4bQ7XA2BSH4QpEYvGlKx4oI1DpGi+m2gEJtolwe53ZaLV14SBRlWK+pAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU+PRzTaXRlVdF2O0UtkbTn8tzVXwwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy
MzMzNTJlMzIzMzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMyMzgzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWfr5jANBgkqhkiG9w0BAQsFAAOCAQEAqTZclseV/HycVzezv9Rk
2bF0gttgBLZSQU8DN6CDlwVyyJGtrLchZ9oO0zu0eJEx08zyTNtwd0IywA30/hPc
Ic9/VUEZwulVcQQuS0SVFQvLTn+UhWNyLTMWMUVokrTcNCQkMym4qVOkJN8QzcAa
B84XTBdq3vNsSe7J+/vs6IoGzXsSoN3lCugaMzC6J7de07a3/o5lJCJbBVyhAxNs
6h4U9hRTTgoEc+nTCWtkiqPtyoi5jBtemPa3deczUGVJzwZW9XPn316PbZSTpbGs
T7pukr6w7vgiXu0WSavXk1cD8YBfT0o4ZpY7O6LcGe3u9mrnhi2UhyDJBhT3T9us
GQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:25 2026 by rpki-client