
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa
File: 3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier: IdGmejI8pBxZ7gAwmWMjmEHJtsgE5JChulYspKCWk/E=
Subject key identifier: 4D:EE:EF:DB:9B:55:12:27:6C:F5:A4:C0:CA:6A:24:E5:38:C8:47:1A
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 596BABEB648E7695FF8EDDB9C3BB4C794B24B4BE
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:50:05 +0000
ROA not before: Tue 09 Jun 2026 06:45:05 +0000
ROA not after: Tue 08 Jun 2027 06:50:05 +0000
asID: 56282
IP address blocks: 103.235.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6b:ab:eb:64:8e:76:95:ff:8e:dd:b9:c3:bb:4c:79:4b:24:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:45:05 2026 GMT
Not After : Jun 8 06:50:05 2027 GMT
Subject: CN=4DEEEFDB9B5512276CF5A4C0CA6A24E538C8471A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:72:7a:c5:2f:ea:7a:ec:3e:60:2d:cf:99:
a7:f6:cd:d5:c6:05:50:03:23:a5:07:ce:8d:78:bb:
55:eb:b3:f4:5f:81:90:82:19:cb:07:ee:df:aa:65:
64:a1:ab:8b:20:56:e1:c5:14:ff:c4:05:c9:63:af:
09:68:a2:3f:3b:36:6f:50:73:6a:16:9f:b3:8b:4d:
79:78:96:83:5c:cc:68:7f:db:7a:c0:7d:8d:42:2b:
ee:3d:4c:da:9c:63:55:b0:9e:a6:51:27:5d:83:2d:
12:5d:34:64:e0:f0:42:15:bb:df:4e:b2:95:20:5b:
a4:25:c1:74:9f:5f:13:fb:ed:b6:52:db:8a:5b:05:
2c:99:32:a7:58:30:ec:e2:7e:57:04:60:49:a5:88:
80:cc:3b:4b:95:40:c5:d9:7a:57:a3:16:22:44:00:
b0:a8:1c:4c:46:fb:59:bc:52:ba:9b:a9:15:c0:2d:
02:e2:00:e5:a5:bc:bb:9a:00:23:f5:aa:dd:a5:1a:
93:0a:48:b1:79:6e:0f:b0:38:05:4b:c9:69:10:44:
86:e5:3a:27:20:9b:d8:25:f9:b6:8b:62:cb:2f:9e:
28:15:5e:92:e4:39:b1:40:00:c2:d2:90:99:91:e6:
e4:72:e4:94:b4:8f:df:73:83:1d:88:2f:40:dc:37:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EE:EF:DB:9B:55:12:27:6C:F5:A4:C0:CA:6A:24:E5:38:C8:47:1A
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.240.0/22
Signature Algorithm: sha256WithRSAEncryption
92:08:26:eb:01:8a:f1:60:74:5c:8a:58:c7:c1:f9:26:9a:21:
f1:2d:a3:82:b8:f2:72:77:32:a0:3b:09:44:d3:cb:60:9a:59:
99:9b:e4:23:4c:f0:4e:d0:20:0d:ba:cf:ec:70:64:66:be:bc:
a7:11:41:4b:de:26:cb:10:f1:58:e1:a3:50:cd:54:44:32:68:
33:37:b6:d3:b2:ee:c6:7f:57:fd:b1:93:b6:aa:cd:c8:1a:b7:
92:bd:15:67:90:6c:44:80:f0:08:19:83:16:0e:d7:4c:7d:25:
e2:00:e9:37:d4:5d:13:5a:c1:ca:eb:44:47:8b:83:75:09:9d:
c2:0b:09:7d:8e:2f:b5:a3:8f:45:d5:17:82:a2:93:00:70:8a:
d9:46:0c:eb:be:e5:c4:65:c8:74:68:e7:bc:f4:5f:bf:18:3d:
7d:56:aa:a5:57:46:58:18:79:8b:cd:26:88:3d:68:60:f2:86:
bc:35:74:45:50:a7:0f:dd:d8:b8:21:af:81:b0:ad:2f:65:c9:
87:43:f8:53:f9:47:9e:46:22:73:6e:fe:9c:14:78:97:fe:4d:
ed:5f:fb:c3:4b:86:bc:8f:11:9e:17:90:87:18:2c:d6:81:26:
8b:a1:02:51:a5:d5:cd:35:b1:a2:f0:b4:44:c4:03:12:06:fb:
4d:7a:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:38 2026 by rpki-client