
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa
File: 3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: q6AUvvaQkbFA+AupLPwTDUNUYhtvpxkZdNaHTWCmlvw=
Subject key identifier: EA:47:62:A3:B3:29:50:E4:4F:DD:2B:C0:4C:94:D7:E5:AB:21:76:CC
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 5E539EDC5F229328FED7C80C4B3B62FE202F0E87
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:50:23 +0000
ROA not before: Tue 09 Jun 2026 06:45:23 +0000
ROA not after: Tue 08 Jun 2027 06:50:23 +0000
asID: 56282
IP address blocks: 103.235.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:53:9e:dc:5f:22:93:28:fe:d7:c8:0c:4b:3b:62:fe:20:2f:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:45:23 2026 GMT
Not After : Jun 8 06:50:23 2027 GMT
Subject: CN=EA4762A3B32950E44FDD2BC04C94D7E5AB2176CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:93:92:2b:7e:f0:6b:b7:e6:dd:c0:9d:6d:
d2:57:03:09:9c:ae:0f:7f:3f:9c:68:3c:b7:b6:03:
21:a2:1f:79:a0:c2:bc:7b:c7:de:f3:53:fe:bd:14:
6b:bc:75:b4:35:1b:63:3d:10:18:ca:e6:98:7e:95:
bf:00:d3:68:9e:a7:0f:2a:f0:52:7c:e5:43:ce:75:
3c:37:28:f4:d7:94:dd:e9:f1:b8:95:cb:f0:1b:f1:
06:8f:19:8f:33:42:79:47:a9:72:0b:3e:e9:46:13:
59:90:2e:a0:ca:92:14:8a:57:cf:38:6e:dd:41:e2:
d7:e5:91:44:96:45:71:cf:d8:fa:5e:79:7c:4c:28:
ae:2f:25:6a:87:9b:5d:37:88:d0:b4:9c:bc:37:b7:
34:1b:a2:4a:5a:15:03:f1:95:1b:93:1c:f6:bf:6d:
eb:8d:11:ce:29:17:79:69:dc:c6:6b:6a:1d:f4:13:
83:79:6c:1c:e4:94:2a:89:15:de:fc:c9:f6:41:65:
73:89:51:a4:72:be:0e:65:95:f0:29:51:69:26:8d:
a6:7c:b0:ec:dc:7d:89:b1:c1:95:b2:ec:17:27:28:
88:d4:71:e4:7f:10:bf:71:8a:15:3b:5c:50:1a:97:
37:cd:a4:4d:21:cc:3d:7f:61:47:c0:75:0b:6a:d1:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:62:A3:B3:29:50:E4:4F:DD:2B:C0:4C:94:D7:E5:AB:21:76:CC
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:2f:9c:82:bb:92:37:77:9a:6c:70:74:c3:c9:4e:c3:5a:e5:
4d:33:9a:1d:aa:f6:b5:d3:95:13:1b:e1:fe:dc:bc:e7:a9:1b:
e5:91:a1:c1:f6:5d:f5:fd:42:19:da:41:a7:d8:47:0c:d4:35:
f4:45:2a:ea:4b:39:96:00:48:ac:ee:3e:a9:ac:83:4a:c7:fb:
b5:ed:df:fa:d0:c7:0a:e5:b9:e4:55:c8:20:d5:bc:e5:d5:95:
05:4c:03:fc:2e:ed:27:10:2f:ec:1c:90:1b:2e:d9:de:dc:70:
67:4a:5e:89:f2:80:46:79:fc:89:89:d3:16:c3:f3:56:ed:54:
3a:58:56:d4:b5:03:35:08:f9:77:a9:6f:85:18:be:8c:40:f9:
6e:c6:89:4a:86:b7:43:b7:33:2e:3d:86:1c:ca:ad:23:43:77:
06:99:c1:44:ad:15:ec:90:dd:7e:ad:24:55:1d:ce:20:85:04:
5c:6a:74:32:1d:81:4e:ba:04:50:dc:30:c4:83:39:c2:52:5d:
1d:1d:25:77:77:c0:02:a7:c0:b3:8e:b4:fe:87:27:9a:f1:4f:
7b:13:c3:c8:4e:f0:79:92:05:f7:41:ae:e6:ac:05:5a:0b:67:
45:03:43:48:48:66:10:2d:08:e6:97:e7:3e:1e:a0:91:1d:c7:
17:f7:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:22 2026 by rpki-client