
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234342e302f32332d3233203d3e203536323832.roa
File: 3130332e3233352e3234342e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: 9LKqvK2o8tL3uZSa4JGxbDL6B+WJsQalArjNR24Mci0=
Subject key identifier: 03:3F:40:59:72:9B:00:7A:BC:97:E5:41:1D:18:5F:A2:D7:31:8D:09
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 22BA396E7AFD0FEF89D534CB91DAF9833EBE1EF0
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234342e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:39:55 +0000
ROA not before: Tue 09 Jun 2026 06:34:55 +0000
ROA not after: Tue 08 Jun 2027 06:39:55 +0000
asID: 56282
IP address blocks: 103.235.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ba:39:6e:7a:fd:0f:ef:89:d5:34:cb:91:da:f9:83:3e:be:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:34:55 2026 GMT
Not After : Jun 8 06:39:55 2027 GMT
Subject: CN=033F4059729B007ABC97E5411D185FA2D7318D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:2b:36:f6:a1:f4:96:29:6d:3d:51:c4:a7:
4d:34:69:b1:ed:7a:8a:b6:2b:11:23:c0:e7:a0:5a:
44:ce:a9:9a:b4:d4:06:76:ce:be:59:cb:f0:47:57:
fb:8a:b8:c6:71:24:5c:87:0c:61:fd:5b:de:c5:e9:
d6:e0:fd:b8:6b:9c:64:41:5e:7f:30:f4:35:d2:e6:
9c:af:bb:54:36:ca:05:9a:18:4d:3e:1b:a4:14:ab:
82:02:6e:12:5a:ed:a2:31:0b:0f:0b:9c:38:37:3f:
5a:51:02:a2:5e:1e:c7:77:aa:33:17:8a:a3:49:49:
e7:72:18:cc:a4:c5:a6:24:11:b6:f5:a5:58:e5:3b:
ff:38:16:2d:e2:d5:07:5a:2e:d6:dc:d8:53:9e:5f:
c8:39:93:55:d8:bf:8e:31:00:d3:07:40:4e:49:73:
76:cc:f5:ee:76:54:05:b7:bd:66:4a:f9:0a:80:15:
71:00:45:ba:71:f1:6b:ca:b5:62:88:e3:3a:47:f2:
e9:c7:c8:6a:4d:88:25:45:90:f0:4a:1a:45:25:c7:
09:26:46:f1:49:b0:a7:a2:fb:22:c0:4e:73:46:0a:
f7:f5:6c:c7:c4:96:b8:a7:e4:46:64:ee:f3:08:f8:
56:4a:0c:f2:a4:f3:dd:8b:11:06:d7:e1:56:e7:24:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:40:59:72:9B:00:7A:BC:97:E5:41:1D:18:5F:A2:D7:31:8D:09
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234342e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:5d:cb:b1:bc:7b:69:a3:01:b0:84:d7:34:a4:85:31:8f:20:
8a:b3:d7:1d:09:19:ba:9c:dd:b6:4f:f9:95:da:33:11:e2:7b:
f5:49:bc:f1:21:f1:6f:36:e8:25:65:6c:1e:d4:0c:84:ac:fd:
c8:99:94:0b:a6:69:4c:fa:46:17:0e:be:b7:6a:46:4e:8a:21:
85:8b:87:fb:8c:65:46:a7:e1:9b:61:24:9f:cb:01:db:26:91:
43:ea:1e:48:09:1c:f7:03:9e:41:12:db:6d:8c:48:73:d3:21:
03:b5:3f:c0:79:fc:d1:1a:0a:4a:a1:24:3f:3f:3d:e9:d3:93:
61:89:00:17:76:89:da:d6:bf:36:84:4e:e8:13:ed:3d:ff:14:
b5:33:1b:d7:13:b7:a4:74:93:b4:f4:ae:e1:6d:3f:b3:75:98:
71:26:01:63:ac:af:db:55:a5:74:8d:4e:e5:e0:cf:a3:a9:88:
03:2d:8e:3e:00:9a:a1:b5:b8:12:1f:77:db:2f:4a:4d:37:9c:
63:bb:d9:9f:d9:01:92:c8:bc:cd:04:66:c8:f9:51:05:3b:d8:
24:64:e4:ce:70:72:fc:c0:38:0f:8c:b6:5d:14:44:ce:3a:b3:
c3:b8:73:dd:08:07:5b:5e:b9:c2:c1:aa:df:4e:69:28:82:15:
dc:1b:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:21 2026 by rpki-client