
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234342e302f32342d3234203d3e203536323832.roa
File: 3130332e3233352e3234342e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier: yAQIqLVlVoZ9lTo7+CdzMXoAro5ZkUhIDt33CbJoS/Q=
Subject key identifier: 1D:1E:78:EC:13:06:71:44:E5:F9:01:31:0C:DB:01:BA:14:45:07:3B
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 5DB0622767EB3BCA35973EEE6865DB54CF557BE5
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234342e302f32342d3234203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:39:17 +0000
ROA not before: Tue 09 Jun 2026 06:34:17 +0000
ROA not after: Tue 08 Jun 2027 06:39:17 +0000
asID: 56282
IP address blocks: 103.235.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b0:62:27:67:eb:3b:ca:35:97:3e:ee:68:65:db:54:cf:55:7b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:34:17 2026 GMT
Not After : Jun 8 06:39:17 2027 GMT
Subject: CN=1D1E78EC13067144E5F901310CDB01BA1445073B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:3f:14:6d:05:65:f5:43:e6:01:8d:27:da:
c4:19:66:54:93:29:b3:c6:39:45:c0:f7:30:f2:5a:
b0:74:98:52:a8:a0:b0:65:16:b7:84:9f:59:c5:20:
67:d3:af:87:8d:fe:4b:35:4c:2c:86:cc:41:66:3f:
5e:3d:5b:50:de:d2:d7:92:1a:02:fd:75:90:41:e1:
db:e1:2f:c1:dc:43:96:6e:77:df:8d:b4:74:52:27:
10:72:3f:59:62:e9:e5:13:69:f8:19:10:75:89:0c:
b7:00:8d:16:95:83:21:48:4f:e2:88:77:d7:74:4e:
23:a3:35:8f:0b:d3:e6:f1:1b:0c:e1:2c:47:aa:9e:
72:de:7b:47:85:1b:af:e0:9a:77:7c:82:60:0b:ac:
cf:aa:b3:47:53:2e:e0:ac:97:2c:22:c2:a0:9e:e5:
33:7e:25:fd:54:07:ca:af:85:98:e0:f9:0c:3c:a4:
bb:bf:f0:e3:d1:4b:ba:ee:ea:b9:cc:10:1e:37:0c:
49:a0:3b:54:39:e6:5f:37:3d:7b:25:b7:a2:09:d9:
b5:82:90:85:09:3b:1d:dc:3c:2e:1a:1a:0c:27:69:
0e:4b:67:c6:30:48:7d:cd:99:a7:4d:6a:02:41:f2:
cd:80:a5:3f:76:53:25:02:9b:77:95:34:47:4b:d5:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1E:78:EC:13:06:71:44:E5:F9:01:31:0C:DB:01:BA:14:45:07:3B
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234342e302f32342d3234203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.244.0/24
Signature Algorithm: sha256WithRSAEncryption
74:65:00:62:48:5b:22:05:71:57:e7:7c:43:0b:fa:9a:67:86:
7e:d0:c7:6a:35:b1:85:10:c0:fa:55:ae:32:6f:ed:0a:1d:dc:
b6:a5:1d:a4:2c:77:47:dd:bc:6d:25:a4:b9:fa:87:4b:07:ac:
73:eb:69:06:b2:c5:c5:7e:0c:a0:73:14:16:5b:9a:00:84:ea:
ab:91:9a:26:01:00:5c:92:27:59:23:ee:73:e7:bf:8a:a1:24:
16:ef:00:24:af:fb:67:f9:e3:ef:8d:55:c3:b4:7d:34:19:a2:
af:6c:87:4c:4d:09:14:98:b4:20:77:e6:d7:23:ed:e7:4b:ac:
08:bc:f1:bf:8c:af:29:bb:aa:58:6d:c9:0f:43:9b:d7:3c:6c:
f5:16:a3:39:e4:ff:9a:34:7d:70:4b:ed:75:54:18:78:eb:02:
2f:af:6c:70:cc:e5:17:5f:02:a8:1d:cc:dd:7f:38:c3:46:bc:
f2:5e:d4:54:73:a0:b5:88:3e:9c:38:98:d0:6b:3d:34:fe:ca:
19:fe:42:3d:05:a8:08:e9:2b:9a:34:82:5a:ea:6c:69:41:b9:
d2:d1:fc:67:17:ca:65:f4:2e:3b:bf:5c:be:33:91:3c:14:52:
df:0e:9f:a8:fa:6f:f0:cc:fc:b6:b6:6a:4b:ac:15:79:8f:d2:
1d:7e:b7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:34 2026 by rpki-client