
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234372e302f32342d3234203d3e203536323832.roa
File: 3130332e3233352e3234372e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier: l4qL/8qZ19UyXE5G5ES7MGu2RB6SdFA4jCxFZDtjBI0=
Subject key identifier: 98:0E:42:53:44:7E:0D:22:97:6A:FC:9C:55:D7:23:C8:0E:57:A4:31
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 6777569C8C58904D9C0F555AC642B890A0F2856B
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234372e302f32342d3234203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:39:36 +0000
ROA not before: Tue 09 Jun 2026 06:34:36 +0000
ROA not after: Tue 08 Jun 2027 06:39:36 +0000
asID: 56282
IP address blocks: 103.235.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:77:56:9c:8c:58:90:4d:9c:0f:55:5a:c6:42:b8:90:a0:f2:85:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:34:36 2026 GMT
Not After : Jun 8 06:39:36 2027 GMT
Subject: CN=980E4253447E0D22976AFC9C55D723C80E57A431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:da:e5:8c:f8:ae:2c:e5:bf:37:c0:b5:bc:
b1:7c:a6:bf:78:33:59:72:cf:89:79:68:e9:d3:0b:
39:52:68:ee:1b:86:e8:90:38:9b:a8:e6:f5:a9:5b:
5e:6a:c8:41:96:d7:4d:7d:30:61:d8:c8:d0:5a:43:
4a:31:ba:e8:32:7e:6c:7d:49:ef:9b:9d:0b:1d:18:
0e:13:af:ea:7b:20:38:c7:9a:bf:4f:0c:28:8d:02:
bd:47:00:f3:15:41:c0:9f:9b:23:5a:ca:0e:31:24:
33:14:4b:fe:fd:c0:57:8f:3f:f2:8c:0e:05:c2:10:
70:ad:b1:a2:96:c5:06:75:94:6f:92:08:41:3c:ec:
cc:07:d9:03:79:e5:ea:c9:7f:b9:72:14:eb:50:61:
60:6d:ca:9b:91:f8:48:3e:d4:6d:93:3f:f3:a6:1e:
95:54:64:ea:a0:1d:07:18:a5:2e:f8:f7:1e:9d:75:
8d:08:35:41:a4:75:31:e5:01:05:92:b0:a7:41:d8:
8f:53:40:bd:9d:b2:6a:af:f7:57:b6:89:df:a7:20:
ee:de:c6:4a:70:8f:8d:69:a5:ba:78:5d:ad:65:cb:
28:a7:d9:65:3e:08:03:65:d2:bb:2d:9b:dd:ad:9b:
78:a5:5c:bd:af:b6:a0:05:e8:fc:7a:b4:ef:9c:07:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:42:53:44:7E:0D:22:97:6A:FC:9C:55:D7:23:C8:0E:57:A4:31
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234372e302f32342d3234203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.247.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a1:f4:be:47:28:99:ca:f5:1f:ae:97:50:30:a0:5f:9a:db:
5b:ef:10:4c:6d:7e:cd:d2:fa:96:27:31:68:0a:ff:75:5d:b7:
44:68:17:ca:e5:9d:6f:e7:53:00:72:b8:c8:d1:ca:c6:57:8b:
3d:0e:d4:af:f9:e4:a5:35:4c:ca:aa:76:4c:20:5e:58:c2:79:
90:b3:8b:11:0a:c1:f2:26:89:1f:aa:0c:34:9f:7a:91:0a:e7:
07:25:11:7c:eb:e1:36:1d:c3:d2:98:57:06:cb:3b:12:f1:d2:
d1:b4:79:16:c1:15:e7:15:56:41:15:bd:35:31:27:78:7e:0c:
4f:ae:40:20:3a:c5:5f:ca:e3:fa:8f:9c:0e:7e:b7:5e:c3:85:
dd:33:d4:c1:78:cc:86:c7:63:32:b3:15:8e:3e:39:e4:ec:c2:
b6:ad:a5:41:6f:64:13:7b:a9:04:ae:a3:f2:f7:a9:6e:0b:ff:
a0:40:36:71:a3:33:6a:7d:19:bc:95:ba:d3:e7:2b:e5:ee:3c:
9b:cd:b1:75:04:e7:3d:df:28:18:7a:e7:fb:22:0f:bb:20:33:
1a:46:a9:33:35:6d:27:bf:f3:57:8b:4d:2f:07:ca:bf:bb:d4:
86:fb:c1:ed:73:b9:28:76:3b:9e:1d:8e:3d:46:3f:fb:c2:d9:
84:50:c6:86
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUZ3dWnIxYkE2cD1VaxkK4kKDyhWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjM0MzZaFw0yNzA2MDgwNjM5MzZaMDMxMTAvBgNV
BAMTKDk4MEU0MjUzNDQ3RTBEMjI5NzZBRkM5QzU1RDcyM0M4MEU1N0E0MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGg9rljPiuLOW/N8C1vLF8pr94
M1lyz4l5aOnTCzlSaO4bhuiQOJuo5vWpW15qyEGW1019MGHYyNBaQ0oxuugyfmx9
Se+bnQsdGA4Tr+p7IDjHmr9PDCiNAr1HAPMVQcCfmyNayg4xJDMUS/79wFePP/KM
DgXCEHCtsaKWxQZ1lG+SCEE87MwH2QN55erJf7lyFOtQYWBtypuR+Eg+1G2TP/Om
HpVUZOqgHQcYpS749x6ddY0INUGkdTHlAQWSsKdB2I9TQL2dsmqv91e2id+nIO7e
xkpwj41ppbp4Xa1lyyin2WU+CANl0rstm92tm3ilXL2vtqAF6Px6tO+cB+h7AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUmA5CU0R+DSKXavycVdcjyA5XpDEwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy
MzMzNTJlMzIzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMyMzgzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfr9zANBgkqhkiG9w0BAQsFAAOCAQEAB6H0vkcomcr1H66XUDCg
X5rbW+8QTG1+zdL6licxaAr/dV23RGgXyuWdb+dTAHK4yNHKxleLPQ7Ur/nkpTVM
yqp2TCBeWMJ5kLOLEQrB8iaJH6oMNJ96kQrnByURfOvhNh3D0phXBss7EvHS0bR5
FsEV5xVWQRW9NTEneH4MT65AIDrFX8rj+o+cDn63XsOF3TPUwXjMhsdjMrMVjj45
5OzCtq2lQW9kE3upBK6j8vepbgv/oEA2caMzan0ZvJW60+cr5e48m82xdQTnPd8o
GHrn+yIPuyAzGkapMzVtJ7/zV4tNLwfKv7vUhvvB7XO5KHY7nh2OPUY/+8LZhFDG
hg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:36 2026 by rpki-client