
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa
File: 3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier: yiAr2l5lzWHM34TDSuNETMJw4oOh7mEQAhx8VzZY/vE=
Subject key identifier: 43:AE:A1:9A:E9:FB:34:32:2F:09:11:01:7B:D7:44:33:D1:C5:3C:6E
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 125FA52690D82E1412CEEECA4D4AFE87345FAD33
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:41:16 +0000
ROA not before: Tue 09 Jun 2026 06:36:16 +0000
ROA not after: Tue 08 Jun 2027 06:41:16 +0000
asID: 56282
IP address blocks: 103.235.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5f:a5:26:90:d8:2e:14:12:ce:ee:ca:4d:4a:fe:87:34:5f:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:36:16 2026 GMT
Not After : Jun 8 06:41:16 2027 GMT
Subject: CN=43AEA19AE9FB34322F0911017BD74433D1C53C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:c7:01:97:bb:af:2b:31:e9:c1:dc:f4:ae:
c6:50:77:a9:5b:a8:69:e7:d1:17:01:5f:de:0f:54:
ed:95:9a:61:75:dd:a0:92:64:46:fc:c3:8a:c4:6a:
ab:39:00:20:e5:5a:45:2d:61:a3:ca:7f:e1:b9:db:
20:91:60:b8:9a:73:63:d8:4a:5d:19:0c:8b:41:bb:
c6:a1:cf:db:c7:c0:39:f5:58:0f:da:2a:58:c7:45:
c8:5c:d7:7b:95:fa:89:3b:d9:7f:35:28:6d:6f:7a:
f3:b8:ff:c4:23:23:11:b4:cd:db:58:b9:9a:c6:45:
e4:7c:5e:b1:ed:5a:0d:f7:9b:85:79:97:e7:bb:2b:
d2:0d:ab:cb:7d:c7:24:f9:8b:91:84:4b:a1:ce:7c:
1b:eb:36:c8:e5:70:25:36:33:c1:63:90:bc:98:68:
d1:a4:83:65:15:8e:52:f2:65:95:6c:e4:b7:78:77:
40:5c:33:73:f5:4b:a5:9a:b8:a6:29:83:a4:9f:97:
e3:c4:71:58:34:ef:e7:e8:5d:2b:76:5a:27:10:97:
2a:55:0f:bb:d4:c0:d3:07:3c:d5:e4:6f:37:da:b6:
f9:c0:0a:19:37:2f:65:c9:89:d8:c8:8c:b4:61:0e:
ca:d0:c4:2e:0f:7a:3e:03:a9:01:99:8d:c7:03:26:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:A1:9A:E9:FB:34:32:2F:09:11:01:7B:D7:44:33:D1:C5:3C:6E
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:25:f0:09:0d:4f:95:b3:e6:59:b0:f1:80:9b:72:7b:3f:c6:
93:49:7d:6f:7e:32:5b:76:3e:37:30:ab:c7:e3:72:45:03:cc:
51:ef:e8:3f:14:63:ba:24:29:3d:8d:38:34:b0:7a:39:dd:83:
3c:93:b3:0d:a1:18:61:99:3a:55:bb:f0:1a:e2:1a:3b:cc:4e:
5e:32:a1:57:b7:1a:82:00:f6:14:d0:03:1a:fd:45:c6:94:80:
f4:04:d2:6c:55:72:0b:38:45:63:9a:c1:1d:07:cb:b2:3e:5d:
32:4d:2b:82:94:14:dd:d9:4f:bc:b5:aa:b6:e0:c0:13:c8:e8:
d2:eb:e7:a7:51:93:93:c9:52:54:d4:81:db:0f:2d:0e:46:53:
9a:ec:64:ad:b4:3b:04:f7:ed:5f:c3:c9:62:8b:88:ba:cd:f6:
e6:60:2d:02:a5:93:1b:f0:10:9a:2d:78:59:a7:de:4f:ac:9c:
69:f5:64:67:5c:d5:ed:4c:69:8d:e0:cb:46:ce:a5:25:73:c8:
de:3f:0a:60:cd:fe:13:1a:4c:43:b5:bd:72:28:bf:49:c6:90:
26:09:bd:d3:ac:48:18:1c:a1:aa:6b:05:35:80:ca:33:df:24:
7d:f3:0e:34:b7:ea:25:b0:3e:19:8d:e0:d3:c9:1e:65:7f:48:
19:4e:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:34 2026 by rpki-client