
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31302e302f32332d3233203d3e203536323832.roa
File: 3130332e3233372e31302e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: F7ETox1PArCz71oNVn9qM1V3tgRYfq98T9oJywnlL9Y=
Subject key identifier: E8:4C:E2:BC:D7:CC:BA:3F:D9:DE:C2:F5:EC:D0:B8:6D:26:22:04:68
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 542BC685776FB347C41654E275F755871DAC8C96
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31302e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:43:09 +0000
ROA not before: Tue 09 Jun 2026 06:38:09 +0000
ROA not after: Tue 08 Jun 2027 06:43:09 +0000
asID: 56282
IP address blocks: 103.237.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2b:c6:85:77:6f:b3:47:c4:16:54:e2:75:f7:55:87:1d:ac:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:38:09 2026 GMT
Not After : Jun 8 06:43:09 2027 GMT
Subject: CN=E84CE2BCD7CCBA3FD9DEC2F5ECD0B86D26220468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:ad:a0:4d:91:11:8a:5e:6a:f9:4a:2c:a6:
8f:41:5e:47:f7:a6:c2:de:10:52:4d:59:67:4a:6a:
71:c5:35:98:6e:e9:c5:09:16:75:ff:fd:af:da:75:
8a:67:e5:a3:6e:fa:40:9f:dd:bc:96:b0:1d:5c:b4:
d9:87:db:df:ad:c4:66:24:f1:2d:9f:60:9b:df:15:
21:99:3e:f1:fb:24:99:7f:60:0a:e6:9a:bf:5a:d6:
42:21:13:38:05:0e:02:e1:c1:99:47:c9:f9:c0:cd:
56:73:31:3e:46:e3:da:81:30:20:f4:65:e1:26:a3:
78:07:5a:9e:e0:f5:ee:87:23:71:e2:6d:76:71:e9:
22:73:6b:3f:aa:01:1d:02:cc:cf:e0:e6:53:e1:35:
01:64:84:f9:b0:6e:21:37:fb:bf:ac:cd:ec:ec:28:
5c:09:e5:c1:66:b0:d5:c0:a9:ce:42:a4:38:1d:44:
22:67:ff:97:5b:fb:d6:ad:f9:19:66:2d:93:b8:00:
69:03:43:07:e0:3e:79:bd:97:ec:34:14:d0:66:ef:
76:14:30:72:12:72:8e:d2:38:e2:88:fc:e7:48:22:
75:1d:29:c9:0c:4b:a4:0c:bc:94:03:c3:e5:f3:20:
76:5f:bc:7f:61:9e:c4:1c:25:3e:57:7d:66:fa:1f:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:E2:BC:D7:CC:BA:3F:D9:DE:C2:F5:EC:D0:B8:6D:26:22:04:68
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31302e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.10.0/23
Signature Algorithm: sha256WithRSAEncryption
75:06:5b:c3:59:75:69:9b:fb:55:8f:61:61:fe:53:30:31:19:
67:81:58:bb:03:73:4c:8d:b8:9e:08:c5:01:23:5b:64:92:8f:
22:2c:b8:97:b3:a8:b0:88:f0:d1:80:c8:85:10:2c:9f:00:86:
80:3d:85:a6:d3:8f:0d:b5:ca:a9:1d:79:1a:18:99:d1:90:4d:
f6:bb:e2:c1:28:56:5c:49:5e:4d:b4:09:bd:25:37:6b:55:6d:
26:c1:0c:f6:dd:ed:6a:ee:ee:5a:1c:6f:4a:21:7e:c5:89:af:
6a:75:38:bf:76:3b:67:64:69:4d:61:4e:72:f6:82:fb:12:8d:
b9:5b:61:79:45:de:cc:9c:9c:8e:8c:4f:7b:03:56:51:ba:66:
e0:d9:1a:df:2f:c2:74:e4:d9:a6:4f:7d:19:ab:b7:ba:b0:94:
28:c1:d0:e7:22:74:5c:b7:60:d8:d2:04:28:cc:f8:d4:59:60:
3d:ea:cc:3d:af:ab:b1:26:71:ca:cf:39:50:3a:dd:7e:09:56:
be:06:11:a9:9b:a9:c7:c3:3c:cc:e9:af:33:bc:0d:ad:4f:6e:
bd:b1:c4:07:45:7a:2d:7f:c4:0f:47:ae:e6:07:ae:58:ea:1b:
14:43:e7:0e:61:ce:90:56:69:7a:2e:56:9c:89:43:0e:ad:e4:
37:93:18:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:02 2026 by rpki-client