
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31312e302f32342d3234203d3e203536323832.roa
File: 3130332e3233372e31312e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier: iu9IkYxW2zEM3MZE+Ake8D408TpNA4NGHhfWNjZUJu8=
Subject key identifier: C8:FF:DB:EB:24:1E:54:27:06:95:18:73:BA:5D:10:15:5E:B6:A7:14
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 0AB5416B4341DBCD078CCB1AFFB721948FD6C826
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31312e302f32342d3234203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:42:50 +0000
ROA not before: Tue 09 Jun 2026 06:37:50 +0000
ROA not after: Tue 08 Jun 2027 06:42:50 +0000
asID: 56282
IP address blocks: 103.237.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b5:41:6b:43:41:db:cd:07:8c:cb:1a:ff:b7:21:94:8f:d6:c8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:37:50 2026 GMT
Not After : Jun 8 06:42:50 2027 GMT
Subject: CN=C8FFDBEB241E542706951873BA5D10155EB6A714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9d:6c:2d:b1:15:92:d2:32:c5:c1:32:a8:db:
89:0e:3f:3e:35:e8:6e:99:04:94:a2:43:d9:a2:a3:
b7:2b:94:1c:e9:9f:21:0e:85:4b:1a:99:ac:f5:e9:
08:3c:b5:6d:81:5c:d3:b8:8b:2b:8f:c2:33:a7:12:
9f:ec:69:9c:28:15:c2:31:e3:cb:23:a9:df:f2:39:
86:1b:0d:12:b0:31:a5:30:43:de:66:b2:e7:4f:73:
0e:4e:7d:62:2d:28:11:e4:72:32:7d:60:f0:04:45:
ea:a7:02:05:6e:e0:b8:08:44:85:9e:fd:2d:23:69:
09:14:7d:8b:26:91:21:17:05:88:d4:39:08:f5:2a:
d2:e1:4a:93:3f:7f:e1:e4:d4:02:4b:76:7f:4b:01:
64:d0:b5:96:43:c3:cd:84:16:5d:dc:1d:25:a8:c3:
df:e7:2e:3e:5d:50:cd:32:ff:d4:a3:bb:12:13:72:
a1:32:c6:8e:a1:03:21:38:c7:c1:ac:49:46:1b:6d:
62:ca:fc:4b:0e:45:6d:ab:7c:67:ce:ee:18:fa:d5:
c7:86:d5:1d:3e:e5:03:c9:51:c5:91:e7:4c:88:66:
7d:88:48:32:0b:71:d6:e5:37:d7:3d:ca:2a:d8:58:
89:f8:2e:1a:33:6d:cf:df:32:56:76:01:1f:19:c4:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:DB:EB:24:1E:54:27:06:95:18:73:BA:5D:10:15:5E:B6:A7:14
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31312e302f32342d3234203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:11:c6:8b:4f:98:24:c7:53:76:cf:4a:04:3d:7a:1c:f5:db:
0b:be:46:7a:e8:8c:46:c4:3b:2c:1a:2a:26:0f:d6:bd:d1:4c:
c9:2b:35:65:3a:69:d1:47:ae:50:40:ac:be:b5:da:0c:b5:76:
53:06:d4:34:a1:5a:2a:ae:8b:be:55:a2:4c:ec:da:b7:d3:07:
4e:70:3a:67:0a:d2:00:31:12:62:fa:55:ff:27:d8:51:ea:f9:
1d:19:3d:85:5b:3a:c2:0f:65:bb:4d:b3:d0:d2:d7:be:91:63:
0b:28:3c:23:36:93:87:35:94:98:b8:01:cd:6a:aa:25:58:29:
1d:75:03:b4:1d:8a:14:c7:3d:72:b8:3e:63:65:54:59:36:97:
f0:0f:5c:f5:e5:1a:c6:12:0e:ab:ee:a3:51:cb:39:75:3a:ec:
6a:2b:b0:6a:b1:54:a9:87:14:98:af:e9:e4:f5:a3:57:6b:8b:
cd:ce:f7:74:4b:d5:57:de:fd:9c:a8:f1:04:2b:00:38:94:c3:
75:c8:d0:46:9b:fb:b9:1a:41:b6:5f:c1:9b:f9:25:95:98:39:
83:5e:ef:08:be:f5:a1:74:39:f4:a5:9a:0b:1c:23:06:4c:c5:
13:a1:09:ef:91:fb:52:fa:a6:07:8f:61:8a:d8:7c:96:45:2e:
f9:c0:d8:14
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCrVBa0NB280HjMsa/7chlI/WyCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjM3NTBaFw0yNzA2MDgwNjQyNTBaMDMxMTAvBgNV
BAMTKEM4RkZEQkVCMjQxRTU0MjcwNjk1MTg3M0JBNUQxMDE1NUVCNkE3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnnWwtsRWS0jLFwTKo24kOPz41
6G6ZBJSiQ9mio7crlBzpnyEOhUsamaz16Qg8tW2BXNO4iyuPwjOnEp/saZwoFcIx
48sjqd/yOYYbDRKwMaUwQ95msudPcw5OfWItKBHkcjJ9YPAEReqnAgVu4LgIRIWe
/S0jaQkUfYsmkSEXBYjUOQj1KtLhSpM/f+Hk1AJLdn9LAWTQtZZDw82EFl3cHSWo
w9/nLj5dUM0y/9SjuxITcqEyxo6hAyE4x8GsSUYbbWLK/EsORW2rfGfO7hj61ceG
1R0+5QPJUcWR50yIZn2ISDILcdblN9c9yirYWIn4Lhozbc/fMlZ2AR8ZxKKVAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUyP/b6yQeVCcGlRhzul0QFV62pxQwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz
MzM3MmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMyMzgzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGftCzANBgkqhkiG9w0BAQsFAAOCAQEAixHGi0+YJMdTds9KBD16HPXb
C75GeuiMRsQ7LBoqJg/WvdFMySs1ZTpp0UeuUECsvrXaDLV2UwbUNKFaKq6LvlWi
TOzat9MHTnA6ZwrSADESYvpV/yfYUer5HRk9hVs6wg9lu02z0NLXvpFjCyg8IzaT
hzWUmLgBzWqqJVgpHXUDtB2KFMc9crg+Y2VUWTaX8A9c9eUaxhIOq+6jUcs5dTrs
aiuwarFUqYcUmK/p5PWjV2uLzc73dEvVV979nKjxBCsAOJTDdcjQRpv7uRpBtl/B
m/kllZg5g17vCL71oXQ59KWaCxwjBkzFE6EJ75H7UvqmB49hith8lkUu+cDYFA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:23 2026 by rpki-client