
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e382e302f32322d3232203d3e203233373234.roa
File: 3130332e3233372e382e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: lcatvcLy6DxjF3ndiaT1MHWzV+yKkLKeVnYS3NSUebw=
Subject key identifier: 2D:04:FE:81:91:FF:7F:72:30:BC:06:D0:E3:89:7C:8D:4B:B5:B2:B8
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 035780BC531290335B0A66798663C84DB295EB7C
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e382e302f32322d3232203d3e203233373234.roa
Signing time: Thu 14 May 2026 07:58:01 +0000
ROA not before: Thu 14 May 2026 07:53:01 +0000
ROA not after: Thu 13 May 2027 07:58:01 +0000
asID: 23724
IP address blocks: 103.237.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:57:80:bc:53:12:90:33:5b:0a:66:79:86:63:c8:4d:b2:95:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: May 14 07:53:01 2026 GMT
Not After : May 13 07:58:01 2027 GMT
Subject: CN=2D04FE8191FF7F7230BC06D0E3897C8D4BB5B2B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:cf:40:5d:ea:e9:d9:cc:de:14:44:e6:6f:
81:c3:b8:13:5a:7f:fe:93:85:99:df:65:5a:74:0d:
9a:6b:fa:0c:58:3c:33:2c:23:cb:25:02:31:a4:43:
8b:fe:7e:d2:b9:51:63:3d:25:3e:58:89:fc:b0:c3:
8d:25:d9:c9:2d:61:45:19:9d:58:90:ce:44:75:6a:
de:5b:90:3d:6f:45:d2:e3:cc:26:83:69:61:8d:4b:
50:97:5f:ac:ee:0f:45:ac:40:3a:66:51:fc:3b:5a:
0c:69:b5:c4:4c:b2:ec:b5:da:74:e3:0d:64:e2:39:
bd:5c:f6:22:90:4a:05:7d:9d:2e:6e:92:48:01:4c:
f5:0c:73:aa:cd:3f:73:79:a6:8f:16:b4:ac:e6:50:
54:5b:2b:88:f2:f7:e9:f1:7e:59:86:c6:17:fd:9e:
38:50:ae:59:9a:3e:08:0c:76:33:59:25:93:25:91:
77:2a:df:c8:93:f9:00:a3:77:c9:f3:5b:28:9c:c3:
fe:a4:3f:92:2f:8b:1f:4d:6a:b3:13:d0:b6:59:34:
78:32:ce:8a:89:c2:78:c5:00:15:97:f5:99:ce:cc:
d4:7a:86:fe:67:6a:9c:4e:80:8b:d3:92:6f:20:16:
78:87:58:34:64:66:b4:ca:41:9b:ac:06:b1:c9:20:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:FE:81:91:FF:7F:72:30:BC:06:D0:E3:89:7C:8D:4B:B5:B2:B8
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e382e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.8.0/22
Signature Algorithm: sha256WithRSAEncryption
26:b8:33:79:0b:99:a4:db:83:d8:b1:6e:95:06:f6:72:b9:bb:
12:b5:f9:87:90:c6:56:b0:49:b8:f7:10:cc:01:ec:a4:42:bd:
12:3c:6f:e1:9c:b8:c4:40:32:a1:42:e7:e6:5f:d3:b3:a9:7e:
93:74:10:51:d9:64:46:99:f1:7c:af:82:82:cf:1d:bd:c4:c4:
21:aa:35:74:b3:ee:a4:bb:56:76:58:b2:e0:e2:74:35:5c:99:
e0:d4:b1:ed:3d:0e:a6:16:77:33:ee:78:d9:52:8c:51:2a:b8:
e0:7f:b4:1d:92:f9:49:12:c4:39:c8:10:6b:0e:8a:6b:1e:22:
f7:2f:c6:7e:e6:74:35:3c:27:d6:f9:85:7b:5d:b6:9d:16:4f:
ab:6d:4b:d5:73:4e:47:87:49:18:ae:b5:29:51:3d:00:d9:fe:
fa:f2:f2:78:f6:4c:e2:bf:cb:3e:d3:ae:19:d3:86:93:b8:98:
4b:5a:22:b4:ca:b2:7d:88:91:27:f0:2e:bc:06:ca:6d:31:3e:
43:5a:d6:12:62:3b:d8:ba:b8:c9:18:4b:c8:3f:df:cb:5f:f8:
c9:6d:3c:4d:2a:a3:2d:59:cd:8e:23:36:81:be:7c:88:c2:c4:
1c:1c:de:d0:f6:fc:23:0d:0f:8c:99:d6:a6:47:bb:9a:6d:f8:
12:b4:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:41:51 2026 by rpki-client