
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32332d3233203d3e203536323832.roa
File: 3130332e3234332e3235322e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: 2fZkMvR2U3H+LteAdq3MnQRg4vCtEaqB7Iljamu4HmA=
Subject key identifier: 98:E0:EE:9F:42:7E:61:C1:9B:B4:E1:6C:95:C0:BB:36:0C:76:F5:7F
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 2BEA36D434907A8183BAAA172851A31E8BF62B72
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:37:20 +0000
ROA not before: Tue 09 Jun 2026 06:32:20 +0000
ROA not after: Tue 08 Jun 2027 06:37:20 +0000
asID: 56282
IP address blocks: 103.243.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ea:36:d4:34:90:7a:81:83:ba:aa:17:28:51:a3:1e:8b:f6:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:32:20 2026 GMT
Not After : Jun 8 06:37:20 2027 GMT
Subject: CN=98E0EE9F427E61C19BB4E16C95C0BB360C76F57F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:c7:8f:c5:fb:9a:1a:93:ff:04:15:d2:f0:
b6:03:04:57:48:09:c2:93:2d:ea:62:d7:ba:d3:e9:
a9:77:8d:79:2d:1d:1f:c3:9e:74:65:a0:84:fa:08:
20:73:48:5c:68:ab:dc:78:90:2b:bf:cd:d4:a8:27:
2f:45:52:41:e1:07:43:07:8d:ec:5c:8d:2c:0b:66:
36:07:e1:88:02:1d:b4:93:60:af:3e:41:15:aa:1e:
49:36:20:a3:e4:24:5d:9b:ac:a7:b2:54:3e:74:f7:
7f:c1:fb:cd:4b:54:c8:54:69:b7:17:43:29:2f:71:
e7:2c:cc:02:19:63:8a:58:4b:1a:d4:c7:35:7a:09:
1e:27:d2:48:e5:ff:4a:29:da:85:05:f0:a1:78:5c:
79:f6:9b:2c:df:49:32:3b:b7:06:2c:65:6e:af:7e:
bb:cc:a5:00:9a:0b:1f:ef:e2:d0:de:d6:c8:1d:94:
9c:df:92:39:a3:bd:9b:9f:19:7d:62:fc:f1:b5:30:
4d:fb:08:32:b9:ae:cc:c1:bb:ec:8a:8e:91:b6:19:
ba:fd:46:8a:31:4e:b8:2a:9f:ed:1e:50:4f:4a:01:
99:4d:f4:70:10:40:40:18:4a:69:42:c3:56:ae:37:
5c:a4:4a:b4:00:90:81:66:21:bf:a1:25:5d:65:cd:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E0:EE:9F:42:7E:61:C1:9B:B4:E1:6C:95:C0:BB:36:0C:76:F5:7F
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:98:4e:3f:db:ce:e3:9b:72:be:5a:7d:0d:d3:e4:92:83:3b:
4c:dd:4a:4f:60:e5:a7:fa:09:1a:1b:ca:c0:6f:4f:8e:c0:70:
df:8d:36:00:2b:f9:a5:2e:60:71:61:5a:b8:55:44:23:33:ef:
57:b6:65:6f:40:2f:05:1a:19:f6:11:a3:ff:74:10:ea:e2:c8:
5c:bc:91:49:0b:b6:18:45:8a:5f:af:b2:fc:25:eb:f9:fd:e7:
83:e7:8e:21:28:30:54:9a:5d:99:cb:b4:05:d2:f3:26:99:9a:
c9:da:7c:a3:0c:ae:b6:b7:5c:7e:37:f8:76:45:05:0b:14:95:
9f:09:eb:ce:da:49:23:e8:a7:f0:35:43:73:d7:73:cb:4f:32:
d6:00:ea:10:de:7c:db:39:a2:29:2b:12:af:75:8c:f2:78:31:
b1:89:a5:0c:10:c2:93:b8:c8:59:1b:17:62:53:b6:dc:9a:0a:
00:6e:35:05:44:f1:83:b9:a2:aa:81:04:e8:52:e4:fd:db:33:
24:b5:e1:0f:18:c0:14:f9:12:a1:84:de:6c:6f:16:d6:ba:8a:
24:89:58:10:be:ff:cb:5a:00:4f:41:60:40:13:96:db:5e:9c:
f8:f4:79:29:9d:18:1d:90:bf:df:01:ed:c1:94:95:77:b0:9d:
fc:b9:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:19 2026 by rpki-client