
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa
File: 3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: NubyLl6exTFXOgBHG1tjbVb2M+ZnW0g8yq2aZ9aMnik=
Subject key identifier: DB:EA:A8:E2:7D:FD:7D:9E:C0:13:C7:02:BC:2F:14:54:08:6F:D6:A2
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 63BCA63BA3CEBFD68A08DE11D1C9A8AFC24575E3
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:13:46 +0000
ROA not before: Tue 09 Jun 2026 06:08:46 +0000
ROA not after: Tue 08 Jun 2027 06:13:46 +0000
asID: 56282
IP address blocks: 103.249.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bc:a6:3b:a3:ce:bf:d6:8a:08:de:11:d1:c9:a8:af:c2:45:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:08:46 2026 GMT
Not After : Jun 8 06:13:46 2027 GMT
Subject: CN=DBEAA8E27DFD7D9EC013C702BC2F1454086FD6A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:6d:54:52:69:30:63:46:27:52:28:58:36:
7c:6b:19:af:43:c9:62:60:6c:1f:9a:20:b7:12:6b:
1c:48:49:63:a1:f1:1b:cb:a9:10:72:21:9a:79:d1:
19:2a:06:9a:e9:f8:9e:df:74:48:f3:d9:a1:11:c6:
65:1a:2b:2e:d2:52:7f:06:7a:55:31:08:b4:1e:02:
54:72:e8:89:5a:16:93:ac:67:7a:3a:ee:18:75:fb:
61:82:82:29:ec:ba:33:e6:a7:cf:02:97:6b:ee:d2:
d0:8f:b4:e3:0e:be:62:e3:d0:91:eb:61:c3:ae:71:
33:c6:5e:22:bd:a7:d0:ca:92:17:74:8c:5b:94:78:
20:43:f8:66:65:51:a2:9d:f2:b2:af:b5:42:3e:d2:
dc:ff:2a:3c:2d:78:03:ef:4d:43:24:4c:c9:dd:b1:
48:ec:f3:66:ba:d1:20:bb:a3:49:a8:a3:b0:a0:3b:
d6:00:e7:06:b4:b1:63:ca:34:1e:93:c6:ea:de:52:
15:70:de:9a:d6:ce:24:1d:1f:fa:ca:e0:40:fa:ff:
3c:79:8a:f9:45:8b:9a:6e:c1:c7:1d:ae:95:99:87:
04:fb:e8:16:6c:72:3c:05:3f:18:16:00:4e:e2:a7:
e8:2f:41:a8:24:57:2f:c7:9a:22:86:f5:02:5b:60:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EA:A8:E2:7D:FD:7D:9E:C0:13:C7:02:BC:2F:14:54:08:6F:D6:A2
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.249.254.0/23
Signature Algorithm: sha256WithRSAEncryption
76:b2:d0:5a:91:86:88:5f:57:2f:8c:6f:77:af:ee:cb:d1:12:
2d:e0:dc:eb:0b:cb:73:55:9f:83:e0:e8:76:4d:0d:ff:f4:db:
87:d4:20:c3:96:40:ae:df:a7:7a:52:06:12:a9:b6:57:da:29:
f0:92:83:78:11:9a:c2:9e:21:5c:2a:4c:80:db:e8:43:5f:95:
3e:2e:ca:d2:30:e2:e6:ab:e3:e6:c5:0e:ec:ac:33:76:2e:d6:
17:3d:2d:a6:f0:5c:99:86:70:8d:0f:3a:15:00:b6:e9:b4:68:
7b:8d:86:10:dd:dd:24:88:0a:63:ed:3f:95:1b:7d:cb:1d:c1:
22:ac:57:9e:15:08:ee:43:4f:6e:53:9e:b2:95:96:8f:ce:70:
9c:6a:6c:07:ac:8f:00:bc:7c:9d:52:ee:e4:d4:c8:67:96:4f:
38:74:e1:b8:42:d3:57:9f:a5:7c:7a:00:60:d5:5a:bf:6c:61:
cd:d6:ea:0c:0a:25:82:30:52:0f:ea:43:61:17:76:13:61:18:
fc:f3:81:0b:2a:be:d3:7f:27:cf:c1:9f:d3:6d:86:25:e8:db:
04:c3:4d:24:19:cb:ee:45:d8:60:73:ec:ba:2c:6d:54:bb:a3:
21:08:d7:0f:a5:a6:c1:2c:e2:27:c9:bc:15:f9:af:d5:5a:f8:
2b:ed:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:36 2026 by rpki-client