
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e20313336393538.roa
File: 3130332e35362e37362e302f32342d3234203d3e20313336393538.roa (raw, json)
Hash identifier: edxfICWQgEuB7UdFNoeRvYHic5A69bcsIyzULVGWrKg=
Subject key identifier: F8:0C:CA:6A:DF:B2:FE:3E:8F:0B:90:EA:AB:81:EB:10:E6:A7:7B:E6
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 395E6F5F4581CFD9474AE7892D6E9E2ED4DF3FD9
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e20313336393538.roa
Signing time: Thu 21 May 2026 08:16:47 +0000
ROA not before: Thu 21 May 2026 08:11:47 +0000
ROA not after: Thu 20 May 2027 08:16:47 +0000
asID: 136958
IP address blocks: 103.56.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 11:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5e:6f:5f:45:81:cf:d9:47:4a:e7:89:2d:6e:9e:2e:d4:df:3f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: May 21 08:11:47 2026 GMT
Not After : May 20 08:16:47 2027 GMT
Subject: CN=F80CCA6ADFB2FE3E8F0B90EAAB81EB10E6A77BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:9a:26:e7:79:13:f2:72:ab:c1:e4:ba:98:
ed:96:71:b8:aa:e6:6a:e0:53:12:fc:bd:cc:e3:c3:
0a:81:6a:43:8e:8d:6b:96:88:87:49:47:4a:02:f6:
a6:fa:37:30:e6:fc:43:66:89:4e:f7:8e:d5:c9:79:
c3:cf:14:a2:59:d8:93:89:06:90:35:df:1d:1d:ba:
05:8e:fe:43:87:7b:ae:e8:d7:24:5f:3c:dc:f2:db:
02:ba:83:3e:9c:b4:93:b7:5e:1a:49:c8:a8:10:75:
74:0f:71:26:5a:42:20:dd:65:82:c3:47:e5:9f:19:
03:cf:bd:34:48:b6:6f:24:97:24:22:b7:10:d7:3a:
85:43:fc:21:af:8c:88:ce:31:08:0b:b3:11:7d:4c:
a7:26:7b:84:42:a7:19:d3:b7:f2:62:05:6e:38:c9:
f7:86:62:e4:c3:29:6c:aa:7c:fa:bc:a6:79:53:fd:
90:e2:0f:ae:2f:8d:c1:42:cc:f7:87:13:8c:38:0b:
c1:79:32:11:ee:6e:61:c0:04:e9:18:f9:1c:8d:dd:
bb:dd:88:a3:85:c5:8a:87:7a:0b:23:c8:cd:15:7a:
43:a1:fc:3f:d6:36:34:f9:28:93:7a:24:78:45:af:
23:98:e0:93:34:0c:43:5e:10:04:cb:42:82:97:c2:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0C:CA:6A:DF:B2:FE:3E:8F:0B:90:EA:AB:81:EB:10:E6:A7:7B:E6
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e20313336393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.76.0/24
Signature Algorithm: sha256WithRSAEncryption
56:90:d4:a4:4f:3f:1d:b1:91:39:b1:4a:f1:db:1f:2d:77:12:
e5:24:ab:d8:78:93:07:f7:7c:01:bc:bd:47:71:14:8e:1b:e9:
84:9e:f0:a0:c6:05:6c:71:2e:fa:14:79:7d:fc:e3:d2:66:79:
cd:49:f5:e9:d7:95:2f:ff:95:c6:c7:dd:00:82:f0:18:cc:1e:
e1:f9:dd:ba:ca:33:cc:da:fe:d3:51:2b:21:41:7c:8c:0f:03:
12:5c:fa:08:60:69:39:68:a8:eb:b5:95:1b:e6:a8:b8:a1:00:
e2:49:05:7d:a8:1b:3c:93:36:a2:5e:2d:e2:9f:55:94:9d:d4:
f8:9a:ff:f3:47:0d:0b:f1:cd:88:d6:67:83:f6:81:89:07:1f:
7c:84:34:4d:c8:44:ae:9d:5a:d1:1d:00:9c:5c:dd:e7:b2:12:
76:6d:a1:cf:6a:b0:51:72:35:19:30:58:81:0b:04:cb:39:2a:
ba:9c:e7:39:a9:c8:a3:c7:13:99:8f:f0:47:3e:ef:f7:35:ac:
db:2c:81:34:85:9b:b5:34:ee:de:91:5b:40:d7:02:2c:bf:ed:
1b:0b:f9:b1:8f:1f:33:ab:8f:4a:bf:fa:92:ab:01:17:79:1a:
24:a1:46:b5:32:08:a1:27:9e:1d:f3:14:bf:cf:44:d2:08:6a:
35:9f:39:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:06 2026 by rpki-client