
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37392e302f32342d3234203d3e203536303430.roa
File: 3130332e35362e37392e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: Nr4MzKLDLUkXQhAnRCy78zyl92lMVVApHlc9+QDFYSg=
Subject key identifier: 2C:5D:24:03:FD:93:CE:24:9D:F2:97:F6:C4:72:65:4E:E2:A7:87:74
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 3BC33BD0C8798F37C3CE90BCDFF478D0DA62C418
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37392e302f32342d3234203d3e203536303430.roa
Signing time: Mon 13 Apr 2026 02:27:53 +0000
ROA not before: Mon 13 Apr 2026 02:22:53 +0000
ROA not after: Mon 12 Apr 2027 02:27:53 +0000
asID: 56040
IP address blocks: 103.56.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c3:3b:d0:c8:79:8f:37:c3:ce:90:bc:df:f4:78:d0:da:62:c4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Apr 13 02:22:53 2026 GMT
Not After : Apr 12 02:27:53 2027 GMT
Subject: CN=2C5D2403FD93CE249DF297F6C472654EE2A78774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:20:2b:13:08:0e:0c:3b:db:13:c5:67:dd:
4b:52:fa:54:cd:35:31:10:0e:b4:82:3a:82:31:d6:
e5:bc:97:14:76:20:82:66:c5:de:fb:87:06:07:e3:
01:2b:28:d4:59:b6:4d:bb:5e:b4:56:ea:8a:9d:5e:
f3:88:f6:ef:09:68:4b:9a:77:4f:c5:ec:a0:82:b1:
f1:36:65:fa:69:d5:e6:94:ca:eb:ad:8c:01:a6:47:
39:c0:60:93:05:d9:f8:22:24:97:66:ba:f6:12:b4:
d1:66:bd:60:33:5e:59:cc:4a:3f:28:17:a8:f6:dc:
17:93:3c:49:52:b8:16:8e:52:da:6e:10:d5:36:fb:
6d:84:3a:ff:97:c5:10:59:40:58:27:64:b0:0e:24:
b7:63:14:8e:a9:9e:45:85:ce:5d:49:4d:97:c5:11:
33:4d:cc:c0:c0:cb:be:cc:b5:24:ba:44:0a:eb:2b:
5f:0b:91:12:93:62:53:7e:c2:d7:09:6e:75:5f:78:
8c:c7:1b:2f:2d:cd:ed:54:06:07:be:a1:48:af:22:
7e:0a:c2:87:e1:17:ba:30:ac:a4:91:af:22:2c:87:
bb:01:88:d8:e5:ad:af:77:f2:a9:c2:89:d6:5f:fe:
02:c5:b4:68:51:f6:53:82:9d:9d:16:58:fc:1b:7b:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:24:03:FD:93:CE:24:9D:F2:97:F6:C4:72:65:4E:E2:A7:87:74
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37392e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.79.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1b:4c:7b:0a:8f:ce:46:f0:0d:17:05:c0:9d:96:4d:b9:fb:
de:d6:bc:64:d6:8d:2c:f0:fa:8c:44:65:c9:32:9f:91:16:9f:
8e:80:7c:28:34:a5:fc:02:41:53:13:50:a2:bb:86:c8:9e:c6:
e5:6d:98:a4:2c:b4:25:a3:f7:c4:f5:b9:a6:f8:da:ef:a6:eb:
25:64:d3:1f:f3:26:43:d3:22:7d:71:b3:85:35:e9:4f:cd:53:
b2:fe:d2:3a:8a:50:c7:bd:22:f7:48:8a:48:5d:73:0d:4e:32:
0e:05:33:29:63:4e:1e:94:85:05:10:76:92:0b:50:60:68:cf:
86:43:70:50:b3:cf:3e:71:86:33:1d:1d:92:28:d4:9d:70:ed:
c8:0a:d7:09:33:b5:f9:14:f9:dc:8b:3d:e6:1e:a6:7c:72:18:
b6:8e:1a:38:7e:5c:10:16:99:d9:e1:68:f4:1d:0c:d3:12:97:
c6:de:d4:c4:24:cb:85:00:c4:f5:49:b4:58:94:67:25:7d:1b:
27:c3:61:08:c8:22:6b:6f:e2:72:5a:86:c7:f5:54:2c:5d:83:
bc:d9:bf:24:71:94:79:80:c5:e7:82:89:1e:cb:23:e4:89:48:
21:5a:20:e5:10:02:ac:ba:ef:14:20:fc:d2:9b:48:4e:68:2c:
22:05:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:56 2026 by rpki-client