
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa
File: 3130332e34352e3136302e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier: +jhx14tTvvinoV44EszvY5yS7+24N9TYVeHEGp6EPzg=
Subject key identifier: C7:80:86:A5:90:80:B8:E0:90:8B:D4:A8:BC:E6:32:7F:AD:DB:34:7B
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 68BD8A44EF64B8D28A3A72E82F4C70657D8C219D
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa
Signing time: Fri 17 Apr 2026 01:42:17 +0000
ROA not before: Fri 17 Apr 2026 01:37:17 +0000
ROA not after: Fri 16 Apr 2027 01:42:17 +0000
asID: 23650
IP address blocks: 103.45.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:bd:8a:44:ef:64:b8:d2:8a:3a:72:e8:2f:4c:70:65:7d:8c:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 17 01:37:17 2026 GMT
Not After : Apr 16 01:42:17 2027 GMT
Subject: CN=C78086A59080B8E0908BD4A8BCE6327FADDB347B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:45:9a:ff:24:26:ee:0a:8d:bb:aa:3f:82:
f9:42:47:d5:9d:63:26:64:21:c8:bf:69:a9:94:6d:
a2:36:04:e4:2d:02:35:d2:69:50:01:9b:b9:a6:8b:
08:fd:de:81:b1:04:7a:a7:a8:fd:e1:bf:90:b0:e4:
c2:32:03:12:e4:81:c0:3b:b1:e1:0c:bf:75:f9:77:
ac:e2:21:64:7b:fb:77:89:97:13:d6:c1:d7:c2:e9:
82:a1:c4:56:61:f6:5e:35:f5:06:00:2d:1a:e9:64:
de:a2:50:66:93:da:cc:b3:fd:49:e2:ea:59:1b:22:
e2:f5:10:64:82:9e:80:c4:54:69:fd:ee:76:56:d2:
c0:2f:19:e0:95:28:f5:f3:4e:1e:87:eb:86:8c:9a:
d9:b2:1d:a9:d6:8b:12:79:11:c6:76:b3:42:80:0c:
a8:c4:77:fa:16:bd:47:67:86:d5:a4:93:ff:5b:20:
ee:74:0c:31:a5:04:bf:75:a6:e5:7d:81:3f:ac:3f:
15:84:38:48:84:8d:71:90:66:2b:e2:c3:9e:cc:20:
7a:c8:41:17:73:10:04:b8:df:0a:dc:11:a4:bd:40:
f0:59:9a:fb:e6:89:b9:1d:d2:87:f7:c2:27:08:96:
e4:ac:4e:ff:5f:f9:cf:70:26:57:e2:67:40:7b:e9:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:86:A5:90:80:B8:E0:90:8B:D4:A8:BC:E6:32:7F:AD:DB:34:7B
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:87:5b:3d:0e:5c:04:f7:4a:da:f8:0b:73:aa:db:6e:09:16:
e2:9a:df:fa:27:d2:7d:5f:85:1c:4e:75:e4:2a:10:c4:aa:00:
52:37:d0:ca:21:95:cc:1c:00:04:3f:b5:3c:3d:b4:39:f6:42:
1d:7c:35:c8:99:55:aa:40:ec:96:a5:44:9b:34:63:16:3d:a6:
08:56:be:cf:3f:88:35:d7:f1:42:94:8f:55:dd:15:ab:96:1c:
1b:54:6b:4f:97:59:ec:59:17:6f:66:71:80:1e:47:78:0b:03:
31:c9:f1:eb:fa:7d:d8:80:70:d7:d1:cb:3e:85:74:8b:21:80:
26:4f:f7:4c:f0:77:4e:a1:49:75:37:5e:7b:dd:0e:5e:4b:e0:
60:59:09:7c:4c:1a:d3:ca:ac:03:8f:83:59:73:ea:92:2a:61:
bc:2e:85:e0:36:3c:c0:a9:2a:69:fc:53:5a:be:42:33:03:2c:
bf:ca:7f:26:2d:4c:24:d4:a0:d6:5f:72:2b:9e:d9:e1:85:0e:
0b:88:28:5f:14:f6:64:84:c7:47:fd:94:62:cb:bc:7a:b6:e4:
61:45:6a:9e:db:03:37:0b:81:e0:0d:1d:96:96:b7:f8:71:a9:
1c:73:7a:14:15:69:c1:44:85:8b:6c:cc:b8:73:ba:05:4a:00:
06:9b:99:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:51:45 2026 by rpki-client