
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203536303436.roa
File: 3130332e34352e3136302e302f32322d3234203d3e203536303436.roa (raw, json)
Hash identifier: y8rTmrV+m2droHRjC0zccmKtNNnofBZ4kZ+5wN/3BEM=
Subject key identifier: 3F:88:40:32:CF:7A:FA:E7:A0:9D:E8:35:67:21:FC:01:69:BC:F8:36
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 478F4CB6725414DD85B7E4D7BADD6748319BF82C
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203536303436.roa
Signing time: Fri 17 Apr 2026 01:42:16 +0000
ROA not before: Fri 17 Apr 2026 01:37:16 +0000
ROA not after: Fri 16 Apr 2027 01:42:16 +0000
asID: 56046
IP address blocks: 103.45.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 16:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8f:4c:b6:72:54:14:dd:85:b7:e4:d7:ba:dd:67:48:31:9b:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 17 01:37:16 2026 GMT
Not After : Apr 16 01:42:16 2027 GMT
Subject: CN=3F884032CF7AFAE7A09DE8356721FC0169BCF836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:b4:04:a4:2f:ff:4e:52:e7:81:3d:5c:56:
58:95:33:05:af:c6:91:82:1b:28:0f:f5:1e:07:9d:
56:91:1b:00:81:1c:57:09:91:78:de:61:68:bb:81:
42:c5:72:94:6a:4b:53:02:19:29:d4:5b:ba:23:0b:
4c:74:c6:c9:07:26:e4:17:03:37:9e:09:50:80:c6:
58:73:fa:84:d5:49:8b:1d:a1:26:bb:fd:2d:ab:74:
9d:10:13:37:c7:ab:71:e8:20:84:98:84:d0:43:b3:
48:25:35:92:c1:a3:db:f4:1a:e1:35:30:43:56:04:
6a:e1:e4:88:29:fb:ef:0a:c3:c9:2e:51:90:0f:e9:
37:8e:09:89:a8:11:21:85:60:05:c5:31:44:c2:21:
62:8e:3a:a2:9e:b3:4f:78:f4:a4:d0:63:d6:3e:9a:
bf:f8:6d:24:14:2d:91:fc:7c:ef:bb:df:63:61:59:
e2:4d:51:3f:ca:d2:77:5c:8f:a3:5a:85:f4:9b:e9:
c0:1f:a0:8d:3c:15:97:9a:28:ee:19:7f:d0:2f:de:
ac:8f:6e:a4:11:93:46:76:cc:7e:14:11:08:cf:68:
e9:d1:cd:0d:2d:00:a5:39:0b:96:41:44:eb:45:a2:
17:e5:06:4c:ad:9e:3c:51:5f:00:bf:ce:2f:66:5b:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:40:32:CF:7A:FA:E7:A0:9D:E8:35:67:21:FC:01:69:BC:F8:36
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
73:16:b5:08:71:55:42:83:d5:0c:13:4f:63:74:5d:7a:33:5b:
15:2b:22:9b:60:8b:fa:a1:b1:19:7b:60:06:e7:d2:0f:02:07:
b7:3b:b0:fd:84:5f:01:24:e2:0f:e9:df:80:2e:62:21:da:c9:
1f:46:9c:97:ef:5e:4d:4d:62:cd:38:10:e6:94:a8:76:d6:15:
86:17:10:26:1b:e5:f2:6c:e5:c8:78:2c:11:1a:c8:5e:79:87:
5a:54:83:08:f0:b1:51:e9:38:77:27:67:d7:f2:3d:43:55:ee:
0d:ca:c7:12:68:38:a1:26:1f:ab:59:a7:8f:54:45:f3:b9:93:
c1:ce:47:8a:ce:2c:df:1e:3b:b5:c6:4b:1a:36:6a:0f:34:19:
5c:7a:20:2d:e1:b6:2d:c5:cb:a8:f6:1a:af:3c:90:28:d1:b9:
4b:95:1c:63:ca:38:9f:be:df:f6:85:8f:3b:9a:1e:62:0c:0d:
4c:25:ef:20:62:c8:11:29:6e:b2:d7:a8:18:fd:f4:49:9b:f6:
c6:45:5f:ef:c5:01:16:b2:62:bf:44:40:45:c3:16:8a:9e:c6:
56:8b:de:3c:39:e0:ec:96:61:5b:6d:e5:4e:87:cf:5b:12:7f:
60:76:0b:3f:52:c3:3b:30:ec:21:2e:e8:98:3c:86:70:93:48:
79:e8:94:10
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUR49MtnJUFN2Ft+TXut1nSDGb+CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MTcwMTM3MTZaFw0yNzA0MTYwMTQyMTZaMDMxMTAvBgNV
BAMTKDNGODg0MDMyQ0Y3QUZBRTdBMDlERTgzNTY3MjFGQzAxNjlCQ0Y4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SLQEpC//TlLngT1cVliVMwWv
xpGCGygP9R4HnVaRGwCBHFcJkXjeYWi7gULFcpRqS1MCGSnUW7ojC0x0xskHJuQX
AzeeCVCAxlhz+oTVSYsdoSa7/S2rdJ0QEzfHq3HoIISYhNBDs0glNZLBo9v0GuE1
MENWBGrh5Igp++8Kw8kuUZAP6TeOCYmoESGFYAXFMUTCIWKOOqKes0949KTQY9Y+
mr/4bSQULZH8fO+732NhWeJNUT/K0ndcj6NahfSb6cAfoI08FZeaKO4Zf9Av3qyP
bqQRk0Z2zH4UEQjPaOnRzQ0tAKU5C5ZBROtFohflBkytnjxRXwC/zi9mW3YvAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUP4hAMs96+uegneg1ZyH8AWm8+DYwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzAzMzJlMzQz
NTJlMzEzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmctoDANBgkqhkiG9w0BAQsFAAOCAQEAcxa1CHFVQoPVDBNPY3RdejNb
FSsim2CL+qGxGXtgBufSDwIHtzuw/YRfASTiD+nfgC5iIdrJH0acl+9eTU1izTgQ
5pSodtYVhhcQJhvl8mzlyHgsERrIXnmHWlSDCPCxUek4dydn1/I9Q1XuDcrHEmg4
oSYfq1mnj1RF87mTwc5His4s3x47tcZLGjZqDzQZXHogLeG2LcXLqPYarzyQKNG5
S5UcY8o4n77f9oWPO5oeYgwNTCXvIGLIESlusteoGP30SZv2xkVf78UBFrJiv0RA
RcMWip7GVovePDng7JZhW23lTofPWxJ/YHYLP1LDOzDsIS7omDyGcJNIeeiUEA==
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:27 2026 by rpki-client