
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38372e3138302e302f32322d3232203d3e203536303436.roa
File: 3130332e38372e3138302e302f32322d3232203d3e203536303436.roa (raw, json)
Hash identifier: 8SqgMUuz5VNxgCcvBwc+llx+WPvXiDR9ULN732K6SrI=
Subject key identifier: 78:EB:E3:21:20:7D:A9:89:EC:DE:CF:C7:DA:34:A9:D7:9D:3B:82:70
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 0160EE266655D7111317FA36BC3279D53F18CAB1
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38372e3138302e302f32322d3232203d3e203536303436.roa
Signing time: Fri 17 Apr 2026 01:44:09 +0000
ROA not before: Fri 17 Apr 2026 01:39:09 +0000
ROA not after: Fri 16 Apr 2027 01:44:09 +0000
asID: 56046
IP address blocks: 103.87.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 16:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:60:ee:26:66:55:d7:11:13:17:fa:36:bc:32:79:d5:3f:18:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 17 01:39:09 2026 GMT
Not After : Apr 16 01:44:09 2027 GMT
Subject: CN=78EBE321207DA989ECDECFC7DA34A9D79D3B8270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:22:06:a9:0a:c1:a4:ed:51:c9:11:87:65:
30:e2:5e:1a:f3:0d:94:4a:4e:4b:7e:17:c8:13:01:
bd:8f:7b:12:fa:5a:45:83:67:51:e8:84:35:f3:19:
d2:fd:2d:b1:a5:b8:3b:7c:0e:e2:ce:2a:c7:3d:81:
a0:77:10:db:aa:42:02:91:93:72:4e:f7:85:56:73:
72:79:38:15:0a:d3:b6:49:93:f3:eb:7c:f3:f0:71:
4c:0c:7b:05:ff:72:a9:16:3c:f4:1a:ea:80:51:84:
d8:61:49:4e:b9:b4:c5:95:10:31:c7:b8:40:e6:08:
bd:c6:41:1a:77:8a:12:8c:a9:ce:8c:a0:d5:bd:ee:
b5:10:6e:56:b1:fa:c1:b4:49:54:27:62:c0:f4:c0:
6c:0b:2c:02:61:08:2c:96:39:45:93:18:7a:a5:a1:
df:0f:2e:1d:7b:c6:9e:b5:04:2e:06:34:cd:5b:20:
24:69:1d:92:22:d7:22:b8:9f:26:34:e1:6c:49:b0:
31:82:a3:a3:40:a2:49:3c:af:b9:e1:4f:a3:29:4c:
8a:09:91:3b:65:b8:1e:59:79:a8:a1:42:20:58:b5:
1f:ae:c1:4f:c8:ca:94:ca:e0:c0:c4:d4:d2:3a:0c:
71:53:67:1d:8a:2a:5d:cf:46:9f:cd:69:cd:98:be:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:E3:21:20:7D:A9:89:EC:DE:CF:C7:DA:34:A9:D7:9D:3B:82:70
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38372e3138302e302f32322d3232203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:4f:f5:70:10:6b:aa:30:a7:4e:72:f1:75:c9:09:d4:a0:92:
e3:5f:bb:c9:17:bb:58:bb:ad:8b:82:7d:23:19:41:ee:af:dc:
4e:4b:a4:27:45:c8:9d:b1:a4:f6:a5:c5:00:57:0e:cf:96:71:
3d:39:fb:ec:c0:c5:0b:46:8b:20:dd:1d:0a:c3:0a:0e:18:2d:
2c:f7:ac:42:de:59:39:5c:27:09:96:42:a5:43:b8:9f:23:2c:
b3:5f:b3:76:82:e0:18:c1:9e:85:08:84:bc:24:f5:82:6f:c1:
40:4c:4e:7a:2b:31:32:a2:f3:20:9c:21:03:a7:66:da:59:43:
27:d2:6d:e9:8d:79:79:f3:20:bc:f8:77:ed:ad:70:5d:e1:f8:
82:d6:af:5c:15:aa:52:88:dd:48:3e:43:09:75:b7:22:68:72:
0c:8f:a2:b8:f6:dc:71:6b:ed:57:55:ad:e7:24:23:79:88:82:
3c:c6:d8:d6:d0:9e:f1:9e:63:95:ce:ae:40:40:86:71:de:12:
db:5e:a3:13:4f:8b:7f:0b:81:7f:75:c9:fc:1d:c9:9b:be:93:
6b:89:59:29:53:a4:b7:11:61:99:46:bd:7f:7f:eb:82:20:0b:
cf:75:8c:89:57:db:3a:b5:68:2c:5a:b4:b5:a4:6d:4f:51:f7:
0f:7e:a4:a2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUAWDuJmZV1xETF/o2vDJ51T8YyrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MTcwMTM5MDlaFw0yNzA0MTYwMTQ0MDlaMDMxMTAvBgNV
BAMTKDc4RUJFMzIxMjA3REE5ODlFQ0RFQ0ZDN0RBMzRBOUQ3OUQzQjgyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71iIGqQrBpO1RyRGHZTDiXhrz
DZRKTkt+F8gTAb2PexL6WkWDZ1HohDXzGdL9LbGluDt8DuLOKsc9gaB3ENuqQgKR
k3JO94VWc3J5OBUK07ZJk/PrfPPwcUwMewX/cqkWPPQa6oBRhNhhSU65tMWVEDHH
uEDmCL3GQRp3ihKMqc6MoNW97rUQblax+sG0SVQnYsD0wGwLLAJhCCyWOUWTGHql
od8PLh17xp61BC4GNM1bICRpHZIi1yK4nyY04WxJsDGCo6NAokk8r7nhT6MpTIoJ
kTtluB5ZeaihQiBYtR+uwU/IypTK4MDE1NI6DHFTZx2KKl3PRp/Nac2YvnqJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUeOvjISB9qYns3s/H2jSp1507gnAwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzAzMzJlMzgz
NzJlMzEzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdXtDANBgkqhkiG9w0BAQsFAAOCAQEAmk/1cBBrqjCnTnLxdckJ1KCS
41+7yRe7WLuti4J9IxlB7q/cTkukJ0XInbGk9qXFAFcOz5ZxPTn77MDFC0aLIN0d
CsMKDhgtLPesQt5ZOVwnCZZCpUO4nyMss1+zdoLgGMGehQiEvCT1gm/BQExOeisx
MqLzIJwhA6dm2llDJ9Jt6Y15efMgvPh37a1wXeH4gtavXBWqUojdSD5DCXW3Imhy
DI+iuPbccWvtV1Wt5yQjeYiCPMbY1tCe8Z5jlc6uQECGcd4S216jE0+LfwuBf3XJ
/B3Jm76Ta4lZKVOktxFhmUa9f3/rgiALz3WMiVfbOrVoLFq0taRtT1H3D36kog==
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:28 2026 by rpki-client