
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e352e302f32342d3234203d3e203538383534.roa
File: 3130332e32372e352e302f32342d3234203d3e203538383534.roa (raw, json)
Hash identifier: 7pTtCdtAeXZxGjA7RJCZZdkN9oIX588wv35Q/6jbVas=
Subject key identifier: 95:6E:27:DB:6C:4D:EA:7C:32:3F:60:CA:AA:FC:4E:DB:E2:7B:6D:D5
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 37FA4FD24783CA0831E8E2A9BABD2397B2F58640
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e352e302f32342d3234203d3e203538383534.roa
Signing time: Wed 27 May 2026 08:38:32 +0000
ROA not before: Wed 27 May 2026 08:33:32 +0000
ROA not after: Wed 26 May 2027 08:38:32 +0000
asID: 58854
IP address blocks: 103.27.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:fa:4f:d2:47:83:ca:08:31:e8:e2:a9:ba:bd:23:97:b2:f5:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: May 27 08:33:32 2026 GMT
Not After : May 26 08:38:32 2027 GMT
Subject: CN=956E27DB6C4DEA7C323F60CAAAFC4EDBE27B6DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:8c:5f:d8:dd:90:d1:7f:5d:80:e8:03:53:
4f:05:1d:0c:6e:b2:f2:75:d1:e0:dc:6b:b8:bd:ed:
4f:77:76:09:8b:01:ef:34:d9:5e:61:e9:2c:3f:b0:
41:fe:c5:99:ed:69:5d:23:01:0e:30:35:9f:7f:f1:
24:89:c1:c5:25:2a:b2:f1:e8:f7:fc:55:dc:89:7a:
cb:93:79:0f:9a:47:10:91:27:91:36:ac:15:09:30:
af:0b:a2:e6:d3:e6:de:85:fa:a7:f1:5e:ac:6f:16:
17:19:3e:e8:26:2c:f9:fe:b1:f8:b9:d2:94:25:99:
f8:ed:6b:58:19:36:ee:35:c8:cd:69:67:99:6b:f4:
9d:a1:1a:f5:83:3f:c4:cb:35:73:e5:3a:f0:bd:09:
bf:d5:8c:4e:6b:ce:a7:58:4b:9d:01:ce:6b:55:3a:
50:c5:3e:e0:b0:6e:79:37:51:ea:57:20:3a:26:d2:
0a:39:e5:37:3b:8d:49:92:25:7b:ae:96:20:67:50:
07:af:c0:00:af:d4:50:36:a5:e6:a6:ec:c6:ed:92:
3e:de:ea:18:29:b6:85:bf:09:79:18:88:8a:86:59:
1b:3f:a4:c8:db:58:1f:9f:df:62:f7:c2:ec:2c:fb:
68:63:41:01:59:3c:33:8d:da:36:52:e0:e2:9d:75:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:27:DB:6C:4D:EA:7C:32:3F:60:CA:AA:FC:4E:DB:E2:7B:6D:D5
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e352e302f32342d3234203d3e203538383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:86:3e:5f:c5:c9:74:ac:66:f1:3f:12:86:fe:b1:9b:26:ca:
66:63:5a:b7:08:18:a0:6b:47:9d:1f:e1:5d:dc:7d:18:90:52:
2c:bc:f5:35:82:35:c6:d2:cd:22:aa:11:42:7c:cb:81:1d:2e:
58:dc:e2:2e:8e:73:16:41:9f:6d:06:c9:3f:99:9f:07:0a:77:
07:36:28:90:ce:b7:2a:44:7b:a4:03:05:f5:e0:66:9c:5b:14:
86:fa:02:9f:21:0e:3f:79:f2:57:b1:df:c8:35:0f:1c:c5:27:
79:f7:41:0a:f4:7c:53:39:2e:69:d1:77:2f:de:5f:cc:82:21:
07:e8:55:12:ac:c9:96:23:bf:f4:59:26:8f:c5:ca:23:2e:3c:
e9:1f:fa:d4:e9:30:5d:89:7c:1e:9c:e8:e3:be:3a:eb:48:c0:
50:a5:af:46:d0:e1:1e:d9:9c:81:1c:f0:6f:dd:62:5d:d5:94:
77:ea:a3:73:5a:6a:72:f6:a7:b4:34:b7:44:c9:d4:64:5f:b9:
64:15:5a:e7:34:0f:bc:01:d1:cd:eb:13:95:e3:68:78:e1:b0:
e3:0c:f8:12:2a:a8:0d:0f:34:10:48:9e:43:35:04:62:0a:13:
cf:ff:fd:ef:be:c0:e6:69:6f:6c:45:79:8b:64:11:bc:c3:28:
bd:4a:07:af
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUN/pP0keDyggx6OKpur0jl7L1hkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE
NzgxMDFENDAeFw0yNjA1MjcwODMzMzJaFw0yNzA1MjYwODM4MzJaMDMxMTAvBgNV
BAMTKDk1NkUyN0RCNkM0REVBN0MzMjNGNjBDQUFBRkM0RURCRTI3QjZERDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07Yxf2N2Q0X9dgOgDU08FHQxu
svJ10eDca7i97U93dgmLAe802V5h6Sw/sEH+xZntaV0jAQ4wNZ9/8SSJwcUlKrLx
6Pf8VdyJesuTeQ+aRxCRJ5E2rBUJMK8LoubT5t6F+qfxXqxvFhcZPugmLPn+sfi5
0pQlmfjta1gZNu41yM1pZ5lr9J2hGvWDP8TLNXPlOvC9Cb/VjE5rzqdYS50BzmtV
OlDFPuCwbnk3UepXIDom0go55Tc7jUmSJXuuliBnUAevwACv1FA2peam7Mbtkj7e
6hgptoW/CXkYiIqGWRs/pMjbWB+f32L3wuws+2hjQQFZPDON2jZS4OKddXiRAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUlW4n22xN6nwyP2DKqvxO2+J7bdUwHwYDVR0j
BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0
RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzEzMDMzMmUzMjM3
MmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzgzODM1MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnGwUwDQYJKoZIhvcNAQELBQADggEBALCGPl/FyXSsZvE/Eob+sZsmymZjWrcI
GKBrR50f4V3cfRiQUiy89TWCNcbSzSKqEUJ8y4EdLljc4i6OcxZBn20GyT+ZnwcK
dwc2KJDOtypEe6QDBfXgZpxbFIb6Ap8hDj958lex38g1DxzFJ3n3QQr0fFM5LmnR
dy/eX8yCIQfoVRKsyZYjv/RZJo/FyiMuPOkf+tTpMF2JfB6c6OO+OutIwFClr0bQ
4R7ZnIEc8G/dYl3VlHfqo3NaanL2p7Q0t0TJ1GRfuWQVWuc0D7wB0c3rE5XjaHjh
sOMM+BIqqA0PNBBInkM1BGIKE8///e++wOZpb2xFeYtkEbzDKL1KB68=
-----END CERTIFICATE-----
Generated at Fri May 29 23:51:23 2026 by rpki-client