
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32322d3232203d3e20313337363937.roa
File: 3130332e3231362e3135322e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier: wMsR4/dvx/tFAwFLsjV1dVBs6tYjC0GiD0uNjheivXQ=
Subject key identifier: 96:A9:E3:75:50:CD:59:3F:33:F5:C6:5B:7B:3F:78:A2:6F:06:E5:F0
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 3EA139B3B1F9F1ABEE75F472119696B676E516C6
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32322d3232203d3e20313337363937.roa
Signing time: Thu 14 May 2026 07:27:37 +0000
ROA not before: Thu 14 May 2026 07:22:37 +0000
ROA not after: Thu 13 May 2027 07:27:37 +0000
asID: 137697
IP address blocks: 103.216.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a1:39:b3:b1:f9:f1:ab:ee:75:f4:72:11:96:96:b6:76:e5:16:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: May 14 07:22:37 2026 GMT
Not After : May 13 07:27:37 2027 GMT
Subject: CN=96A9E37550CD593F33F5C65B7B3F78A26F06E5F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:35:50:84:f2:d8:9b:1f:61:9f:b4:ab:29:
11:96:45:6f:b4:5b:ed:d6:1a:c7:7b:56:1c:48:48:
5e:15:69:08:37:05:2e:24:5d:df:bd:29:bb:4b:21:
3c:95:f0:2d:11:42:db:71:1a:27:85:5c:a3:da:fe:
e4:44:98:6a:ee:61:9b:6c:8e:73:b9:27:7f:77:d6:
2a:1b:e6:90:0f:7c:2e:47:b1:09:5a:5c:af:16:52:
b7:23:68:f4:e4:82:fe:f4:ba:e8:3b:2f:69:61:b3:
c6:81:7a:61:ee:05:a2:4d:d5:9d:fd:70:d9:39:24:
c5:6d:ff:4c:f7:c5:fd:c3:43:e7:17:10:56:57:87:
2a:c0:02:86:6a:cd:dd:4f:b4:1d:48:1c:30:05:e3:
19:9e:86:3e:b6:17:30:45:86:60:03:e6:18:62:5b:
14:a7:e6:e6:ad:de:70:ad:29:44:14:e3:fc:cc:23:
35:cd:20:88:ee:75:7b:db:86:86:35:b4:62:55:22:
1d:3e:6d:bd:3f:89:ae:7d:55:3e:f2:2b:7e:55:51:
eb:10:d9:d9:71:bf:16:46:f7:12:68:8e:64:56:df:
73:ba:7b:a9:96:3c:93:27:7d:83:7f:a4:1d:69:f2:
c8:1a:f6:b7:ac:b9:56:23:15:51:ea:1a:e6:02:b4:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:E3:75:50:CD:59:3F:33:F5:C6:5B:7B:3F:78:A2:6F:06:E5:F0
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32322d3232203d3e20313337363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.152.0/22
Signature Algorithm: sha256WithRSAEncryption
21:d4:72:93:26:fb:3f:37:42:8e:26:ea:81:f9:77:fe:f6:9e:
84:dc:13:12:5d:c1:19:e7:44:23:33:71:f3:07:42:dc:eb:c4:
b2:cb:43:7a:1b:4c:b7:45:e9:ac:de:0a:41:0c:0a:ac:05:5c:
ef:7a:13:19:1e:ee:8d:04:65:a5:5d:3c:96:3e:8e:4e:65:e8:
f0:b7:99:d8:79:6e:52:ad:89:19:23:4e:f7:61:fd:51:aa:a1:
ed:9a:91:52:b8:f8:fa:b7:66:e0:90:79:60:c3:11:d4:c4:b3:
e7:f2:79:fd:e4:24:d4:d5:93:76:34:48:33:74:f6:87:83:44:
a5:30:c8:15:f2:bf:a5:95:8d:ad:35:11:a0:96:36:0f:2a:58:
83:6b:b2:ab:7b:7d:41:10:00:28:99:1e:bf:ad:bd:4a:80:6b:
31:63:d3:c2:ae:42:39:5d:d5:f9:5c:e0:e9:9d:a6:f6:68:fc:
b1:a9:94:90:43:08:e2:05:31:20:e4:cd:1b:6f:bc:a4:01:4f:
35:cf:69:52:32:04:66:2d:30:19:04:60:47:e9:45:1b:76:a1:
43:24:9a:dd:59:7e:a8:64:39:39:99:66:05:6f:ce:c0:71:aa:
77:fe:e0:c2:26:4f:72:9a:32:b0:a2:e6:20:25:18:0a:a5:7e:
ec:f2:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:07 2026 by rpki-client