
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa
File: 3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: saz9U4xFL4Z5tgA33NkdB6/96G6nAAkAtrOd0NZ6x/0=
Subject key identifier: 3A:DA:A1:AE:98:52:60:44:A4:8C:E0:87:9A:15:C8:EE:A9:6E:AF:78
Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Certificate serial: 6B6922C8F5EAE8A1E0EA936C35125FFE78487F22
Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa
Signing time: Mon 08 Jun 2026 10:59:01 +0000
ROA not before: Mon 08 Jun 2026 10:54:01 +0000
ROA not after: Mon 07 Jun 2027 10:59:01 +0000
asID: 4837
IP address blocks: 103.227.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:69:22:c8:f5:ea:e8:a1:e0:ea:93:6c:35:12:5f:fe:78:48:7f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Validity
Not Before: Jun 8 10:54:01 2026 GMT
Not After : Jun 7 10:59:01 2027 GMT
Subject: CN=3ADAA1AE98526044A48CE0879A15C8EEA96EAF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:f0:c5:21:1b:fe:b2:6f:14:64:1e:e0:26:
7a:aa:7d:86:6b:1e:7d:f8:97:45:1e:c6:33:3b:5b:
86:09:72:5a:dc:8c:74:4e:ad:a6:ff:d6:32:3f:cf:
5d:31:d0:01:0d:40:8c:58:3e:3f:44:bb:e9:43:55:
48:de:d9:d5:73:07:de:2f:6e:38:19:8e:a9:43:22:
69:34:5c:ed:a5:68:ee:82:f0:f7:7c:42:f1:0b:a1:
0b:29:ac:a0:63:2c:67:89:55:3d:0f:d0:d8:b5:68:
3b:34:c7:c2:37:37:f9:35:fe:9a:5d:ed:c1:c7:00:
47:3a:7c:e9:cb:9f:77:9c:69:40:1a:d1:aa:c6:dd:
5f:bc:4f:b3:8d:16:ee:bb:32:87:b3:03:0e:2b:d5:
c8:cc:2c:29:5a:a0:b9:0a:49:e0:85:54:24:ea:d7:
c4:24:78:f4:5d:85:5b:43:9d:05:3d:2d:76:19:15:
fa:75:c0:3b:fa:c3:3f:8a:7f:db:b7:6c:0f:64:96:
2d:d0:51:95:0a:28:07:c1:4c:59:27:bd:d9:45:c4:
cf:14:cc:a7:de:25:41:a4:c9:c0:c7:93:d3:d0:5a:
f3:a3:c1:4b:32:32:04:42:d6:ca:17:13:40:d9:59:
ce:7c:8a:01:ac:27:d9:57:57:bd:35:e2:fc:30:51:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:A1:AE:98:52:60:44:A4:8C:E0:87:9A:15:C8:EE:A9:6E:AF:78
X509v3 Authority Key Identifier:
keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a9:1a:c9:be:1d:71:5a:13:bf:65:70:a1:d0:74:9c:d7:32:
87:91:c6:e9:61:3d:22:6c:9f:ef:9f:32:be:51:10:32:3c:c9:
ff:73:1e:9b:7d:22:ba:97:92:a9:c6:49:19:9d:99:d0:b0:43:
40:22:b3:1c:8f:54:0f:3a:7e:5f:95:d6:06:5e:c7:c1:a0:4f:
48:6a:f9:7d:ec:d6:ce:c9:53:79:96:75:b9:7d:4c:e5:d1:aa:
16:48:f8:b3:c5:61:b0:c6:b6:27:e0:85:4a:7e:a1:65:9a:02:
95:c7:89:9d:8c:46:ff:a6:0a:3c:35:98:93:93:bd:3c:80:ce:
81:9b:d0:ca:24:57:09:60:5b:8b:59:de:aa:8b:3e:1a:cb:ef:
eb:04:68:91:bf:bd:e5:65:54:e5:42:d2:28:52:0f:cf:46:25:
1f:00:a2:b6:90:86:a2:69:08:b3:49:f3:bf:a5:ba:6a:84:a6:
b1:73:c1:c1:47:7c:10:ec:f9:4f:9d:2b:f0:5f:80:6c:2f:cb:
15:e3:31:fe:9c:34:e7:1b:87:fc:47:c8:bf:9b:04:94:f7:73:
09:bb:fd:31:55:4f:3e:79:2d:48:e4:a0:e3:41:38:f5:d2:38:
ce:8c:11:47:0b:a1:1b:4f:53:14:35:d3:e7:c0:c7:af:16:4c:
39:db:5d:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client