
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32322d3232203d3e20313430373136.roa
File: 3130332e3232392e3231322e302f32322d3232203d3e20313430373136.roa (raw, json)
Hash identifier: JWQmhFo9Q7GX9DkIQzdv1lCo+rwv5vaKzuAOcUNRjqc=
Subject key identifier: 99:83:68:FD:EC:6A:D8:B9:F1:60:A8:4B:52:34:DA:36:9E:AD:39:E5
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 57340327970BF139DF35D8BC3282351192CEDB59
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32322d3232203d3e20313430373136.roa
Signing time: Sun 28 Jun 2026 13:40:14 +0000
ROA not before: Sun 28 Jun 2026 13:35:14 +0000
ROA not after: Sun 27 Jun 2027 13:40:14 +0000
asID: 140716
IP address blocks: 103.229.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:34:03:27:97:0b:f1:39:df:35:d8:bc:32:82:35:11:92:ce:db:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:35:14 2026 GMT
Not After : Jun 27 13:40:14 2027 GMT
Subject: CN=998368FDEC6AD8B9F160A84B5234DA369EAD39E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:64:25:e6:d5:5f:ff:fa:a2:d1:84:32:4a:
9d:62:2a:b4:0f:24:e6:7b:2b:8d:f0:d9:17:e3:15:
b3:ae:24:fa:20:f5:f0:90:54:b9:99:2d:27:bd:c1:
18:e9:61:df:4b:08:70:a6:4b:e6:03:93:09:cf:b8:
5f:55:a0:77:f7:b7:6d:a7:e5:b7:7d:8f:e9:1f:29:
8b:4a:48:33:62:b4:5e:a0:ce:fa:a6:93:1e:fa:e5:
e9:9f:34:fc:49:83:0d:ad:8c:f3:af:2f:d7:10:2c:
cd:a7:6d:13:9c:31:52:06:d8:9b:4c:03:e6:73:52:
96:61:15:52:39:8d:91:16:3d:83:84:0a:cc:ef:e3:
11:b9:96:ae:b0:9a:fe:be:5e:b5:0a:4b:7f:d9:58:
c0:b6:a3:2d:05:d4:15:a3:69:00:64:8d:16:49:41:
8c:63:48:1f:78:f1:5a:24:bc:d1:f9:55:b1:80:95:
79:ac:e0:8d:52:4a:92:36:1d:51:78:ec:f0:04:27:
09:c3:dc:46:44:55:e5:de:27:22:61:59:09:ed:0a:
02:b9:8d:17:61:a0:9d:8c:f5:bf:6b:04:67:ec:65:
89:7e:fa:37:ba:ec:ab:1e:ba:65:a0:d3:bf:55:76:
d7:87:f4:02:dd:98:db:a7:f1:e1:a6:38:41:24:bf:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:68:FD:EC:6A:D8:B9:F1:60:A8:4B:52:34:DA:36:9E:AD:39:E5
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32322d3232203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:55:0d:d4:12:de:71:3a:d4:b1:37:ed:3e:22:b5:dc:90:04:
0a:57:cb:c8:6b:76:06:f6:b4:35:2b:9a:42:e8:da:2b:e8:cb:
c6:80:7c:e1:54:43:99:20:8a:78:11:17:8a:34:f7:7c:d9:13:
db:54:65:d7:d7:a0:ee:ea:91:9e:cc:8c:b3:29:d2:bd:40:f7:
36:f3:7c:7e:40:c5:8d:4f:15:59:bc:ac:a1:47:f7:a5:5d:90:
4c:b3:47:04:ec:5b:a0:7f:c4:5e:24:bf:e9:8e:51:c0:b2:57:
d8:06:5d:00:96:17:cb:3f:6d:22:9f:32:13:b2:e5:2d:f5:bd:
0b:f5:7b:5a:10:0a:64:46:98:05:51:b7:55:3a:36:01:4e:c0:
a7:b3:5f:7d:b7:aa:80:f6:e4:c1:9f:5e:8f:52:67:11:a2:a1:
00:0e:73:8d:8f:ac:6c:17:12:ee:d8:b5:b0:2b:30:43:5a:3c:
95:24:8a:ed:4d:98:01:2b:42:f0:d3:48:b4:b6:91:f6:6b:9a:
3f:69:6b:03:4e:6d:44:e8:eb:d0:9f:40:89:3c:5b:60:bc:6c:
d8:05:24:73:d4:fa:71:38:41:52:6e:02:41:c7:63:c6:e4:ff:
ea:2a:ff:c5:30:8b:02:4d:d4:80:5f:af:4c:3f:b0:78:57:dc:
e7:e3:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:09:40 2026 by rpki-client