
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38342e302f32342d3234203d3e2034383136.roa
File: 3130332e3231392e38342e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier: +UoPpbWnURpfbpIbYh3w7i8m7JadEsvpBAM9kAKWwMg=
Subject key identifier: 92:5A:69:BE:EB:AD:28:2F:35:41:CE:9A:65:AD:C7:31:65:4D:87:D5
Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial: 6909C00311FBA2BD1139AA81646109FA2A763C4A
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38342e302f32342d3234203d3e2034383136.roa
Signing time: Mon 27 Jul 2026 07:04:55 +0000
ROA not before: Mon 27 Jul 2026 06:59:55 +0000
ROA not after: Mon 26 Jul 2027 07:04:55 +0000
asID: 4816
IP address blocks: 103.219.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:09:c0:03:11:fb:a2:bd:11:39:aa:81:64:61:09:fa:2a:76:3c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Validity
Not Before: Jul 27 06:59:55 2026 GMT
Not After : Jul 26 07:04:55 2027 GMT
Subject: CN=925A69BEEBAD282F3541CE9A65ADC731654D87D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:3d:7a:5e:a8:70:28:c7:32:ee:62:fb:1b:
ea:1b:dd:3f:55:26:af:15:e7:3b:b4:25:45:d2:3e:
ef:28:45:1b:b8:c4:23:be:8b:72:79:0a:25:71:a5:
45:73:e7:bd:02:4a:07:92:4f:c0:c3:5a:07:90:a4:
c3:35:15:f3:ab:b6:b5:bc:70:0a:17:eb:53:e7:1e:
74:ea:43:73:f6:b7:39:60:61:b5:82:75:39:e7:0a:
85:35:06:81:3c:bb:b9:92:9e:f7:57:20:2c:28:3a:
24:47:f2:ba:b4:a2:83:c0:32:5b:68:25:9f:23:ef:
9b:92:65:20:89:18:a5:ba:b5:81:83:97:8d:97:ea:
65:dd:83:8e:b2:95:24:20:38:fc:d5:9e:09:ef:60:
3d:cd:4a:a1:9b:0b:9f:83:f9:34:68:c5:a5:fa:be:
1c:41:85:dd:9f:86:06:95:d0:09:cb:19:25:56:f6:
92:32:21:7f:1d:78:05:75:e5:89:45:75:9a:f3:f0:
42:72:b9:93:20:d1:e7:1b:7b:1b:2d:18:96:e3:5d:
e1:83:37:59:6e:32:2f:7b:8b:14:de:c5:82:62:7e:
e4:6a:a5:71:ee:1f:43:89:7d:3d:49:e3:79:ad:da:
1f:70:10:df:4f:5b:67:4f:0c:22:d0:72:fd:76:56:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:69:BE:EB:AD:28:2F:35:41:CE:9A:65:AD:C7:31:65:4D:87:D5
X509v3 Authority Key Identifier:
keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38342e302f32342d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:10:6f:6d:df:45:ed:ce:4a:f8:95:a9:0c:0e:69:d1:df:74:
09:31:c1:dc:33:f7:5f:4c:5a:05:c3:da:06:e2:39:4a:17:37:
05:aa:3f:73:0a:1e:e8:12:0c:41:e3:71:c8:f9:f5:6c:ce:9c:
91:42:0d:4f:e2:78:0f:6f:e4:2f:6a:79:f5:03:cf:b0:4b:9c:
c7:67:65:44:1f:72:1b:4d:e1:b6:9f:5a:89:95:fb:b4:2c:50:
ed:a2:57:8b:ad:0a:79:81:e8:f3:e6:69:d2:59:30:e2:38:ed:
cf:29:7e:19:93:d9:57:9d:6e:b4:43:2d:1a:d8:ec:2f:50:18:
1c:09:f6:d9:2d:c5:79:5a:38:9d:a2:d7:f0:fe:19:0d:19:aa:
67:7a:5e:a9:f3:5d:a1:d0:62:a5:14:e6:a2:6c:c2:fb:1d:4e:
1a:37:80:30:30:98:45:3e:2a:5f:ee:fc:64:33:e4:70:34:b0:
eb:99:2e:cf:84:99:61:3f:3f:31:a2:b0:13:5a:dd:1f:dd:20:
13:1e:aa:17:b9:3a:31:03:3d:c9:e1:20:51:fd:73:b3:ed:ea:
98:5f:0f:b1:dd:d4:86:cb:07:4d:7a:be:64:cc:d7:99:ab:d2:
43:32:9d:18:59:3a:47:b7:7d:65:ad:45:a3:e4:43:f2:49:1f:
9d:cb:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:22:05 2026 by rpki-client