
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38302e302f32322d3232203d3e20313334373638.roa
File: 3130332e3233362e38302e302f32322d3232203d3e20313334373638.roa (raw, json)
Hash identifier: mk9zLY/hRPvbRURhi9lZJkqmY1Nw8vh0nZlzit8Jpd4=
Subject key identifier: D7:33:B6:C6:3C:B7:1B:D5:DC:3F:FA:99:05:5F:86:C7:12:14:11:30
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 3C8B55E4C1BC1D3C5700318F0570BD84CEAB765B
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38302e302f32322d3232203d3e20313334373638.roa
Signing time: Thu 09 Apr 2026 09:15:57 +0000
ROA not before: Thu 09 Apr 2026 09:10:57 +0000
ROA not after: Thu 08 Apr 2027 09:15:57 +0000
asID: 134768
IP address blocks: 103.236.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8b:55:e4:c1:bc:1d:3c:57:00:31:8f:05:70:bd:84:ce:ab:76:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Apr 9 09:10:57 2026 GMT
Not After : Apr 8 09:15:57 2027 GMT
Subject: CN=D733B6C63CB71BD5DC3FFA99055F86C712141130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:4e:d3:bb:7e:09:64:17:0e:89:a0:ec:0f:
68:7c:17:c6:04:a1:62:a9:d0:bb:a4:28:11:34:36:
8e:12:7c:da:f8:86:62:10:58:21:d0:55:e3:c2:78:
21:b0:f5:cd:ff:be:c5:58:9d:ec:78:7c:57:08:1f:
57:cc:64:33:aa:71:43:e4:e5:af:e7:8a:14:a5:83:
56:d3:b6:bb:aa:75:3e:af:fc:7e:6c:05:65:9c:b4:
77:1b:4b:a7:b6:2a:d0:e8:dc:52:fb:a5:f5:08:81:
15:0e:f6:68:0c:d1:8b:4b:f6:9b:e2:d2:d9:ce:2a:
bc:51:f2:ea:13:f3:8f:1f:70:4e:2f:99:45:d7:3e:
e7:83:2b:28:13:d8:bb:46:c5:eb:83:65:5e:a6:31:
a2:f2:86:fb:ef:a8:e3:99:ed:ea:c0:df:79:4c:d8:
f0:7e:f9:c8:96:31:c8:6b:f0:0e:c4:32:c6:8b:45:
5d:95:85:a6:d6:86:8f:77:19:a8:83:1d:fd:71:ca:
65:de:d0:f4:f8:4d:44:ba:ed:2c:4c:1d:db:28:8e:
d2:1e:38:2f:2b:9e:4c:59:30:d1:2f:94:ad:55:13:
5d:cb:79:b4:ff:1d:21:f1:d3:ae:c5:5d:60:59:c2:
82:c4:cb:a3:d1:77:60:82:75:04:bf:71:5e:3a:5a:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:B6:C6:3C:B7:1B:D5:DC:3F:FA:99:05:5F:86:C7:12:14:11:30
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38302e302f32322d3232203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:65:b5:e4:d9:32:ab:5c:c9:7f:65:d5:11:6b:0c:24:90:a1:
0c:02:0e:bd:8f:d5:82:0a:bf:72:b6:5d:ec:b4:3c:8b:99:1a:
66:40:d5:99:59:99:e0:59:f3:85:a3:36:56:1c:f4:5a:11:64:
53:6b:84:f3:c3:92:b7:75:c9:c5:5c:93:0d:3f:e3:aa:4a:b0:
71:e0:33:44:03:1d:61:45:40:78:dc:55:0a:11:fd:60:bd:00:
f0:83:2b:c8:c4:da:bd:8d:68:51:f4:df:e0:b3:b2:5c:f5:c8:
df:e9:e7:71:6d:86:fb:e5:61:3e:e8:63:5a:85:d6:a6:10:65:
21:eb:c9:26:90:ac:3e:4f:b1:57:ac:97:dc:a8:da:c0:e2:c2:
ee:4d:7f:c5:e0:b1:7a:55:d4:17:01:fd:43:91:65:00:ba:7e:
d9:e5:cc:63:33:ee:41:85:32:a7:52:9d:8d:75:5e:fe:e4:ad:
04:31:45:5f:0c:01:4a:d5:e2:dc:16:6a:62:dc:57:09:bc:b9:
5d:c4:2b:30:c2:f5:4b:e8:b5:6a:a4:27:aa:bc:b8:a4:0b:83:
14:cf:70:19:cb:e1:bd:2b:b5:b8:fa:23:76:ec:ed:47:bf:d8:
78:b5:f1:71:ab:ba:eb:73:6a:a9:7f:1b:7f:99:05:18:10:77:
64:c4:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:37 2026 by rpki-client