
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa
File: 3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa (raw, json)
Hash identifier: 6csy52r/oDieMavBe94L6XVKY6JeI8A0+LvrsQfB0Z0=
Subject key identifier: C6:B8:95:FE:E7:65:29:66:FF:13:E8:2F:13:4E:F6:60:51:6C:DB:84
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 03A1708C519F6A35CCEE9B609D2D797F26714579
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa
Signing time: Thu 09 Apr 2026 09:15:57 +0000
ROA not before: Thu 09 Apr 2026 09:10:57 +0000
ROA not after: Thu 08 Apr 2027 09:15:57 +0000
asID: 134768
IP address blocks: 103.236.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a1:70:8c:51:9f:6a:35:cc:ee:9b:60:9d:2d:79:7f:26:71:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Apr 9 09:10:57 2026 GMT
Not After : Apr 8 09:15:57 2027 GMT
Subject: CN=C6B895FEE7652966FF13E82F134EF660516CDB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:61:44:48:e5:a4:21:3a:bb:ed:95:4a:70:
7d:11:1b:13:59:01:71:b8:b4:bd:6c:a7:5d:c3:ae:
7d:25:ce:7e:02:50:d2:b4:82:14:9e:3a:bf:2e:66:
49:f7:de:63:58:c1:19:5e:63:7e:a1:18:57:7c:9b:
f7:ba:9b:ea:da:da:51:19:29:a9:a7:61:f8:a2:d4:
d7:52:eb:a6:83:2d:9a:79:a7:00:17:4a:6c:ef:7d:
03:75:bf:11:4c:90:c3:d3:ae:70:2a:43:90:f7:2c:
cf:08:18:61:dc:a6:85:01:b1:ea:e3:c4:5d:07:2d:
60:81:e0:73:26:48:75:28:0d:0a:92:db:61:cc:9d:
0f:97:06:be:b0:e3:ce:af:6f:d6:1c:35:5c:f8:dd:
0d:0c:d8:47:89:2b:94:76:b2:f7:6a:a0:5a:3c:15:
88:96:c2:ed:a0:1e:44:df:f0:a1:5c:fb:11:93:6e:
6d:bf:90:46:85:02:33:fb:aa:da:17:2f:6c:8b:6b:
0c:2b:8e:0b:91:1f:b2:4e:5c:7b:ae:04:a2:e6:16:
9c:37:c3:c8:ff:04:6d:9f:cf:8f:eb:5d:19:55:d7:
ff:ef:e1:a3:45:42:df:a3:07:ec:25:03:16:6e:b2:
cb:19:24:81:90:ef:1e:c7:18:b3:8f:ee:8a:44:4e:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B8:95:FE:E7:65:29:66:FF:13:E8:2F:13:4E:F6:60:51:6C:DB:84
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.92.0/22
Signature Algorithm: sha256WithRSAEncryption
09:54:1f:89:58:b1:71:92:b0:3b:5c:1c:30:a1:3f:da:03:bc:
f6:76:0c:dd:b6:4c:f9:7e:07:e7:93:88:c4:86:a1:93:fc:be:
1f:a8:67:5d:04:f8:0b:c4:bb:16:bf:8f:57:e8:97:f9:d9:a7:
02:aa:cf:53:33:4b:f3:66:f3:c3:48:a6:8e:06:97:38:6f:97:
6d:79:09:d5:01:53:7f:1e:5d:81:ae:7f:d2:b7:fd:fa:fa:ea:
c2:f7:7f:ab:fe:c3:05:c2:ee:32:fa:44:20:96:52:f5:5a:93:
1e:86:50:0f:ce:8e:16:af:12:2b:32:25:28:71:44:69:ed:a5:
44:c1:63:1c:3c:58:6f:15:af:85:17:c2:87:0b:d0:9c:c2:b1:
ad:ce:34:62:2b:36:3d:44:50:07:71:85:31:33:f5:f5:de:69:
6c:35:b9:0e:bd:f3:4b:5f:fb:97:d5:91:e8:a1:9f:dc:bc:35:
fb:26:db:2e:a0:a9:8f:03:45:d3:16:e5:7a:79:4c:da:5c:76:
47:c4:c5:df:e2:75:89:82:20:08:c4:eb:ff:1c:b1:ce:e5:de:
b2:3d:ae:0c:00:47:14:87:f2:b2:0c:62:88:7e:a3:5a:2e:5c:
f8:b7:79:f5:e4:8c:8b:88:df:78:8f:87:19:39:f8:52:18:3c:
4c:cb:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:30 2026 by rpki-client