
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa
File: 3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa (raw, json)
Hash identifier: l8BiSjdm/v4L+Lk4AWpSFB7YqYeNE63RZbUpZObgJC4=
Subject key identifier: 59:96:33:53:FE:00:37:F7:E3:CF:B0:AF:C1:C5:D2:9E:A0:5D:69:1F
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 53622C89F78BFD14EEE5D13D60BA82AB1CEFD459
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa
Signing time: Thu 09 Apr 2026 09:15:57 +0000
ROA not before: Thu 09 Apr 2026 09:10:57 +0000
ROA not after: Thu 08 Apr 2027 09:15:57 +0000
asID: 134768
IP address blocks: 103.236.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:62:2c:89:f7:8b:fd:14:ee:e5:d1:3d:60:ba:82:ab:1c:ef:d4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Apr 9 09:10:57 2026 GMT
Not After : Apr 8 09:15:57 2027 GMT
Subject: CN=59963353FE0037F7E3CFB0AFC1C5D29EA05D691F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:7b:3c:44:a4:57:50:16:72:f4:f5:4b:68:
b5:30:35:e7:6b:de:52:b0:99:ae:c7:aa:66:1f:21:
b1:f0:2a:c8:f3:1d:b0:89:67:9f:17:6b:67:cf:0b:
8e:f9:ae:33:13:3c:9d:4c:7d:ef:44:88:c0:e7:71:
d5:cf:3f:74:e3:f8:02:45:0c:d5:25:1f:7a:6c:bf:
89:53:f9:06:6c:8c:c6:e4:4d:fc:7f:15:45:b3:87:
ed:e4:b2:bb:18:8e:cd:f7:61:2c:b0:5f:a1:e1:a7:
58:9e:67:dc:08:43:78:5b:97:74:7e:08:b8:1c:ef:
18:27:cc:b0:27:a0:69:b3:1a:29:7d:46:07:28:32:
78:da:d2:78:84:03:19:5f:e6:40:c7:33:04:1e:a2:
55:d7:e4:4f:4a:98:27:89:5b:b7:fe:71:a4:95:3d:
b8:e3:d9:db:14:0b:fb:f3:34:b4:0c:d3:7e:38:a5:
80:8d:a4:d6:87:c3:72:04:eb:cd:56:31:42:00:a2:
a9:c1:4f:75:c4:ac:3d:84:de:64:e2:2b:39:a9:99:
9a:ea:a4:ff:c4:58:bb:d1:a9:ff:9a:03:cd:2a:df:
3c:aa:c0:29:94:c7:d1:6b:3b:5e:9b:51:5e:13:f6:
03:da:00:0d:28:73:2a:64:4b:64:d3:5e:4f:2f:ff:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:33:53:FE:00:37:F7:E3:CF:B0:AF:C1:C5:D2:9E:A0:5D:69:1F
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.96.0/22
Signature Algorithm: sha256WithRSAEncryption
05:88:b9:08:4c:d3:ff:30:27:26:69:60:8d:09:c5:6f:45:2e:
c7:06:1a:bb:bc:02:ab:2a:a2:b2:c5:e6:7a:1a:06:86:09:5c:
b2:62:03:7c:11:66:10:74:fc:ed:0e:4e:73:bb:85:5b:30:b0:
e1:c7:f1:67:54:01:aa:45:c5:16:06:f3:c0:fb:05:b6:f1:5b:
38:f5:5d:0c:b1:42:fb:97:de:7d:d9:fe:9a:0a:b8:c6:61:b6:
0b:d4:0d:8b:a7:b2:67:4c:b3:a4:f7:4e:41:61:99:80:67:da:
42:e9:8f:f3:36:3e:c3:35:6a:fd:68:d3:de:ab:c4:c2:a9:14:
0c:4a:6c:f8:46:0b:a3:e8:e3:6d:d3:62:67:c3:92:d0:ab:31:
10:fc:a5:09:d3:14:aa:3a:6c:c9:89:3d:87:49:e9:78:48:51:
b9:b3:86:f0:76:58:c5:c8:91:5b:bd:99:34:20:da:58:fd:ff:
16:23:fc:77:30:9e:85:6c:dc:c9:bd:e2:cb:ec:1e:26:03:c6:
48:cf:e8:f5:95:e7:d7:c0:03:d8:07:ba:18:b2:9a:13:4c:59:
a8:22:7c:c0:0b:79:be:7b:43:12:f5:c0:5c:0b:f4:e4:fd:12:
2b:a4:25:98:24:68:f0:bd:44:03:26:b0:31:5c:7b:43:8f:36:
65:aa:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:36 2026 by rpki-client