
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134823.roa
File: AS134823.roa (raw, json)
Hash identifier: jrdseS2hlhxemyIN9g7jBJd79oJ1I0WFThPk/GFgBfw=
Subject key identifier: AF:2C:37:1E:1D:61:3E:2C:69:8B:C2:72:56:41:3A:33:49:48:6A:52
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 6711F405013A9152D5EDA7630607CB265B790EB9
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134823.roa
Signing time: Tue 19 May 2026 02:36:42 +0000
ROA not before: Tue 19 May 2026 02:31:42 +0000
ROA not after: Tue 18 May 2027 02:36:42 +0000
asID: 134823
IP address blocks: 103.115.62.0/24 maxlen: 24
103.118.204.0/22 maxlen: 24
103.118.208.0/22 maxlen: 24
103.118.212.0/22 maxlen: 24
103.118.216.0/22 maxlen: 24
103.118.220.0/22 maxlen: 24
103.118.248.0/22 maxlen: 24
103.132.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 10:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:11:f4:05:01:3a:91:52:d5:ed:a7:63:06:07:cb:26:5b:79:0e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: May 19 02:31:42 2026 GMT
Not After : May 18 02:36:42 2027 GMT
Subject: CN=AF2C371E1D613E2C698BC27256413A3349486A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:82:34:9a:70:e6:d8:49:fc:40:60:66:2a:
9f:f0:96:9b:38:b1:50:aa:38:59:fc:bd:ca:e2:13:
01:ae:4a:b2:6d:54:bc:07:46:83:28:1f:0e:ff:12:
08:2a:47:3c:cd:79:ab:68:dd:40:05:98:58:bf:7a:
ed:92:94:76:74:a7:19:f8:7f:b1:61:af:3d:21:a8:
d2:4b:dd:d0:36:28:30:b0:f2:5b:26:ba:be:c0:f1:
8f:13:c5:2a:72:73:7e:26:0f:54:1a:af:50:c0:e2:
62:ff:50:4c:44:34:57:a9:4b:8e:e8:24:ba:a8:f9:
52:5f:f7:aa:9a:3e:79:a7:ad:17:0d:2a:cf:24:a0:
fa:76:93:78:3d:fc:30:ae:e4:d0:30:e2:ca:03:93:
29:12:0b:77:58:bd:48:52:fb:93:f7:74:27:41:72:
aa:f8:29:b3:2b:9a:c5:5c:e8:08:be:20:ec:74:0b:
b0:62:41:63:e1:b7:8f:0c:b1:d8:b6:94:ca:ed:72:
5c:ef:97:c6:56:d0:11:04:fc:c0:a5:19:b0:b5:cd:
54:70:b5:5d:71:b7:fd:49:99:16:9e:bc:61:d8:16:
9b:17:4d:92:f8:b0:40:ea:f2:6c:b2:e7:cf:9a:bf:
8c:d8:a5:ec:8d:a5:39:a3:95:ab:53:f0:1a:6f:1d:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2C:37:1E:1D:61:3E:2C:69:8B:C2:72:56:41:3A:33:49:48:6A:52
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.62.0/24
103.118.204.0-103.118.223.255
103.118.248.0/22
103.132.160.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:2f:60:9f:91:ea:05:ca:63:f1:75:22:5a:42:6c:c8:fb:9b:
4c:d9:0b:b9:b7:72:b8:e2:10:80:94:d0:0f:2b:3e:ab:e2:dd:
66:78:9f:bb:db:bd:72:02:ba:98:f1:f6:05:0e:08:50:36:5b:
b8:21:ac:71:eb:71:94:13:d4:4f:e0:a4:80:a3:c6:a9:7b:2f:
96:92:0a:b6:89:a7:0b:6a:c8:1c:e2:ed:0a:0a:df:87:ba:6c:
a3:0e:15:a5:51:5d:8f:ce:a4:54:ab:ef:1c:72:97:0c:dc:36:
f8:26:61:87:38:bb:3c:a0:d7:c0:1d:c6:86:b6:09:3d:0a:ee:
f6:40:34:0a:2d:da:f2:15:53:41:f1:c2:12:fd:f8:bf:2e:4d:
1e:7b:ee:92:f9:ac:3c:b7:3b:7c:10:66:a7:3d:3e:1c:3c:ec:
f6:cb:7e:3c:28:2f:55:c2:06:97:48:ec:5e:9f:23:95:1e:1c:
6a:63:98:38:03:3e:c6:cc:bb:15:ed:56:12:e0:da:11:08:f6:
60:7a:68:c8:ca:fd:04:ff:a0:d1:4b:33:04:34:ef:25:15:ab:
dc:0d:c5:f4:3b:7d:ef:20:e1:3d:4a:29:d6:df:9e:ee:4d:35:
a7:e3:78:2b:11:1f:4f:0d:e6:20:d5:a5:17:6e:78:8b:b1:fd:
ae:21:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:36 2026 by rpki-client