
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS967.roa
File: AS967.roa (raw, json)
Hash identifier: JVboMwrCRKAezTo9QepT0BoJv+pLm67QIaO3q/zAkoo=
Subject key identifier: D0:46:1D:0B:05:D4:B7:8D:7E:8C:9B:78:32:EC:2A:6E:64:81:22:83
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 6796B92919AFA3D241828A8285475F0A50BFBD54
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS967.roa
Signing time: Tue 19 May 2026 02:36:41 +0000
ROA not before: Tue 19 May 2026 02:31:41 +0000
ROA not after: Tue 18 May 2027 02:36:41 +0000
asID: 967
IP address blocks: 103.132.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 10:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:96:b9:29:19:af:a3:d2:41:82:8a:82:85:47:5f:0a:50:bf:bd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: May 19 02:31:41 2026 GMT
Not After : May 18 02:36:41 2027 GMT
Subject: CN=D0461D0B05D4B78D7E8C9B7832EC2A6E64812283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:ed:6a:37:36:33:95:3b:7a:27:78:a9:28:
c9:d4:9c:4c:df:2e:d0:70:54:fd:3f:2a:6f:5d:5c:
8e:b3:0b:b7:9b:b2:3e:b3:13:0c:a3:4f:7e:cd:c6:
8e:3a:91:7a:a9:b8:a8:e5:a0:98:43:50:ef:54:d7:
ad:70:05:9c:92:b5:db:4b:74:cd:c0:04:90:93:e8:
7c:5f:57:40:8c:1a:17:c4:ca:a5:bb:14:12:5c:09:
2e:e0:aa:8f:9a:77:dd:0b:26:ae:a2:1b:ce:71:55:
87:56:5d:a8:e8:c0:fe:77:b5:ab:a1:e1:5a:2e:38:
fc:ba:81:c5:81:13:83:99:dc:26:7f:03:08:a0:3c:
b3:31:36:97:95:2f:03:bb:8e:33:c2:89:72:ed:7f:
1e:df:37:62:8b:c3:aa:0b:b1:c6:9b:d7:58:7c:60:
8e:72:67:ad:c5:85:08:0e:91:00:82:5f:d6:5b:9f:
69:3e:d3:83:1f:31:e6:f4:8e:35:93:bb:f5:36:a6:
52:a1:7f:34:12:6f:58:f7:80:bf:46:25:d9:97:c0:
e2:6e:cf:bc:48:fe:dd:6d:6c:64:34:f2:28:10:c3:
e5:55:fa:cf:39:d2:0a:95:ca:f4:09:23:a3:89:b9:
fe:8b:69:38:e3:58:c2:89:f4:ce:d5:35:cb:95:f7:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:1D:0B:05:D4:B7:8D:7E:8C:9B:78:32:EC:2A:6E:64:81:22:83
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:a8:0c:8a:44:cd:02:92:fb:d6:f4:80:66:2c:84:bb:31:34:
1c:80:20:9b:f1:ae:96:18:6d:46:da:32:c8:5c:a1:04:c6:ed:
51:dc:d5:b4:a3:c2:4c:13:d6:a2:d5:02:fc:74:9b:e1:38:80:
8e:b3:2d:2b:c4:93:2b:e4:d1:6e:61:d5:b0:3f:c5:98:aa:9e:
ba:c1:c8:2f:23:51:6e:a9:4e:f5:07:bc:cb:12:67:9c:8d:bc:
eb:39:52:8b:37:3d:51:af:a0:41:14:fd:e3:06:7e:bc:9f:86:
ce:15:b9:a9:e5:ab:2d:f9:9a:37:b7:7e:c6:d7:3d:07:3c:21:
78:05:d0:0f:24:60:cb:f8:a4:c1:07:88:8b:9d:58:c0:e6:5f:
6d:e2:5b:2e:c2:ec:44:1c:21:8f:19:f1:cf:98:e9:da:29:b9:
55:18:f9:eb:46:de:01:3b:64:2c:63:b8:84:a8:54:57:ec:09:
69:4c:7f:41:69:87:6a:e8:5d:ef:a4:94:0d:5b:05:af:7a:d7:
e1:aa:47:49:5e:7c:51:71:32:e1:7a:dd:4f:d6:b2:63:86:83:
d3:54:50:29:5a:5d:20:d3:e7:d4:0e:d3:88:6c:e6:23:0c:7b:
cf:f3:c5:9b:65:ab:a0:9d:1b:df:65:b7:56:87:9e:33:61:19:
c9:31:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:39 2026 by rpki-client