
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3230332e38312e31362e302f32302d3230203d3e20313334373635.roa
File: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (raw, json)
Hash identifier: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=
Subject key identifier: 1B:0A:A9:5F:61:2E:9E:67:DF:61:1F:FE:4F:3A:2D:2F:61:BA:2E:05
Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A
Certificate serial: 191AE76D8652EC9A74A389BAF1395B446D489D44
Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3230332e38312e31362e302f32302d3230203d3e20313334373635.roa
Signing time: Mon 13 Jul 2026 11:55:08 +0000
ROA not before: Mon 13 Jul 2026 11:50:08 +0000
ROA not after: Mon 12 Jul 2027 11:55:08 +0000
asID: 134765
IP address blocks: 203.81.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1a:e7:6d:86:52:ec:9a:74:a3:89:ba:f1:39:5b:44:6d:48:9d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A
Validity
Not Before: Jul 13 11:50:08 2026 GMT
Not After : Jul 12 11:55:08 2027 GMT
Subject: CN=1B0AA95F612E9E67DF611FFE4F3A2D2F61BA2E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:86:0e:49:a0:93:2a:b4:2a:98:db:52:24:
9d:6b:fc:92:9a:81:95:52:91:f4:7d:26:dc:30:04:
75:77:21:e6:69:45:1a:d4:58:7c:aa:03:c8:70:4c:
18:db:0e:c5:94:e4:c1:e9:98:7c:11:f1:b3:3b:37:
15:4c:29:27:6d:f2:fc:63:5b:f8:f1:03:f2:1a:8a:
aa:47:5a:84:c1:eb:3b:a6:a5:24:ea:78:d9:af:60:
51:87:6d:91:cc:cb:ed:0e:bb:e4:34:6a:cb:4f:90:
09:f0:8b:91:64:d0:20:6f:f0:5d:8c:7c:7f:49:d2:
b8:3f:4a:bb:15:c1:75:b7:64:8f:60:4f:e2:6a:43:
9c:94:7c:53:73:11:47:0a:e1:a7:44:1e:51:a1:8d:
b9:78:1e:17:ea:53:51:93:00:7a:a2:da:d2:06:1e:
41:33:a2:81:25:54:c7:28:58:b9:91:f8:35:4c:f0:
28:a1:35:f2:0c:26:88:5f:b3:7f:a7:73:b5:c0:d8:
5d:ce:33:8d:73:83:c6:3a:11:89:1f:ea:92:26:3e:
34:9d:f3:29:a1:b3:5c:5a:ef:5d:2b:71:be:0e:1b:
24:38:53:cb:70:6d:f2:d4:de:d3:62:b1:a5:51:1f:
0c:6e:0c:fa:1e:f5:43:8c:c1:9b:6c:f5:16:10:a6:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0A:A9:5F:61:2E:9E:67:DF:61:1F:FE:4F:3A:2D:2F:61:BA:2E:05
X509v3 Authority Key Identifier:
keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3230332e38312e31362e302f32302d3230203d3e20313334373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.81.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:9f:d8:dc:a3:5e:95:e6:af:90:fe:cd:c8:0d:13:af:13:90:
96:5b:f7:28:33:9b:2b:f1:76:40:28:0d:5f:2a:ac:cd:dd:fc:
03:a7:5a:64:53:9f:49:57:93:c2:44:06:e1:73:44:bc:c9:a0:
79:af:e5:b3:d1:c6:f3:28:b4:fa:2f:58:6e:9f:65:50:63:d3:
6c:5e:f2:a2:e9:d6:9e:c9:3a:c2:c4:a6:d3:c5:64:9a:c2:d7:
e7:e3:f9:b6:35:c0:dc:ad:e9:fb:8b:50:70:75:bf:c7:93:e5:
86:8b:06:5a:59:4b:ca:b5:12:b3:ad:a9:41:71:bb:be:85:95:
db:c7:18:1a:8e:42:9c:7e:66:f2:15:5f:a7:42:d9:d3:98:71:
e9:c9:7e:4f:25:53:44:09:d7:1c:f4:ae:d2:85:b2:a1:a5:bb:
50:54:2c:3f:2b:78:a7:aa:25:b2:55:c9:68:98:41:bc:69:16:
0e:7f:c0:28:9e:73:81:f4:d4:a4:2a:b5:28:7d:ca:01:fa:ba:
2b:a4:7f:49:fb:2e:23:41:14:f7:32:af:2d:99:9c:76:75:df:
4f:4c:89:99:3e:0b:8a:d8:b2:65:e2:b9:58:fc:75:c9:ed:fe:
e5:06:60:45:40:83:c5:35:10:5c:10:80:13:64:31:5d:cc:14:
b8:4a:58:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:51 2026 by rpki-client