
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232342e302f32322d3232203d3e203538353431.roa
File: 3130332e3233392e3232342e302f32322d3232203d3e203538353431.roa (raw, json)
Hash identifier: +LJEW2MF7PJmfuNalT64+KK2MXHor8saw0HGaHPu8ig=
Subject key identifier: B3:B6:B7:5E:AE:56:7E:9A:6E:16:68:9D:EF:70:7C:63:EF:A7:A8:0C
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 258ECDD46D2E078DEFE0A36AAC38D0D8DDFAAA13
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232342e302f32322d3232203d3e203538353431.roa
Signing time: Mon 29 Jun 2026 07:28:48 +0000
ROA not before: Mon 29 Jun 2026 07:23:48 +0000
ROA not after: Mon 28 Jun 2027 07:28:48 +0000
asID: 58541
IP address blocks: 103.239.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8e:cd:d4:6d:2e:07:8d:ef:e0:a3:6a:ac:38:d0:d8:dd:fa:aa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jun 29 07:23:48 2026 GMT
Not After : Jun 28 07:28:48 2027 GMT
Subject: CN=B3B6B75EAE567E9A6E16689DEF707C63EFA7A80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:f6:fc:49:00:26:d4:f2:5e:c3:cb:d0:eb:
5d:11:a3:28:d5:9a:73:fb:bb:09:a3:60:13:44:e0:
b7:44:99:ae:d9:f7:42:46:86:f3:38:c9:00:16:5f:
f3:73:b1:24:bf:27:36:6d:aa:33:cd:11:ea:28:cd:
a4:33:36:c1:15:3c:7c:2d:55:2e:e3:20:68:11:3f:
d1:7c:97:73:4e:84:a0:21:fb:31:da:ef:13:b0:af:
62:8a:c4:07:43:d8:3e:31:ce:04:d7:eb:62:24:5c:
b6:e8:d0:43:13:16:21:9d:73:ca:5f:1d:e5:ba:22:
2b:eb:a1:6e:0c:ad:1b:39:b8:86:8e:77:7b:f0:77:
02:e8:9a:b1:f8:07:29:2e:7d:bb:0e:f5:b8:a8:c8:
15:06:dd:13:2c:8d:ea:90:4d:b9:06:f0:f7:b4:18:
f1:bf:35:c1:de:c8:41:60:2c:cb:55:ca:c5:1b:5a:
87:56:45:58:59:5d:43:f2:78:0a:ea:eb:d3:5a:16:
07:d1:72:2f:6a:c0:c9:0b:ca:d4:12:0a:8f:b3:57:
da:ae:13:83:83:fd:66:9a:74:10:6f:f9:31:a0:74:
7f:2e:06:2c:da:a7:d0:24:98:5e:fd:60:3e:2b:d3:
f1:a9:37:11:ce:39:90:4c:a0:9b:94:b4:47:bd:bb:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:B7:5E:AE:56:7E:9A:6E:16:68:9D:EF:70:7C:63:EF:A7:A8:0C
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232342e302f32322d3232203d3e203538353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.224.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:bf:37:08:58:6d:8d:ca:26:1b:79:bd:25:22:cf:f3:18:69:
33:62:80:1c:77:2d:a2:79:d7:fa:6d:f2:72:b5:f5:9c:4a:71:
9d:58:2a:6a:da:b2:3f:eb:b0:64:24:a1:c4:a7:a0:2a:11:44:
e1:4c:81:d0:8a:a3:f4:fb:ea:41:f4:7b:3c:fd:93:d1:ff:a0:
bb:5a:a9:8c:ca:d6:db:89:02:61:b0:63:10:16:74:bc:7e:b7:
eb:d1:7a:64:96:04:56:41:cb:6a:aa:da:52:85:31:27:13:8d:
a0:1e:e6:df:fd:77:bd:6b:2b:62:e2:11:a2:26:7e:3f:76:22:
66:ec:a6:f8:2e:43:15:73:18:0e:54:b4:f8:1c:5e:19:02:6c:
d1:d0:83:b0:d5:d0:56:4f:47:f2:e8:90:46:49:c9:f9:d1:4a:
e4:2a:33:46:d4:95:ad:67:b0:41:eb:e5:97:4a:a1:c8:02:00:
fd:59:38:4a:4c:0b:ef:e1:5f:44:c2:d6:2f:a0:4d:ad:33:e0:
46:74:64:e5:6d:4e:1c:53:d8:d0:dc:33:b7:1a:8b:6f:02:92:
dd:0e:92:7e:9a:fd:6c:e6:cd:8e:73:45:47:59:93:d9:5f:6a:
1f:6c:56:2f:55:78:f5:f9:77:09:62:c0:a7:db:a1:88:9f:5e:
93:a3:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:28 2026 by rpki-client