
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232372e302f32342d3234203d3e203538353431.roa
File: 3130332e3233392e3232372e302f32342d3234203d3e203538353431.roa (raw, json)
Hash identifier: D/Jo78JHKnmoRwv/XsdXlwg7xnjflLIJYsZreffWwpE=
Subject key identifier: 15:CD:C1:CA:F8:1D:C7:4D:C7:BC:50:64:76:E4:D1:BF:76:BD:60:6F
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 21AC6E9ABD77F0DF8C6DBE0315B0016596E90CD1
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232372e302f32342d3234203d3e203538353431.roa
Signing time: Mon 29 Jun 2026 07:28:48 +0000
ROA not before: Mon 29 Jun 2026 07:23:48 +0000
ROA not after: Mon 28 Jun 2027 07:28:48 +0000
asID: 58541
IP address blocks: 103.239.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ac:6e:9a:bd:77:f0:df:8c:6d:be:03:15:b0:01:65:96:e9:0c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jun 29 07:23:48 2026 GMT
Not After : Jun 28 07:28:48 2027 GMT
Subject: CN=15CDC1CAF81DC74DC7BC506476E4D1BF76BD606F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:9a:7a:e1:06:b2:d1:fa:e9:b0:23:ff:c7:
25:70:4a:08:c1:1a:4f:d5:3c:10:ef:af:ff:27:f2:
e5:3b:5d:9d:5a:27:8e:05:f2:00:c8:83:0b:f5:e3:
31:22:b5:6c:9c:08:e0:b3:2e:06:a5:bd:51:a2:cb:
82:ec:d8:fb:b7:bd:db:a7:f4:13:22:f9:1e:2e:a8:
da:5e:cf:3e:44:5b:eb:1a:57:00:08:aa:55:da:f2:
71:12:0a:46:fa:28:21:87:91:f8:a0:fc:2b:8b:b3:
5f:c9:ba:2b:40:d4:26:2c:07:f1:c3:39:d5:04:ac:
e5:fe:84:df:ae:8d:cb:5a:bf:9a:2d:0e:8e:1a:e1:
3f:8e:b9:12:c0:8a:a9:31:9d:9f:e0:77:6c:8d:35:
22:e1:fe:e6:09:51:76:59:37:e9:24:e4:02:e3:73:
a1:61:14:b7:bd:d8:9d:b2:64:fb:f6:d4:27:b0:2f:
18:df:0f:d6:ea:78:ac:77:5d:f1:15:f4:c4:d3:61:
8e:a5:b2:25:2b:cf:13:ea:ba:15:d4:46:5b:94:01:
77:1a:be:47:df:12:c4:e8:ad:29:81:30:b3:b4:bc:
c5:ce:0b:4d:ac:f9:fe:10:57:91:b3:d0:92:97:ac:
23:c8:7a:f6:60:26:d9:a8:72:45:30:9d:44:3a:23:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:C1:CA:F8:1D:C7:4D:C7:BC:50:64:76:E4:D1:BF:76:BD:60:6F
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232372e302f32342d3234203d3e203538353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.227.0/24
Signature Algorithm: sha256WithRSAEncryption
13:44:17:58:e9:8e:71:67:27:f0:0c:30:5e:5e:79:30:56:b2:
44:c6:0a:0a:e8:e1:a1:fd:63:60:c8:ee:6c:56:4d:88:0b:7e:
7e:9c:a4:7e:33:18:2c:80:07:65:bb:c8:44:84:de:c1:62:29:
7b:e6:80:e5:d4:93:2a:50:16:3a:97:49:04:c2:72:92:8e:0a:
bb:33:8e:3f:3a:d9:a5:01:ac:f4:fb:d2:79:15:76:da:6f:db:
1e:d9:72:6a:53:27:24:f5:8d:9f:91:c5:78:90:27:90:7e:82:
54:11:37:63:96:13:59:eb:dd:fb:7b:7b:db:a0:7f:0f:9f:81:
c6:f1:fa:e0:ce:6d:89:58:79:7d:a4:ba:2c:49:d4:09:ba:60:
e3:7d:84:ee:a7:70:99:7e:fe:2b:09:90:3f:d8:a2:04:dd:d4:
0a:6b:ee:88:29:e6:3f:7d:8c:38:47:51:5a:21:2b:3e:0b:27:
14:b0:55:8a:17:5e:e9:19:c9:29:1e:3a:2b:4e:05:93:5c:b0:
c0:23:b9:e5:95:74:38:3d:6b:0b:1a:9d:66:ff:25:0e:8a:5e:
95:54:2b:a5:14:95:1d:41:8a:5f:6a:18:71:08:5d:92:cf:e1:
0a:5e:db:c3:f4:ab:b1:9e:79:e0:41:ee:23:d8:04:77:bc:d0:
9f:df:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:43 2026 by rpki-client