
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38332e302f32342d3234203d3e20313339313732.roa
File: 3130332e34342e38332e302f32342d3234203d3e20313339313732.roa (raw, json)
Hash identifier: MAuPeIrDBzsDUFIazpsoNJXZpgOa+AdZL4uirFQ+J9I=
Subject key identifier: A2:98:E6:F2:CA:5E:E2:B0:4F:6F:D6:38:6C:D1:5C:14:2C:7D:AD:6D
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 6423E5C82B982FC9083640B3BBDAB5172CC306EF
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38332e302f32342d3234203d3e20313339313732.roa
Signing time: Mon 01 Jun 2026 07:26:08 +0000
ROA not before: Mon 01 Jun 2026 07:21:08 +0000
ROA not after: Mon 31 May 2027 07:26:08 +0000
asID: 139172
IP address blocks: 103.44.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:23:e5:c8:2b:98:2f:c9:08:36:40:b3:bb:da:b5:17:2c:c3:06:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Jun 1 07:21:08 2026 GMT
Not After : May 31 07:26:08 2027 GMT
Subject: CN=A298E6F2CA5EE2B04F6FD6386CD15C142C7DAD6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:ea:20:0e:d8:e1:46:ba:25:f9:77:d8:d7:
1b:5a:a3:32:3c:23:a5:50:c6:0e:ad:7e:51:35:81:
df:48:5e:fb:7e:65:69:f8:ab:fa:c3:8b:4d:13:85:
6c:f9:1b:48:77:b5:0e:33:bb:c9:02:c9:4d:f5:42:
9c:9e:30:1e:f6:0f:c6:ec:08:2c:a5:a5:bf:03:a5:
f6:75:cf:d5:6c:0a:78:91:73:4d:94:c4:06:bb:ed:
b5:5e:6a:58:f4:40:4a:3e:ae:6b:fa:d1:92:b2:b9:
4b:3c:aa:a3:8d:07:bb:4c:bd:1b:83:b7:12:af:bb:
6c:88:7e:a0:3e:1e:9c:b4:df:e1:4f:1c:e3:23:2c:
c1:b3:0e:65:56:c1:f9:5b:5b:5e:85:51:fb:d8:9a:
e1:67:71:7c:24:1e:51:2e:cc:20:98:49:e5:05:58:
f7:1b:26:df:af:96:32:30:98:6a:7b:d7:ef:c6:c9:
54:d8:3b:b0:ae:b6:1d:9a:e0:a8:a1:4c:0f:4f:04:
47:19:f2:30:89:99:fd:08:56:9e:99:9c:91:95:99:
07:77:db:cd:6d:6c:72:07:db:ea:52:14:b6:04:e9:
9a:38:8a:db:e2:b0:66:4c:10:75:64:53:59:26:e0:
2f:db:eb:0f:b3:48:77:e6:bf:b9:b8:18:8b:9a:9e:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:E6:F2:CA:5E:E2:B0:4F:6F:D6:38:6C:D1:5C:14:2C:7D:AD:6D
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38332e302f32342d3234203d3e20313339313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:35:c2:eb:74:04:a2:a0:50:1b:05:ac:8c:cc:b1:8c:cf:7d:
8e:ff:ce:90:18:e6:ee:a4:35:40:95:1d:be:2a:43:94:d0:2a:
15:8e:60:7e:8d:77:40:0a:78:4e:85:36:59:3d:0f:82:73:62:
96:e4:50:e9:ed:e0:87:c3:ec:a0:e0:65:0d:99:b2:46:03:5b:
f6:10:d8:e8:7a:2a:ec:b0:f5:e5:2c:f4:cd:1a:07:4f:41:46:
7e:58:be:ee:bb:03:95:c7:79:7d:6e:21:ed:5e:85:b9:00:97:
98:10:59:bd:ff:8c:67:6e:65:46:e6:7a:95:74:d5:74:61:1c:
04:e6:a3:e1:ff:80:04:36:7f:da:e7:26:ad:73:b6:72:45:c0:
f2:dd:32:0e:4f:a5:ec:42:7e:47:c2:fd:5e:74:dc:da:db:ca:
b9:82:08:3b:62:37:94:70:7a:78:fe:7e:a8:73:4e:bc:94:72:
1d:4f:09:8b:9f:b9:46:9a:8d:e3:f4:41:04:c2:21:47:8c:e6:
f7:ee:12:0f:da:3f:04:32:89:a5:59:9c:51:9c:ec:34:6f:cc:
a7:27:1e:8f:fa:e0:7e:9d:71:d0:46:a3:df:e2:e0:ff:46:c6:
8b:3d:99:29:e9:d8:ff:6f:a3:f5:2b:a1:35:17:87:db:58:0a:
1f:62:b4:bd
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZCPlyCuYL8kINkCzu9q1FyzDBu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA2MDEwNzIxMDhaFw0yNzA1MzEwNzI2MDhaMDMxMTAvBgNV
BAMTKEEyOThFNkYyQ0E1RUUyQjA0RjZGRDYzODZDRDE1QzE0MkM3REFENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGeogDtjhRrol+XfY1xtaozI8
I6VQxg6tflE1gd9IXvt+ZWn4q/rDi00ThWz5G0h3tQ4zu8kCyU31QpyeMB72D8bs
CCylpb8DpfZ1z9VsCniRc02UxAa77bVealj0QEo+rmv60ZKyuUs8qqONB7tMvRuD
txKvu2yIfqA+Hpy03+FPHOMjLMGzDmVWwflbW16FUfvYmuFncXwkHlEuzCCYSeUF
WPcbJt+vljIwmGp71+/GyVTYO7Cuth2a4KihTA9PBEcZ8jCJmf0IVp6ZnJGVmQd3
281tbHIH2+pSFLYE6Zo4itvisGZMEHVkU1km4C/b6w+zSHfmv7m4GIuanqhlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUopjm8spe4rBPb9Y4bNFcFCx9rW0wHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjcyNzc1MjM1MTk0MDYwOS8wLzMxMzAzMzJlMzQz
NDJlMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzczMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcsUzANBgkqhkiG9w0BAQsFAAOCAQEAOzXC63QEoqBQGwWsjMyxjM99
jv/OkBjm7qQ1QJUdvipDlNAqFY5gfo13QAp4ToU2WT0PgnNiluRQ6e3gh8PsoOBl
DZmyRgNb9hDY6Hoq7LD15Sz0zRoHT0FGfli+7rsDlcd5fW4h7V6FuQCXmBBZvf+M
Z25lRuZ6lXTVdGEcBOaj4f+ABDZ/2ucmrXO2ckXA8t0yDk+l7EJ+R8L9XnTc2tvK
uYIIO2I3lHB6eP5+qHNOvJRyHU8Ji5+5RpqN4/RBBMIhR4zm9+4SD9o/BDKJpVmc
UZzsNG/Mpycej/rgfp1x0Eaj3+Lg/0bGiz2ZKenY/2+j9SuhNReH21gKH2K0vQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:34 2026 by rpki-client