
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230312e302f32342d3234203d3e203435303937.roa
File: 3130332e37392e3230312e302f32342d3234203d3e203435303937.roa (raw, json)
Hash identifier: aivRIdhMnKvMATv9jOY3wLPo8yVba4ITd7pNsvuJUQk=
Subject key identifier: 78:E4:47:3F:9A:07:3A:8D:E3:76:8E:21:CC:EE:87:00:A3:95:67:A4
Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial: 25BD5F6FA20DD12C0601223E1F79D1AC00E6EE61
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230312e302f32342d3234203d3e203435303937.roa
Signing time: Mon 15 Jun 2026 01:52:42 +0000
ROA not before: Mon 15 Jun 2026 01:47:42 +0000
ROA not after: Mon 14 Jun 2027 01:52:42 +0000
asID: 45097
IP address blocks: 103.79.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bd:5f:6f:a2:0d:d1:2c:06:01:22:3e:1f:79:d1:ac:00:e6:ee:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Validity
Not Before: Jun 15 01:47:42 2026 GMT
Not After : Jun 14 01:52:42 2027 GMT
Subject: CN=78E4473F9A073A8DE3768E21CCEE8700A39567A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:49:5a:18:9c:95:16:f3:0a:2f:61:3a:fe:
4c:48:e7:ce:0e:b1:1c:8c:a5:98:79:2d:67:81:28:
6e:69:7e:97:b1:99:11:66:83:57:15:55:b6:51:32:
0b:ee:87:15:33:d7:dd:02:68:6a:a4:be:81:57:9e:
35:43:f9:18:f6:77:ae:44:a6:70:1b:0d:de:1e:c4:
01:2f:25:08:46:13:ec:e4:64:ca:7d:51:00:34:4b:
cd:42:f0:80:60:c5:f5:51:91:8b:a4:a7:c0:cf:71:
15:ff:ed:9c:27:c5:b5:36:c6:3e:0f:65:68:20:9e:
f2:3b:21:97:0f:d6:ba:38:03:56:ce:1a:02:12:c3:
a0:2e:ca:57:94:cb:a4:4f:7e:0a:13:a3:77:ff:76:
21:91:0d:ef:b7:0d:bf:eb:54:2c:47:d8:32:02:7d:
ec:9b:1f:a3:51:e5:12:61:7a:09:d4:15:9a:cf:c2:
e8:9e:7e:18:0f:49:05:d8:dd:03:bd:3c:42:91:bb:
15:b0:83:07:ca:33:e5:c5:69:4e:39:bf:7b:cb:65:
38:4d:ae:fe:60:54:e7:0b:b6:99:c7:bf:09:49:20:
ce:d1:a8:42:09:4a:72:69:9f:46:7c:dd:36:f4:66:
f0:12:5e:16:05:9a:82:75:b4:04:cd:de:5d:1c:e0:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E4:47:3F:9A:07:3A:8D:E3:76:8E:21:CC:EE:87:00:A3:95:67:A4
X509v3 Authority Key Identifier:
keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230312e302f32342d3234203d3e203435303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.201.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b5:1c:0c:5e:72:2a:a5:e6:c7:22:83:89:91:92:f8:c1:86:
8d:96:8d:d4:38:aa:76:5f:9c:c7:7b:e4:fb:8c:e9:da:f5:7b:
aa:a5:16:6b:fa:d0:00:c6:a1:b5:c5:d5:a8:8b:aa:99:c7:ee:
5a:37:0a:6a:6f:bc:c6:42:d7:de:a7:cd:71:ab:8c:b9:07:5e:
d4:b3:18:94:f1:5f:75:ac:cb:34:c7:31:cd:78:9a:7c:eb:d7:
f0:ba:20:a3:2a:97:5d:8f:49:91:f3:be:53:89:37:aa:bd:55:
da:31:a9:c2:83:8b:68:68:f7:6e:35:a8:41:d0:51:3b:ac:fa:
b4:c3:dc:33:3f:9c:77:5f:e3:f0:c8:da:c5:63:4b:11:87:c9:
4d:a2:e0:c5:d7:3f:d6:f7:2d:10:3f:21:f0:5e:ae:38:37:e3:
17:1e:9b:ab:f7:78:59:35:97:02:9a:63:da:99:c8:69:00:d4:
38:3d:fe:6a:a8:e3:a9:4d:ba:7e:bb:3f:aa:11:e8:ae:ed:89:
bd:c6:c4:ab:f8:af:3b:dd:57:3f:ef:23:5d:6b:17:4b:81:24:
88:d1:8d:f0:c7:38:32:95:99:db:a7:29:07:b5:9c:4f:5e:f7:
71:f3:f7:98:16:08:7f:42:92:f1:8c:73:0c:ae:00:6b:8d:34:
06:0a:4b:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:48 2026 by rpki-client