
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133362e302f32342d3234203d3e203539303634.roa
File: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (raw, json)
Hash identifier: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=
Subject key identifier: 8C:8F:AE:FF:59:C0:72:46:14:10:3C:3B:E0:05:D4:97:71:C6:DD:18
Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Certificate serial: 64BDE936469049969685AA163387989E9B24DD49
Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133362e302f32342d3234203d3e203539303634.roa
Signing time: Tue 02 Jun 2026 07:36:57 +0000
ROA not before: Tue 02 Jun 2026 07:31:57 +0000
ROA not after: Tue 01 Jun 2027 07:36:57 +0000
asID: 59064
IP address blocks: 103.57.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bd:e9:36:46:90:49:96:96:85:aa:16:33:87:98:9e:9b:24:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Validity
Not Before: Jun 2 07:31:57 2026 GMT
Not After : Jun 1 07:36:57 2027 GMT
Subject: CN=8C8FAEFF59C0724614103C3BE005D49771C6DD18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:9b:89:57:ff:93:52:cd:eb:89:22:70:4e:
6e:00:51:c6:cc:0f:db:ff:a1:69:b6:a5:96:a8:01:
f5:a7:87:79:2e:d4:da:69:ca:14:c4:66:5c:ed:80:
79:8f:88:10:97:5d:db:bf:29:e4:1a:68:3f:79:a9:
b6:34:5d:7a:98:b4:e9:c4:99:bc:4c:77:cd:e5:b6:
82:14:d8:8a:ba:9e:b2:d0:ea:18:97:f8:61:7b:14:
23:a3:01:e2:c6:52:46:95:53:56:bd:8c:d1:44:88:
7a:22:29:cb:a6:4e:fc:a6:2d:06:52:b3:09:3f:fa:
2c:bb:a9:56:4e:46:7e:8d:bf:51:33:7f:db:aa:f3:
d8:81:6e:45:1f:61:fd:26:e9:24:b3:4b:b4:ca:b1:
ff:07:2f:34:aa:ec:9a:53:1e:8b:c4:74:23:86:6a:
d0:a3:79:59:91:9f:84:78:74:bb:f1:af:d0:2c:20:
46:6c:79:dd:68:1f:4d:b9:c6:d2:54:32:a7:c7:94:
c9:10:d9:03:9e:2a:92:bb:1f:c1:29:01:a3:8b:33:
8e:d6:ba:28:ce:af:22:cf:9c:5b:b4:2b:e9:29:87:
38:60:d9:b5:4d:23:00:97:9e:b7:ba:5c:36:eb:85:
d6:f1:6a:9d:b4:68:d3:f6:24:b3:be:af:29:bf:f1:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:AE:FF:59:C0:72:46:14:10:3C:3B:E0:05:D4:97:71:C6:DD:18
X509v3 Authority Key Identifier:
keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133362e302f32342d3234203d3e203539303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b9:78:a8:26:e3:d6:95:18:21:a7:94:04:8f:e8:ea:e9:86:
90:7a:7a:6b:81:fa:25:aa:e5:63:a9:17:c3:d7:8b:d8:06:29:
d5:b9:19:62:2c:ef:dd:55:a0:4e:dc:c9:a2:d8:24:fa:b5:6c:
ba:e3:bd:89:6b:fd:e2:b3:25:37:99:fc:14:4c:10:2d:09:23:
df:9c:6b:a9:f1:5b:bc:1c:a4:97:1c:cd:db:98:bb:f8:79:25:
2b:51:68:25:8b:b5:1b:fc:e9:93:13:a6:dc:da:4f:d9:e3:29:
13:92:73:f0:2c:0f:f0:a1:7a:70:e3:84:a4:1d:ea:a8:82:f7:
e8:ce:63:bd:f7:33:c3:63:f7:96:36:22:fd:44:fd:a3:cb:8f:
00:86:2e:b4:4c:2f:4d:a9:c0:99:2b:b9:6e:21:8c:d4:22:18:
d7:88:d0:9d:fa:b9:8e:15:e3:3a:7f:df:eb:f9:25:d1:8b:e4:
5c:5e:f9:39:62:77:42:a7:d8:48:ac:83:af:24:26:5b:3a:d4:
d1:9d:59:07:5a:15:8e:aa:8e:79:ea:a8:15:e3:d5:f4:ce:e6:
b7:85:ac:3f:f7:00:ae:cc:c5:3c:b8:54:55:97:ee:7c:40:2b:
1f:3f:cc:e7:c3:b6:63:25:37:3f:06:af:5d:9f:f3:00:b4:9f:
e7:ac:78:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:51 2026 by rpki-client