
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37362e3232322e302f32332d3233203d3e2034383038.roa
File: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=
Subject key identifier: C7:66:68:0F:34:F3:C9:B9:50:30:6A:DE:97:5D:FC:BA:21:EA:2B:86
Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial: 6329CC870CF3C5451DD7C6F9928D2AEB858D8C37
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37362e3232322e302f32332d3233203d3e2034383038.roa
Signing time: Mon 15 Jun 2026 06:52:23 +0000
ROA not before: Mon 15 Jun 2026 06:47:23 +0000
ROA not after: Mon 14 Jun 2027 06:52:23 +0000
asID: 4808
IP address blocks: 103.76.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:29:cc:87:0c:f3:c5:45:1d:d7:c6:f9:92:8d:2a:eb:85:8d:8c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Validity
Not Before: Jun 15 06:47:23 2026 GMT
Not After : Jun 14 06:52:23 2027 GMT
Subject: CN=C766680F34F3C9B950306ADE975DFCBA21EA2B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:ad:c6:44:6a:4a:2f:03:f3:23:5f:97:2b:
05:12:c9:5d:34:6a:1c:af:b2:53:89:62:44:35:10:
5e:2c:d3:1f:dc:70:2a:d5:23:1d:94:64:43:5b:9c:
94:b6:ea:da:2d:e3:2e:04:e8:d0:5b:f6:eb:44:c3:
e7:fc:4c:39:36:54:c2:60:c3:43:0b:c7:ba:d1:e8:
ae:b1:19:e2:60:df:a5:c0:5e:2c:4a:d5:06:01:1a:
08:ae:cf:41:60:d1:2d:f9:6e:d3:b1:2a:dc:9a:99:
3e:60:ae:21:fa:69:fa:68:5e:03:4e:83:8b:37:49:
2f:98:1e:eb:c7:4b:74:8e:f4:0c:b0:82:15:38:b9:
81:9b:b1:48:ee:b8:0f:c7:df:d2:da:c7:16:a7:39:
d1:34:c0:74:3b:75:ac:49:27:f8:3c:84:34:ca:dc:
75:2e:44:ee:49:be:a1:c2:45:92:15:14:eb:42:97:
23:60:24:b7:63:96:e2:e7:32:9d:db:20:08:a4:74:
41:ab:32:35:35:22:22:9e:e8:1c:ef:c9:b4:c5:ac:
97:3c:b9:9b:85:5c:0d:fe:35:97:09:08:ae:5c:73:
cb:3e:9e:4b:87:eb:89:4e:cf:14:74:be:ee:6a:0a:
94:8b:4d:78:cd:ae:15:cf:09:55:68:20:f3:0f:3a:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:66:68:0F:34:F3:C9:B9:50:30:6A:DE:97:5D:FC:BA:21:EA:2B:86
X509v3 Authority Key Identifier:
keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37362e3232322e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.222.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:1a:4d:11:65:c6:c1:7e:13:9c:c5:d0:11:a5:c8:4f:5b:18:
cb:6c:c3:fa:05:31:67:38:5d:d2:bc:06:d5:e7:8e:32:61:6a:
64:68:a6:d5:92:d8:9e:e7:e2:8f:0c:ae:95:5e:32:42:05:f1:
12:34:ae:39:fb:57:5d:e8:18:08:0e:bf:00:49:79:2a:e6:ef:
15:9b:5c:85:be:82:6a:36:76:43:1a:5a:80:c1:10:c7:ba:48:
77:67:d7:c1:9f:1a:0a:81:7d:08:7d:42:4e:be:18:77:fb:5f:
08:25:41:4e:7c:53:8a:68:64:07:c1:42:b8:e7:45:7e:f1:c1:
74:3f:33:a5:40:fd:08:88:aa:4e:5d:81:4a:82:c8:e3:18:c0:
31:36:89:d4:b1:40:ee:68:97:ec:ad:f8:97:14:a1:14:a6:88:
41:7f:6c:17:e3:4c:2b:44:67:22:ee:b4:0e:64:e2:48:4c:24:
14:a2:07:2c:78:7f:e0:7c:3b:47:4a:67:54:2c:fd:89:90:a8:
24:ff:83:d0:4a:a6:3f:42:1e:fa:0c:1a:f6:3c:cc:d2:33:4d:
2d:d9:a2:7f:58:00:9d:37:3b:f3:91:f8:c5:cf:c5:56:7c:aa:
44:f0:04:97:2f:f3:eb:f5:56:c7:ec:82:a9:5a:fc:92:5c:c5:
3a:3f:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 18:14:44 2026 by rpki-client