
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e2034383038.roa
File: 3130332e3130372e3231362e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: mZuGRlkkXdQ2UpSifsGWjXmYGhfRgRPL0OpSZSfGINM=
Subject key identifier: EC:5E:96:0C:A7:5E:65:F4:EA:EE:80:98:F4:3F:D6:61:66:13:63:CF
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 66EE9717312B5BCFC21307CCD7400204762D79D9
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e2034383038.roa
Signing time: Mon 29 Jun 2026 07:53:28 +0000
ROA not before: Mon 29 Jun 2026 07:48:28 +0000
ROA not after: Mon 28 Jun 2027 07:53:28 +0000
asID: 4808
IP address blocks: 103.107.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ee:97:17:31:2b:5b:cf:c2:13:07:cc:d7:40:02:04:76:2d:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:48:28 2026 GMT
Not After : Jun 28 07:53:28 2027 GMT
Subject: CN=EC5E960CA75E65F4EAEE8098F43FD661661363CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:24:83:4a:e0:49:22:c2:09:8a:95:86:20:
8f:15:7b:24:1d:cb:41:55:7e:c7:f9:a7:cf:15:41:
61:25:72:c9:e2:af:1f:cd:96:4d:da:c9:6e:c0:0b:
e7:0f:c0:f3:b2:24:01:ac:0d:0c:b3:b2:de:c3:3a:
32:ce:f3:04:49:51:26:c4:46:1a:fe:31:49:fd:fc:
17:44:3b:c7:7d:eb:1e:ef:81:a0:53:34:c0:45:fe:
bb:dc:4a:c1:bb:d9:eb:4c:5d:5f:63:49:6c:04:3f:
d6:1e:c7:64:ac:e4:91:8e:52:ce:27:a0:8c:93:ec:
69:11:b9:5c:cf:19:66:b9:b6:b2:fc:91:16:af:2e:
fb:86:f7:99:84:22:88:c8:68:2a:0a:66:b5:dc:16:
58:cb:5a:a5:49:fd:21:57:b4:4f:fb:86:25:d6:3e:
19:98:85:5a:4e:e4:9d:53:4c:e7:e0:10:85:83:cc:
e2:c2:fe:c3:3f:d6:65:fc:90:49:2a:0b:bd:1d:2c:
79:43:fa:b7:11:54:fd:61:11:13:28:11:42:a9:e9:
5d:6f:89:97:4b:6d:e0:7f:40:3c:30:e9:f1:fe:93:
6f:80:fa:95:0a:1d:41:cf:0d:bc:4f:83:fd:0f:30:
93:e9:b6:70:d7:25:8e:5b:31:a2:4b:a5:f8:7e:a1:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:96:0C:A7:5E:65:F4:EA:EE:80:98:F4:3F:D6:61:66:13:63:CF
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.216.0/22
Signature Algorithm: sha256WithRSAEncryption
14:84:eb:2d:34:ea:5a:05:0b:52:a6:ed:25:50:c7:15:3f:ef:
11:7e:09:ea:57:7e:eb:0b:3e:b6:5b:11:4f:fe:48:67:c6:85:
98:4c:41:ff:12:7a:a8:e9:cd:dc:27:6b:33:12:b4:f6:d1:dc:
11:a2:3d:67:88:5e:dc:26:e7:f5:7f:6f:70:c6:8f:00:fe:eb:
90:97:68:54:2c:07:fb:95:12:b5:58:d0:89:ee:8d:bb:20:3f:
43:39:64:d2:07:83:9c:1b:49:17:ae:4d:9b:66:49:95:b7:bd:
e2:1d:e2:ac:a2:63:d5:35:6f:78:4e:82:98:a5:c6:a1:ca:28:
7f:07:44:97:ed:80:bf:bf:9d:b6:ec:f9:9c:69:9a:f3:31:dc:
ce:b1:be:c1:92:34:e6:95:29:37:1f:f1:fe:ee:c6:14:0e:30:
00:c9:c0:43:1d:a2:52:af:28:e1:26:3d:70:5c:21:24:f4:a0:
c5:b2:ea:2f:dc:74:f3:89:93:b7:ad:03:e0:09:02:43:af:9f:
7c:ee:d0:6f:b9:48:41:40:91:88:1e:b8:d9:78:37:e9:01:0d:
d2:fb:49:de:1f:6b:57:e0:da:1f:0e:90:7e:ea:7b:f3:d4:6f:
8e:8f:51:e2:7b:78:ea:8a:c4:4d:a8:ed:4d:67:40:b8:cd:d7:
30:1d:38:62
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZu6XFzErW8/CEwfM10ACBHYtedkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzQ4MjhaFw0yNzA2MjgwNzUzMjhaMDMxMTAvBgNV
BAMTKEVDNUU5NjBDQTc1RTY1RjRFQUVFODA5OEY0M0ZENjYxNjYxMzYzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCySDSuBJIsIJipWGII8VeyQd
y0FVfsf5p88VQWElcsnirx/Nlk3ayW7AC+cPwPOyJAGsDQyzst7DOjLO8wRJUSbE
Rhr+MUn9/BdEO8d96x7vgaBTNMBF/rvcSsG72etMXV9jSWwEP9Yex2Ss5JGOUs4n
oIyT7GkRuVzPGWa5trL8kRavLvuG95mEIojIaCoKZrXcFljLWqVJ/SFXtE/7hiXW
PhmYhVpO5J1TTOfgEIWDzOLC/sM/1mX8kEkqC70dLHlD+rcRVP1hERMoEUKp6V1v
iZdLbeB/QDww6fH+k2+A+pUKHUHPDbxPg/0PMJPptnDXJY5bMaJLpfh+oewlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU7F6WDKdeZfTq7oCY9D/WYWYTY88wHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMzg4MTUyMjkwNzA1NDExNy8wLzMxMzAzMzJlMzEz
MDM3MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdr2DANBgkqhkiG9w0BAQsFAAOCAQEAFITrLTTqWgULUqbtJVDHFT/v
EX4J6ld+6ws+tlsRT/5IZ8aFmExB/xJ6qOnN3CdrMxK09tHcEaI9Z4he3Cbn9X9v
cMaPAP7rkJdoVCwH+5UStVjQie6NuyA/Qzlk0geDnBtJF65Nm2ZJlbe94h3irKJj
1TVveE6CmKXGocoofwdEl+2Av7+dtuz5nGma8zHczrG+wZI05pUpNx/x/u7GFA4w
AMnAQx2iUq8o4SY9cFwhJPSgxbLqL9x084mTt60D4AkCQ6+ffO7Qb7lIQUCRiB64
2Xg36QEN0vtJ3h9rV+DaHw6Qfup789Rvjo9R4nt46orETajtTWdAuM3XMB04Yg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:30 2026 by rpki-client