
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3130332e3235312e38342e302f32322d3232203d3e203435303631.roa
File: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (raw, json)
Hash identifier: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=
Subject key identifier: 33:35:9C:A4:9B:17:CD:E2:FE:9C:04:9F:5D:E3:27:CC:84:6A:94:56
Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial: 15349847BDF6DFF9EFF1645620B93DCB484E7A6C
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3130332e3235312e38342e302f32322d3232203d3e203435303631.roa
Signing time: Sat 09 May 2026 11:55:55 +0000
ROA not before: Sat 09 May 2026 11:50:55 +0000
ROA not after: Sat 08 May 2027 11:55:55 +0000
asID: 45061
IP address blocks: 103.251.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:34:98:47:bd:f6:df:f9:ef:f1:64:56:20:b9:3d:cb:48:4e:7a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Validity
Not Before: May 9 11:50:55 2026 GMT
Not After : May 8 11:55:55 2027 GMT
Subject: CN=33359CA49B17CDE2FE9C049F5DE327CC846A9456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:3d:91:f7:30:6c:e8:ac:ab:53:fb:92:28:
fc:05:51:f3:22:50:63:6b:b7:25:98:22:6f:9d:d7:
c9:35:15:74:4d:c2:5e:ef:9a:5e:22:93:f6:d1:7f:
52:ae:ce:19:8f:81:ac:ba:d7:6e:75:e5:9b:88:77:
27:18:3d:5a:05:5e:77:7f:1e:1d:cd:07:09:96:e7:
15:ba:57:35:5d:0d:43:b2:e9:34:fb:70:53:18:58:
73:c1:0d:ac:7a:7e:0c:60:1a:f5:27:b2:e6:83:ca:
96:29:cd:8c:fe:5e:7c:1b:93:63:64:0b:d8:4e:a0:
45:10:44:c0:f8:7b:88:cc:06:55:bf:fc:02:57:ff:
c8:cc:bd:82:e3:0f:03:45:32:ea:8b:04:80:0e:df:
a4:3b:de:43:6c:92:bb:e8:c9:bf:09:53:2a:a2:c8:
e0:c4:d8:b5:6a:67:af:2d:4f:44:48:dd:4d:5c:4d:
d6:49:6a:ee:fe:4a:2d:26:63:5f:9b:a7:f8:17:32:
1e:83:a2:df:78:b0:79:b3:60:ba:32:52:af:75:e1:
97:4c:8b:47:31:f1:bf:0a:b0:30:d3:9b:cf:cc:1c:
ad:60:7b:1e:63:b7:17:aa:db:99:ab:8d:4d:49:3b:
6e:2d:01:5b:11:b7:30:cc:ec:d1:5f:f3:48:c9:7b:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:9C:A4:9B:17:CD:E2:FE:9C:04:9F:5D:E3:27:CC:84:6A:94:56
X509v3 Authority Key Identifier:
keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3130332e3235312e38342e302f32322d3232203d3e203435303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:25:5c:a8:7d:ae:2e:f2:2a:4f:9a:cf:8d:ec:f0:72:6e:b4:
a4:b7:83:ff:34:7b:1f:d1:8c:94:4c:3b:2f:ec:11:92:07:6f:
68:c7:b6:ae:52:be:a6:e6:45:61:ad:5b:82:2b:98:bb:4d:21:
83:bd:97:72:fa:bd:27:f6:d0:04:39:3b:6b:71:be:79:4d:8e:
27:5f:9e:f8:99:46:cb:3c:51:d6:93:50:ed:0f:ae:62:50:d3:
35:63:09:1a:dc:09:72:fc:2b:dc:22:f9:78:33:2e:44:53:18:
2c:50:5d:ae:22:66:31:1f:f6:6c:14:50:1b:70:03:e7:7b:24:
93:5e:50:af:02:dc:d1:11:f8:e3:32:1d:e4:c8:4f:f8:26:ae:
36:6f:41:5c:f8:83:07:77:e9:6e:46:23:c0:02:59:3b:3b:c3:
aa:fe:b4:89:35:c1:e3:37:9b:01:eb:c4:53:98:e0:4d:f6:e4:
76:70:c6:77:d4:d6:03:b3:27:b8:c5:2e:87:2c:2c:ec:14:0e:
c5:46:3e:69:f1:63:b5:a6:e5:4f:2d:b6:31:b4:93:cc:da:83:
36:72:9e:e6:56:67:c2:c4:f2:d7:c3:e6:0f:bc:c5:23:78:da:
e3:34:79:89:c1:0b:b5:1f:b6:bd:5f:2b:8f:bd:82:e8:cf:ec:
1d:c8:32:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:27 2026 by rpki-client