
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37382e302f32342d3234203d3e20313336393538.roa
File: 3130332e35362e37382e302f32342d3234203d3e20313336393538.roa (raw, json)
Hash identifier: 9rgzsazn7f5Bz9xEgTtbRZgJjJ5wzd/wEQjNIajNz4I=
Subject key identifier: 0C:7B:09:28:15:47:F7:2A:7F:68:E6:41:0C:1B:C6:26:9C:EE:86:7B
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 2593B11AFA6D7D3AABE4C892F0A036BF068C9EBC
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37382e302f32342d3234203d3e20313336393538.roa
Signing time: Sat 09 May 2026 01:49:46 +0000
ROA not before: Sat 09 May 2026 01:44:46 +0000
ROA not after: Sat 08 May 2027 01:49:46 +0000
asID: 136958
IP address blocks: 103.56.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:93:b1:1a:fa:6d:7d:3a:ab:e4:c8:92:f0:a0:36:bf:06:8c:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: May 9 01:44:46 2026 GMT
Not After : May 8 01:49:46 2027 GMT
Subject: CN=0C7B09281547F72A7F68E6410C1BC6269CEE867B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:31:7a:4a:9c:f1:ae:e4:5e:30:d7:98:72:
ec:bf:6c:0d:88:78:99:49:98:70:a9:6b:e9:05:49:
fd:6f:ad:2f:53:18:66:22:cd:a1:16:b7:5f:58:1d:
2a:cf:a3:94:5e:23:fa:d5:70:9d:a7:57:2d:77:8f:
e8:4f:9d:f8:13:78:41:6b:c6:57:87:8d:50:0a:fc:
6c:e3:b2:53:39:14:23:ed:e3:5b:c0:d1:74:2e:92:
0f:50:d6:67:71:84:bb:08:31:41:24:04:3e:cf:f5:
43:ae:71:02:3f:ff:a4:b5:92:81:fc:f8:cb:17:78:
c6:9b:4b:f7:ec:82:6c:5a:6c:3d:f5:3d:63:60:35:
99:14:44:9f:a6:53:7c:70:9b:cb:f6:43:56:43:f5:
f0:b3:72:f8:20:d7:c3:8d:59:d7:bf:b5:6d:c2:9e:
58:33:30:84:a5:5f:3d:94:e2:77:16:8d:9f:44:dd:
55:f7:9e:fe:30:c6:40:24:f5:ba:9e:05:00:5c:5c:
73:4f:be:cb:7a:84:a8:dc:5c:37:bf:88:c1:ad:eb:
f6:2f:a7:a8:91:4f:8f:1c:8a:66:b8:44:5c:10:04:
23:05:e4:43:68:51:ef:02:ea:31:eb:4f:35:45:52:
3f:a5:ef:79:d0:0c:33:51:ef:16:81:86:61:1b:8e:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:09:28:15:47:F7:2A:7F:68:E6:41:0C:1B:C6:26:9C:EE:86:7B
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37382e302f32342d3234203d3e20313336393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.78.0/24
Signature Algorithm: sha256WithRSAEncryption
45:30:69:89:c0:28:96:d0:ec:ea:29:a9:43:6f:94:b5:6d:69:
a3:39:e1:8d:99:dd:eb:5d:45:1b:98:8c:5a:de:96:db:20:8d:
ca:ac:c7:d3:f5:22:73:b1:cf:9f:26:3a:42:1f:b3:c9:8a:28:
a7:38:a9:35:12:6d:49:41:20:c8:17:c4:14:47:2f:18:31:44:
53:8c:f4:b7:d2:da:ae:2e:4c:9b:2f:e9:c0:3c:8f:93:98:03:
15:4a:c1:0a:23:8d:c6:5a:b9:16:7d:c4:42:3a:70:5a:7f:90:
48:40:bd:3a:91:ea:42:7f:2d:54:d2:e2:36:84:28:9f:31:58:
1f:ff:dc:6c:83:96:10:de:f0:63:95:2c:5c:98:cc:5e:5f:65:
5a:be:11:b8:d4:fe:7b:e3:12:c9:e3:32:6b:a2:d6:6f:51:4f:
c1:9c:1a:d2:e5:d1:30:84:4b:c2:a1:cc:26:73:4f:12:72:e3:
6c:03:84:e5:42:e4:64:8b:6c:d2:1d:58:90:4a:98:df:95:99:
10:4c:fe:1a:74:19:09:0f:3d:29:20:22:14:13:f0:00:6f:13:
11:65:d7:3e:52:1c:d9:36:89:48:d6:29:25:e7:60:78:b0:c1:
45:73:a1:93:11:a7:9f:49:0f:01:8b:a2:7c:4e:4e:ce:00:1a:
e0:5e:86:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:03:41 2026 by rpki-client