
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa
File: 3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: oDXOfCVz+hHMhaR8JycxlV15rTQeCFUqT+RJOIEZNbQ=
Subject key identifier: 34:58:EE:A7:58:6D:F3:71:16:96:8A:D1:A1:EC:46:08:D1:20:0D:A4
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 312864F9C10D220D71260BF4F2B4E3817FB2D85B
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa
Signing time: Mon 28 Sep 2026 01:00:40 +0000
ROA not before: Mon 28 Sep 2026 00:55:40 +0000
ROA not after: Mon 27 Sep 2027 01:00:40 +0000
asID: 4837
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:28:64:f9:c1:0d:22:0d:71:26:0b:f4:f2:b4:e3:81:7f:b2:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:40 2026 GMT
Not After : Sep 27 01:00:40 2027 GMT
Subject: CN=3458EEA7586DF37116968AD1A1EC4608D1200DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:bc:05:cc:7a:32:17:af:d5:16:de:d9:d4:
e1:f3:a3:b1:a5:70:33:10:7c:2a:86:5f:b0:a1:ad:
f7:e1:c5:7a:4e:21:84:93:27:cc:83:bf:52:92:00:
0b:86:0d:d7:0e:4a:5c:80:27:92:9c:c6:ba:dc:c5:
db:b9:8f:1d:9d:01:0e:8a:11:5b:e8:57:09:e1:02:
0b:02:14:ca:7f:26:49:e6:6e:91:dc:63:59:5f:20:
49:73:9e:e0:e1:b4:ea:31:b5:fb:9b:cc:7d:d7:9a:
f6:78:a7:89:63:99:59:2d:1b:60:a7:a1:c3:04:5e:
d7:b7:71:e0:7f:60:29:c5:7c:f6:2b:03:f5:9b:5d:
2c:56:fd:06:80:ab:0f:ef:ac:ec:77:87:ec:54:bb:
2e:4a:fe:93:5c:fa:46:06:df:46:bc:d8:a3:71:6e:
83:a3:65:5a:11:1d:9f:f0:e9:e6:9c:f0:66:ad:0d:
35:90:0d:fc:9d:1d:a1:0a:bb:b3:75:55:6a:64:47:
8a:4b:46:19:b6:57:1a:a2:7f:d1:97:51:2b:1e:d1:
86:59:82:99:69:b8:4b:c2:c8:cc:7e:76:b8:3f:41:
61:6b:de:fe:4a:ae:e2:03:59:fa:7e:58:88:d8:9e:
9b:8a:77:1b:fd:d1:81:db:c6:e6:63:c8:e6:73:59:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:EE:A7:58:6D:F3:71:16:96:8A:D1:A1:EC:46:08:D1:20:0D:A4
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
75:17:b2:8c:98:76:30:9b:d6:fb:08:3d:3d:92:60:77:2f:b7:
6f:94:54:1a:4f:a9:63:4b:b9:09:3e:c2:f4:cb:30:1c:97:4c:
86:6b:06:02:05:1f:83:a1:32:bc:cb:7c:23:71:b2:f1:8e:b9:
cf:ec:e3:56:6d:b0:fc:5c:1c:d7:21:c1:7f:6f:d8:8c:68:b8:
3e:c8:a9:6f:16:c8:c9:c6:fa:0f:11:fb:e2:1b:73:bd:29:b9:
2f:bc:12:5d:ea:93:67:83:ea:93:ed:0e:e4:23:e7:fc:97:34:
fc:5d:08:91:9c:77:96:fd:70:9c:bb:cd:61:e1:e2:6f:57:b2:
47:c9:a7:fc:1c:fa:43:41:a5:a7:1d:f7:8e:47:e4:65:01:1f:
77:33:ef:ab:ed:4c:86:9e:ad:be:b2:8f:3d:77:f0:b3:ea:80:
20:79:03:93:64:7a:cf:a6:78:a3:19:b4:da:4e:2a:4b:02:e5:
7e:93:bf:d5:4f:1a:4b:cb:bc:51:3b:c2:89:f7:18:d2:fc:19:
2f:ca:64:37:76:d5:3b:5b:5a:0f:3f:3a:a2:e8:73:7d:fd:53:
8d:63:5f:a6:f4:c9:43:09:39:57:ad:8e:fb:75:1f:01:ef:b6:
8c:8d:14:9a:ef:e0:6e:a1:db:78:02:7e:92:f7:95:35:4d:da:
d2:fb:18:b2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMShk+cENIg1xJgv08rTjgX+y2FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDBaFw0yNzA5MjcwMTAwNDBaMDMxMTAvBgNV
BAMTKDM0NThFRUE3NTg2REYzNzExNjk2OEFEMUExRUM0NjA4RDEyMDBEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTbwFzHoyF6/VFt7Z1OHzo7Gl
cDMQfCqGX7ChrffhxXpOIYSTJ8yDv1KSAAuGDdcOSlyAJ5Kcxrrcxdu5jx2dAQ6K
EVvoVwnhAgsCFMp/JknmbpHcY1lfIElznuDhtOoxtfubzH3XmvZ4p4ljmVktG2Cn
ocMEXte3ceB/YCnFfPYrA/WbXSxW/QaAqw/vrOx3h+xUuy5K/pNc+kYG30a82KNx
boOjZVoRHZ/w6eac8GatDTWQDfydHaEKu7N1VWpkR4pLRhm2Vxqif9GXUSse0YZZ
gplpuEvCyMx+drg/QWFr3v5KruIDWfp+WIjYnpuKdxv90YHbxuZjyOZzWUrFAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUNFjup1ht83EWlorRoexGCNEgDaQwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzAzMzJlMzIz
MDM1MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfN/DANBgkqhkiG9w0BAQsFAAOCAQEAdReyjJh2MJvW+wg9PZJgdy+3
b5RUGk+pY0u5CT7C9MswHJdMhmsGAgUfg6EyvMt8I3Gy8Y65z+zjVm2w/Fwc1yHB
f2/YjGi4PsipbxbIycb6DxH74htzvSm5L7wSXeqTZ4Pqk+0O5CPn/Jc0/F0IkZx3
lv1wnLvNYeHib1eyR8mn/Bz6Q0Glpx33jkfkZQEfdzPvq+1Mhp6tvrKPPXfws+qA
IHkDk2R6z6Z4oxm02k4qSwLlfpO/1U8aS8u8UTvCifcY0vwZL8pkN3bVO1taDz86
ouhzff1TjWNfpvTJQwk5V62O+3UfAe+2jI0Umu/gbqHbeAJ+kveVNU3a0vsYsg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:58:06 2026 by rpki-client