
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa
File: 3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier: whKryuyKvVfY0D7VNqxQes3rik3TM2UCirZ0eh1Xo34=
Subject key identifier: CD:F7:E3:4A:DB:47:89:BE:46:53:A9:3B:B4:EB:0D:08:74:58:38:0F
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 5E0BDD058C54CC6DB8330FA48DC53D1FC7E129B3
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa
Signing time: Mon 28 Sep 2026 01:00:41 +0000
ROA not before: Mon 28 Sep 2026 00:55:41 +0000
ROA not after: Mon 27 Sep 2027 01:00:41 +0000
asID: 23650
IP address blocks: 103.239.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 22:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:0b:dd:05:8c:54:cc:6d:b8:33:0f:a4:8d:c5:3d:1f:c7:e1:29:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:41 2026 GMT
Not After : Sep 27 01:00:41 2027 GMT
Subject: CN=CDF7E34ADB4789BE4653A93BB4EB0D087458380F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:24:95:72:be:24:d6:61:e7:4c:27:4c:40:
a9:ea:a2:8a:6c:10:77:14:2f:38:36:c3:e9:a8:f6:
85:09:56:8a:ca:09:f6:80:18:f7:7d:81:ea:3d:3e:
d5:8c:23:61:05:40:47:e5:39:fe:77:f5:b3:7e:70:
96:93:5c:3e:d6:c2:e0:12:61:34:c3:e7:b2:60:2c:
bc:42:00:7e:55:35:23:5b:69:89:63:cb:49:45:d9:
7e:cf:c1:5a:59:4e:c8:22:77:e5:84:88:53:9b:d6:
ba:ee:a0:e9:12:d5:94:6c:33:38:65:05:30:69:91:
6b:9c:2b:30:db:e0:a9:92:c6:a5:b3:ca:15:eb:16:
44:10:80:0a:48:96:e5:6b:f9:85:71:29:f3:28:1e:
b5:08:73:f4:c8:07:4b:38:b3:21:fa:e1:ea:ae:45:
8d:a3:f5:df:0f:51:11:6a:5a:61:dd:b8:f5:7a:76:
5c:11:1f:c3:df:d6:84:e3:cb:e8:db:8e:83:0a:24:
ec:f7:43:fc:b6:43:4b:63:57:64:b6:74:d0:a1:45:
63:fc:16:e8:b3:7e:d6:09:2e:70:6d:da:50:ec:5a:
25:32:18:d4:35:b3:ff:5f:36:82:dc:4c:ec:c8:70:
86:96:fa:01:1b:02:f3:4f:a7:bb:5d:48:ee:94:8d:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:E3:4A:DB:47:89:BE:46:53:A9:3B:B4:EB:0D:08:74:58:38:0F
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.244.0/22
Signature Algorithm: sha256WithRSAEncryption
77:7a:42:43:a4:8a:e7:fc:2c:b9:ff:de:4b:78:0e:96:68:75:
a3:cf:1a:e7:0c:03:b7:02:da:81:ef:2b:3c:04:9f:a4:7d:53:
d2:99:db:dc:15:1e:9e:c6:10:44:15:64:96:f3:a6:2d:4e:cb:
e4:e9:d4:09:22:58:1a:b8:37:2d:3b:97:44:69:a2:3a:92:d4:
1b:86:69:ff:c2:49:90:e6:37:0a:a0:b0:8d:61:2c:ad:0d:01:
7d:82:27:55:19:a1:bc:2d:1d:6c:85:3b:84:cb:7c:3c:40:ed:
99:9b:e7:df:95:bd:73:14:60:ee:45:16:f0:ea:ac:57:40:2a:
37:b8:9d:0d:a7:73:ef:52:1d:b3:7d:3a:a5:76:90:53:db:88:
29:f3:d1:ca:82:80:d4:e6:fe:98:ed:05:d4:b4:66:12:bf:74:
99:c2:ad:73:f5:b6:24:4c:1c:e2:35:62:85:90:f6:2a:d3:b4:
89:56:22:89:0d:cf:40:73:18:94:e9:aa:05:b4:9b:51:c3:ac:
7e:a0:19:3e:55:ba:54:ea:26:44:29:20:20:68:ff:cf:19:b8:
9c:ac:dc:e2:ee:79:12:af:b5:f0:ec:88:7c:48:40:b8:f7:5a:
9b:bf:8c:cf:98:2b:02:80:41:58:1f:2c:b3:27:3b:23:b3:75:
41:80:94:cc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXgvdBYxUzG24Mw+kjcU9H8fhKbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV
BAMTKENERjdFMzRBREI0Nzg5QkU0NjUzQTkzQkI0RUIwRDA4NzQ1ODM4MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xSSVcr4k1mHnTCdMQKnqoops
EHcULzg2w+mo9oUJVorKCfaAGPd9geo9PtWMI2EFQEflOf539bN+cJaTXD7WwuAS
YTTD57JgLLxCAH5VNSNbaYljy0lF2X7PwVpZTsgid+WEiFOb1rruoOkS1ZRsMzhl
BTBpkWucKzDb4KmSxqWzyhXrFkQQgApIluVr+YVxKfMoHrUIc/TIB0s4syH64equ
RY2j9d8PURFqWmHduPV6dlwRH8Pf1oTjy+jbjoMKJOz3Q/y2Q0tjV2S2dNChRWP8
FuizftYJLnBt2lDsWiUyGNQ1s/9fNoLcTOzIcIaW+gEbAvNPp7tdSO6UjWBFAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUzffjSttHib5GU6k7tOsNCHRYOA8wHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC8zMTMwMzMyZTMy
MzMzOTJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfv9DANBgkqhkiG9w0BAQsFAAOCAQEAd3pCQ6SK5/wsuf/eS3gO
lmh1o88a5wwDtwLage8rPASfpH1T0pnb3BUensYQRBVklvOmLU7L5OnUCSJYGrg3
LTuXRGmiOpLUG4Zp/8JJkOY3CqCwjWEsrQ0BfYInVRmhvC0dbIU7hMt8PEDtmZvn
35W9cxRg7kUW8OqsV0AqN7idDadz71Ids306pXaQU9uIKfPRyoKA1Ob+mO0F1LRm
Er90mcKtc/W2JEwc4jVihZD2KtO0iVYiiQ3PQHMYlOmqBbSbUcOsfqAZPlW6VOom
RCkgIGj/zxm4nKzc4u55Eq+18OyIfEhAuPdam7+Mz5grAoBBWB8ssyc7I7N1QYCU
zA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:22:24 2026 by rpki-client