
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa
File: 3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa (raw, json)
Hash identifier: alaniBa6bbZmc+gGIynjeiPDfQMhD7b92Y7CzxBYnts=
Subject key identifier: F0:46:BB:C2:12:82:20:3B:F1:A7:B2:9C:F0:07:97:44:59:82:15:04
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 64E0245434EA63C883D43BC1E17F47446B2102B9
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa
Signing time: Mon 28 Sep 2026 01:00:38 +0000
ROA not before: Mon 28 Sep 2026 00:55:38 +0000
ROA not after: Mon 27 Sep 2027 01:00:38 +0000
asID: 4837
IP address blocks: 103.239.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 07:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e0:24:54:34:ea:63:c8:83:d4:3b:c1:e1:7f:47:44:6b:21:02:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:38 2026 GMT
Not After : Sep 27 01:00:38 2027 GMT
Subject: CN=F046BBC21282203BF1A7B29CF007974459821504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:d5:35:4e:2e:2d:66:64:06:6d:a6:5f:ec:
bc:d1:97:5c:68:40:5f:4a:90:17:e7:17:68:43:61:
c9:dd:a9:80:eb:cd:d6:7b:1d:35:13:69:76:be:a7:
a7:b8:80:b8:39:51:b0:af:da:71:14:2b:12:c8:3d:
eb:f0:34:03:c2:6c:f8:15:1c:fd:1e:cc:b9:27:ab:
b3:f8:89:13:ed:c5:07:6d:4f:25:d5:96:8f:37:ca:
25:7f:62:cd:1c:1e:79:f2:6a:16:d1:15:a4:0a:8b:
f0:36:9a:be:8f:60:be:80:ac:fc:e3:c9:e0:c1:3b:
1d:8a:00:9a:ea:f9:99:f5:52:2d:cc:8a:87:a2:41:
17:0d:59:41:92:63:25:5d:f0:cd:68:f8:5a:ca:5b:
4e:cb:4d:5c:8f:c7:98:c1:59:95:c5:05:39:ec:ff:
1c:bb:de:53:42:6a:e4:8a:46:88:95:2f:ae:97:4f:
be:d5:8a:5b:7c:3b:96:3e:b6:03:07:18:6a:2d:57:
7a:e0:43:97:5b:28:b0:5a:60:95:1a:49:f7:13:23:
05:ed:03:d5:d2:f0:4b:66:73:58:d4:bd:33:bd:ee:
fa:41:8f:e8:7b:e3:bb:e5:85:90:57:b2:ac:50:69:
fa:19:2a:35:86:47:ec:d8:80:fd:25:79:a7:05:dd:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:46:BB:C2:12:82:20:3B:F1:A7:B2:9C:F0:07:97:44:59:82:15:04
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:d4:d1:b1:b9:e4:51:ea:fb:36:1f:e0:df:4d:52:a5:52:ab:
fb:d0:a4:cd:9c:1a:a6:27:85:0e:68:33:26:f7:ac:47:53:4a:
3c:77:c4:c3:4a:b3:e0:67:3c:e6:50:a8:e5:dd:b1:f4:ae:94:
86:8c:2f:52:5e:b9:c6:3a:5e:ad:29:99:df:bc:ed:6e:8f:7f:
51:83:d8:eb:45:ef:2b:23:16:a0:e1:b3:63:81:45:7c:4c:ab:
c8:b5:e7:09:61:ec:6e:b5:ed:00:ca:e0:19:c0:79:27:29:7c:
df:0e:0d:22:59:0a:bf:b8:49:97:77:cf:bc:2b:30:34:14:57:
9c:04:c3:b4:9c:a2:cf:ac:bb:05:2b:4d:aa:c0:aa:50:e1:5e:
af:39:1b:a3:15:f3:85:e7:17:db:93:89:d4:84:63:bc:9e:0c:
32:bc:61:3a:76:36:b8:03:d4:5c:b5:19:4b:e7:7e:a9:b6:be:
0e:5b:e0:90:ab:04:63:35:b2:79:70:18:93:7d:77:3f:ee:5d:
0b:c2:88:9e:d0:15:a0:09:bd:49:df:f5:2b:56:4f:45:db:1e:
cb:f1:fd:a4:08:08:dc:7f:c5:81:5f:fe:30:f7:d5:a2:e5:79:
88:77:91:74:b9:e8:9c:9f:fd:d7:ac:33:83:36:3f:71:29:24:
3a:85:7f:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:30:56 2026 by rpki-client