
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034313334.roa
File: 3130332e33372e34342e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: g0cozIvrEcKei9Tb+XxqHwBCjvwNsJftZ7tw8wM0dL8=
Subject key identifier: EF:B2:57:30:36:EA:91:29:F9:AE:22:06:1C:F7:75:60:5C:F6:BA:72
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 06280350CFE3E567FCE1EA5424EF267F1C667EBB
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034313334.roa
Signing time: Tue 28 Apr 2026 02:21:52 +0000
ROA not before: Tue 28 Apr 2026 02:16:52 +0000
ROA not after: Tue 27 Apr 2027 02:21:52 +0000
asID: 4134
IP address blocks: 103.37.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:28:03:50:cf:e3:e5:67:fc:e1:ea:54:24:ef:26:7f:1c:66:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 28 02:16:52 2026 GMT
Not After : Apr 27 02:21:52 2027 GMT
Subject: CN=EFB2573036EA9129F9AE22061CF775605CF6BA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:46:ee:2a:6f:45:57:56:9a:b6:1f:eb:4b:
29:71:3f:8e:d2:c5:46:7e:33:b3:16:18:ee:34:bc:
9d:0b:38:31:aa:32:c9:78:28:b3:5a:1e:d6:3b:8f:
5a:aa:f0:2c:df:23:ae:0b:f9:87:99:98:9b:cc:07:
78:2a:52:53:3a:28:76:8b:33:70:08:72:be:7c:a3:
75:8a:da:fa:93:27:fc:03:16:17:e0:cc:2d:9c:f5:
78:9d:5a:c2:ee:fa:54:e8:ff:96:13:07:09:3d:8d:
79:84:3b:70:86:fa:89:8b:78:3d:c3:e8:fb:37:d2:
05:6a:ba:0b:91:9e:05:2a:88:7e:8d:f1:0e:0f:66:
ac:6a:ca:fe:2f:03:e0:1d:8b:28:1c:fb:b0:fd:1b:
44:85:a2:3e:fe:9e:64:4d:c5:ca:88:33:38:ff:06:
c1:a0:19:4f:e3:99:d2:49:63:cc:b2:13:9a:e9:72:
29:ea:3f:5b:a7:4a:29:be:13:0d:50:aa:f0:df:87:
5d:a5:59:e9:4f:b3:1d:9f:be:ac:89:fc:cc:a6:87:
9e:62:df:03:30:39:cf:7e:fa:87:e8:9f:79:f8:de:
b5:77:11:b0:6a:1a:9d:7f:0e:f6:3a:fe:39:3f:d0:
18:60:d2:a6:e6:18:db:01:a7:5b:d1:43:86:50:b3:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:57:30:36:EA:91:29:F9:AE:22:06:1C:F7:75:60:5C:F6:BA:72
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
70:04:bb:c4:b7:2f:24:cc:4d:9b:df:b2:c7:92:4b:29:a1:77:
68:84:e7:77:63:c6:0f:12:f2:ce:54:59:df:c8:82:23:b1:8c:
7f:ad:06:18:ec:10:68:04:d8:7c:f9:7c:16:f6:f7:97:3c:f8:
a9:20:0a:d2:24:03:d9:5c:5f:d7:32:49:c6:de:a2:e4:91:f2:
4f:8f:86:b9:29:f8:e1:5b:f2:00:3f:ea:73:f1:cf:ce:02:e0:
73:ce:0b:93:4f:c9:eb:71:6b:af:dd:fe:60:60:96:a4:c6:d5:
f7:46:ea:29:5e:2c:56:8a:28:43:9a:34:1c:c9:c3:ca:96:35:
e9:47:25:69:3e:85:16:38:8e:6c:6e:3f:22:81:ec:61:f8:8e:
51:b1:86:3f:9d:18:3f:2d:70:c6:e9:97:35:63:0c:cd:d0:80:
fd:14:f9:a4:7e:71:69:44:07:6d:4c:74:eb:de:8f:46:7c:0d:
c0:e0:fe:c1:b9:39:ea:ba:26:bc:b0:d1:f1:2f:ff:a0:81:22:
93:f0:e2:20:6b:d3:9f:6a:dd:98:fd:69:d1:72:d5:ca:e9:a4:
44:9f:66:79:43:e5:5f:8b:5f:39:18:e9:a9:ab:d6:8d:e4:3c:
36:68:a1:e2:c4:33:2c:af:ce:35:dd:cc:d2:c9:47:93:dc:c1:
ac:f2:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:10 2026 by rpki-client