
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203233363530.roa
File: 3130332e33372e34352e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier: JVNuOjgheW2fTUFvo407TQGpJbS2KLpxKF/4oBLJQEE=
Subject key identifier: CD:CA:86:49:5D:6F:A2:F5:E7:F2:3C:0C:3F:C8:FB:FA:65:4A:88:22
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 3AE44ECAC031AE766FE735BEAC2F517C5415B80B
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203233363530.roa
Signing time: Tue 28 Apr 2026 02:21:52 +0000
ROA not before: Tue 28 Apr 2026 02:16:52 +0000
ROA not after: Tue 27 Apr 2027 02:21:52 +0000
asID: 23650
IP address blocks: 103.37.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e4:4e:ca:c0:31:ae:76:6f:e7:35:be:ac:2f:51:7c:54:15:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 28 02:16:52 2026 GMT
Not After : Apr 27 02:21:52 2027 GMT
Subject: CN=CDCA86495D6FA2F5E7F23C0C3FC8FBFA654A8822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:bb:f0:28:ef:48:a7:1c:bf:5a:43:73:12:
22:13:c9:0f:1c:6f:18:12:d1:27:c9:ef:a9:f5:d1:
54:ef:44:b5:04:b8:56:dc:83:8f:fc:5d:ab:e5:9d:
77:62:ea:57:f9:62:13:15:4c:fd:2b:85:89:28:f4:
6e:ce:82:82:16:ad:aa:fd:fc:eb:17:30:93:b8:9b:
ab:f5:40:aa:87:6f:90:a8:3a:91:75:a9:de:c8:1f:
ca:4e:64:d6:4f:e4:62:84:f1:24:05:55:7a:c9:2f:
5b:0c:2e:1e:a9:e3:0c:01:f5:f1:6d:1b:70:c5:8e:
5d:d8:e7:f5:75:b4:f5:a5:7d:58:60:af:ec:4e:ff:
d6:09:2d:42:b2:a6:a5:a1:ad:7d:71:b8:2e:75:65:
1e:39:8d:fe:88:89:82:3b:f2:d4:81:91:6a:f6:d6:
fd:44:be:a5:01:f0:e6:e5:4c:a2:2b:26:37:01:e2:
3b:8b:83:c6:33:f4:71:76:cc:2f:e6:88:a9:bb:bc:
94:6f:28:d4:cc:24:d8:7c:3e:7d:bf:91:ee:9d:e4:
c5:a2:89:89:5d:ac:72:ac:8f:e3:97:06:af:1b:9f:
40:9a:1f:1e:0d:d2:0d:53:3f:5e:df:ae:d1:bd:07:
be:d4:e3:ac:5e:52:2c:6c:1f:8b:31:b6:22:e8:aa:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CA:86:49:5D:6F:A2:F5:E7:F2:3C:0C:3F:C8:FB:FA:65:4A:88:22
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4e:92:44:df:d8:61:b9:b2:22:63:35:42:f2:6a:e8:82:40:
db:44:7f:4c:be:10:5c:11:7f:60:1d:b0:54:ef:5e:5e:d0:db:
a7:81:b2:10:66:3a:70:ed:49:6f:dc:86:7b:d5:11:46:34:a5:
06:e4:01:79:c4:98:02:6f:40:92:fc:95:f3:92:25:56:86:16:
35:91:2e:d1:6d:1a:53:6c:32:b9:27:20:6a:b1:4e:de:2c:51:
59:92:af:d6:2b:9b:9a:0f:9c:ba:0a:c6:61:85:dc:20:45:04:
9f:f6:60:08:ea:06:9e:86:d6:85:df:2d:85:7b:07:b6:74:a6:
b6:96:12:07:93:b0:ca:ab:c6:8e:12:c1:c3:8f:44:74:99:39:
4a:e2:18:48:2e:b9:9a:e7:a6:a7:44:93:3c:ea:b4:b4:99:3c:
8c:37:c1:89:9f:ef:a3:0c:d6:2e:59:7f:71:51:89:5e:b8:14:
7c:c4:3a:02:d6:1d:ea:8f:d4:ea:e3:5c:7b:22:5d:9d:12:e6:
a2:1e:e3:f3:39:75:10:89:59:d4:7d:15:47:6a:15:36:cc:a5:
80:df:77:2f:2a:fe:66:67:22:94:ae:ca:f3:ec:02:02:e8:1a:
1f:26:15:35:0f:5b:44:c0:63:cf:8f:b4:22:ee:da:96:93:bc:
16:22:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:48 2026 by rpki-client