
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034313334.roa
File: 3130332e33372e34352e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: ArV4nNm5sdSBTguKY3z5n9nYdPSOakNUMGeJmjztSGk=
Subject key identifier: 35:14:6C:AA:2F:1E:5D:D0:60:87:D2:19:04:8C:F4:9E:6C:73:15:79
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 01F6259FB13212000ADDD7DF58B21A97D381AF86
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034313334.roa
Signing time: Tue 28 Apr 2026 02:21:52 +0000
ROA not before: Tue 28 Apr 2026 02:16:52 +0000
ROA not after: Tue 27 Apr 2027 02:21:52 +0000
asID: 4134
IP address blocks: 103.37.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f6:25:9f:b1:32:12:00:0a:dd:d7:df:58:b2:1a:97:d3:81:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 28 02:16:52 2026 GMT
Not After : Apr 27 02:21:52 2027 GMT
Subject: CN=35146CAA2F1E5DD06087D219048CF49E6C731579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:fa:79:7f:a0:97:fb:7d:f5:34:72:26:2a:
eb:25:09:21:be:0b:d0:81:40:36:56:f2:68:cc:50:
fa:0b:30:2a:60:e7:40:7b:4a:ce:ed:a0:99:61:19:
82:c4:ae:f7:d6:91:72:57:4c:fd:73:a9:9c:d9:e1:
8d:32:cb:04:0a:e9:89:d6:31:f8:79:c0:73:a3:d4:
47:a1:c9:03:60:0a:4e:7f:19:3b:e6:09:04:a7:a4:
49:41:c9:18:ac:e2:ba:98:8e:33:f0:ff:6b:bc:1e:
c1:80:a4:00:08:e2:6c:7d:d7:98:14:9b:e5:40:07:
9f:88:b1:0d:46:94:74:36:73:4b:2f:3d:87:c5:4b:
08:bf:27:48:b2:fb:8e:83:df:fb:17:ab:ef:d0:63:
1a:b5:63:7b:98:ca:53:5c:51:eb:18:4c:ba:b0:a4:
ab:17:0c:e2:71:55:e2:3c:db:b9:1d:ba:54:e6:80:
f1:f3:46:64:52:0b:e2:05:ad:2c:f1:2f:79:53:36:
ae:a4:57:3a:19:ff:88:ec:17:8a:4b:66:a1:1e:25:
1a:46:f2:37:05:21:55:21:48:17:69:eb:47:6d:eb:
ed:ea:41:5b:d1:84:4d:f7:27:00:51:45:5c:f1:dd:
ec:75:65:cf:7b:63:b5:3d:b5:e6:3b:75:49:69:ce:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:6C:AA:2F:1E:5D:D0:60:87:D2:19:04:8C:F4:9E:6C:73:15:79
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4d:ff:a1:be:40:b1:bd:f8:c9:4e:c4:44:96:2c:95:cb:1e:
2c:5e:a7:f3:aa:74:82:39:e5:86:0f:d8:61:ea:07:69:1a:13:
01:9d:6e:57:c3:1d:b4:d5:52:b2:c9:f1:9b:d1:c2:84:42:16:
2b:4c:fc:38:48:f8:f2:07:8e:72:53:fc:91:37:57:18:13:5c:
20:f2:6d:63:39:a1:6d:ae:00:58:27:78:75:2d:1d:3c:02:3f:
75:d3:3e:8c:47:4b:79:23:66:47:18:01:5a:81:02:a5:41:00:
c1:64:d3:10:ec:7f:04:df:f3:41:6c:8f:a9:39:57:c0:7a:ed:
85:2f:f5:1d:16:a8:99:99:cf:5a:ad:51:fc:20:b5:1d:0c:aa:
cc:ee:d9:82:09:8b:ca:3e:4a:a1:54:3f:b4:87:ab:da:1d:ce:
d3:f3:86:fb:63:93:6e:a2:67:9c:47:65:16:9f:6a:91:0a:2e:
3b:0c:bb:5f:3a:9f:34:85:be:9f:17:a9:34:0d:f0:e6:76:4e:
4f:f9:5d:b6:4c:d1:12:dc:cc:f3:3e:60:3f:84:93:33:6b:c3:
a6:6a:5b:c5:ba:53:36:cf:b9:a3:bd:a1:d9:25:a6:78:d3:b0:
c8:40:4d:3c:ce:8e:46:bf:ef:30:75:77:29:4d:b3:e9:de:e3:
dc:ba:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:07 2026 by rpki-client