
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034313334.roa
File: 3130332e33372e34352e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: cv3vHFwjaKimFh6iWelwN1+nCF132Loumj77HJudNho=
Subject key identifier: B8:C9:29:E3:FB:7C:0E:4B:1C:94:4F:31:92:AD:58:9C:7A:17:EF:66
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 52F17A1702DCC5F9EB1DCADDCED7A39929CA9D77
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034313334.roa
Signing time: Mon 28 Sep 2026 01:00:35 +0000
ROA not before: Mon 28 Sep 2026 00:55:35 +0000
ROA not after: Mon 27 Sep 2027 01:00:35 +0000
asID: 4134
IP address blocks: 103.37.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f1:7a:17:02:dc:c5:f9:eb:1d:ca:dd:ce:d7:a3:99:29:ca:9d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:35 2026 GMT
Not After : Sep 27 01:00:35 2027 GMT
Subject: CN=B8C929E3FB7C0E4B1C944F3192AD589C7A17EF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:4d:53:9c:60:62:9c:68:41:fa:25:6a:49:
a1:ae:a2:9c:20:64:1e:c0:17:53:83:d1:f6:f3:42:
fd:41:1b:24:5c:90:89:af:26:84:df:76:bf:a4:c4:
8d:7f:d0:33:27:ab:55:7f:79:14:f9:37:0d:cb:f3:
b2:91:73:5e:be:c8:eb:bd:dc:c2:b5:69:9e:11:5b:
c6:fb:d9:25:76:f7:5d:a0:0e:c9:bf:ce:a6:49:58:
2f:52:b9:81:53:2f:eb:7b:7b:79:e0:d8:5d:b4:f2:
c0:7e:71:94:68:6f:c2:e5:02:58:31:5d:53:e7:53:
e7:e9:36:0d:78:d6:98:61:d1:e3:d8:24:ef:39:af:
47:51:21:e7:cb:6f:06:4b:71:0b:7e:b2:f6:ef:95:
da:49:dd:df:e7:78:66:1e:b4:18:63:19:0d:a8:ab:
c0:f5:ff:c5:95:ba:88:1b:b0:7e:6a:4f:c4:85:73:
69:d8:1c:83:53:bc:f2:8c:fc:2f:d3:46:c1:ee:ef:
4f:bd:d1:bc:c9:58:76:f6:de:8c:de:1d:36:74:94:
c0:38:c8:31:c6:ea:ca:5e:0a:82:88:75:1b:88:e4:
9d:32:b6:85:90:f5:1a:b2:9b:df:8c:ae:ce:6b:da:
14:97:82:8a:c8:9c:7d:39:40:f2:be:bd:c2:fa:37:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C9:29:E3:FB:7C:0E:4B:1C:94:4F:31:92:AD:58:9C:7A:17:EF:66
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.45.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d2:f0:be:cd:10:aa:fd:c7:2c:80:0f:65:1c:b5:92:cc:7d:
08:57:07:d6:d0:c2:a4:e7:79:da:f7:d3:4b:ce:df:cc:16:89:
34:43:cf:03:86:ce:b2:7c:4a:9c:3c:f9:cf:d8:e3:d9:9f:91:
eb:42:e5:42:58:bc:fd:9f:77:95:d1:ba:73:aa:00:3a:2a:76:
39:6c:e1:13:46:a3:2d:3a:17:b4:3f:af:3a:d6:67:05:8a:b4:
3a:9d:e4:94:aa:16:31:91:8c:5a:e9:35:c9:ab:6f:a2:e0:2e:
c7:19:43:18:5a:fe:2c:be:ad:97:50:f1:25:b0:07:c2:55:bd:
e6:a0:20:7d:73:5b:01:2a:64:0a:8c:aa:e0:8a:b1:d3:4b:12:
06:22:df:d9:f7:d0:bb:49:d9:4d:35:36:e7:be:74:30:a4:33:
aa:d2:c6:30:99:f5:e3:20:4f:99:41:25:63:fb:54:69:e6:cb:
ed:1d:e9:70:57:0b:b0:b4:fc:70:ea:d3:59:b7:7f:b1:73:6b:
48:74:81:6b:26:22:53:62:be:b4:24:7a:2c:27:1d:90:2b:1f:
cd:d2:28:6c:d3:9a:d0:b1:0d:f9:2e:00:5d:7d:e6:a5:24:cb:
5a:83:2e:27:f8:51:09:ae:1e:a2:7b:7a:56:13:9f:db:18:20:
b8:2d:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:39:27 2026 by rpki-client