
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034383337.roa
File: 3130332e33372e34352e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: jlCZ5tEaFDYV1hBs7mkWEDUqT11q5/aBYtb/0BOgDdg=
Subject key identifier: 80:AB:67:07:69:AC:CF:8D:4F:50:70:73:C4:3D:CA:0D:A7:2F:26:55
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 5976A35297B65E803F90D259C51956F977378988
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034383337.roa
Signing time: Mon 28 Sep 2026 01:00:37 +0000
ROA not before: Mon 28 Sep 2026 00:55:37 +0000
ROA not after: Mon 27 Sep 2027 01:00:37 +0000
asID: 4837
IP address blocks: 103.37.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:76:a3:52:97:b6:5e:80:3f:90:d2:59:c5:19:56:f9:77:37:89:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:37 2026 GMT
Not After : Sep 27 01:00:37 2027 GMT
Subject: CN=80AB670769ACCF8D4F507073C43DCA0DA72F2655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:d5:62:9e:bd:df:0b:a5:b5:04:d0:0e:b0:
e9:64:f7:91:f5:96:57:1a:7a:65:cf:24:79:e3:f6:
b1:a3:5a:6a:75:b7:c9:44:6a:76:ef:f5:96:37:fc:
fb:66:82:f8:56:d2:6b:86:24:9b:ab:22:7e:e3:03:
55:7c:a0:7c:78:25:70:03:4f:ce:b8:4d:7c:b6:8a:
69:36:19:4a:b4:81:c4:2e:93:63:37:0f:98:3f:1d:
37:06:c2:7f:15:98:13:59:31:fd:79:a8:55:47:26:
f9:8a:69:e6:5c:ea:dd:50:04:30:0b:f5:ed:ae:56:
75:ee:17:66:f3:45:0a:0e:85:68:72:fd:58:bc:ec:
5b:26:13:8d:5f:c0:ca:d1:69:9d:aa:91:45:fd:1f:
77:8c:c6:37:6a:0d:a7:8b:3f:73:95:0b:f5:33:b1:
6f:ce:7c:38:9b:a5:fd:14:78:57:43:f6:e6:eb:02:
3b:36:6e:8f:3c:d6:19:fb:ea:8d:90:16:aa:f8:37:
08:24:34:23:7c:40:a6:0c:a9:cc:2d:46:64:22:6c:
2c:55:3d:b3:dc:58:be:83:55:ef:28:09:77:e1:ca:
70:37:71:b0:30:fd:e8:c0:7a:76:b5:7c:b2:1f:0e:
54:d3:5e:50:39:52:a9:95:99:fc:c8:e4:14:6d:b6:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AB:67:07:69:AC:CF:8D:4F:50:70:73:C4:3D:CA:0D:A7:2F:26:55
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5c:91:8b:04:bc:3d:c6:76:0c:5d:c5:7f:ba:a3:5a:2f:ea:
ec:63:bc:8a:9a:40:27:a1:f4:4a:93:e8:11:2b:e3:19:5c:13:
68:01:64:c7:31:4f:2a:b5:cf:d7:59:d8:00:a3:8e:a1:d6:19:
9a:c4:0b:aa:6e:5f:6b:2f:e0:9f:a1:b2:02:a9:ee:71:a5:54:
fe:16:e9:e0:87:ca:a2:63:1c:7a:48:6f:43:64:a8:86:2a:d3:
8e:cc:79:f8:41:d1:bb:d3:39:cb:4d:8e:d4:cd:9c:5c:b8:af:
f0:4a:ec:02:c3:20:41:57:76:7b:73:65:08:58:1d:25:13:17:
e7:a0:71:fc:cb:55:b8:aa:f9:e1:87:5a:21:f1:66:59:08:a3:
d5:9e:b4:0f:9d:1e:d8:0b:8b:66:b2:d5:82:a3:d5:6e:77:58:
11:06:3f:00:9d:dd:06:f6:86:00:7e:bd:b1:cf:ef:8e:d3:ed:
45:51:a3:d0:ca:fd:3f:09:7a:c7:18:ca:eb:b3:a2:35:f4:17:
68:e4:3d:6a:76:9d:3a:08:8b:6b:32:a8:f6:c0:98:13:76:20:
f1:47:15:a5:a2:bd:23:a8:b6:f5:65:18:90:2d:f6:72:41:2c:
08:9f:ca:b1:5c:48:bf:36:63:da:c0:31:97:94:8e:93:c3:55:
fa:8a:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:24:34 2026 by rpki-client