
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203536303436.roa
File: 3130332e33372e34352e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: 3rlVea9WLlNpg0Dnjx2gUzcspIyr1C/KTeg2tZooB7w=
Subject key identifier: 37:9D:10:B7:00:5F:76:21:0C:C7:0F:0B:E3:0B:25:85:1D:D2:77:FB
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 575910BD826CCEB5A82678D215B3B52C3F04DBDC
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203536303436.roa
Signing time: Tue 28 Apr 2026 02:21:51 +0000
ROA not before: Tue 28 Apr 2026 02:16:51 +0000
ROA not after: Tue 27 Apr 2027 02:21:51 +0000
asID: 56046
IP address blocks: 103.37.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:59:10:bd:82:6c:ce:b5:a8:26:78:d2:15:b3:b5:2c:3f:04:db:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 28 02:16:51 2026 GMT
Not After : Apr 27 02:21:51 2027 GMT
Subject: CN=379D10B7005F76210CC70F0BE30B25851DD277FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:67:0f:33:cc:8a:90:c1:e6:44:01:3f:95:
72:59:e5:8a:4c:e6:99:2c:29:21:d7:cb:9f:43:43:
d4:4c:de:3e:7f:1e:51:f8:b1:06:ce:8c:63:9e:f8:
b8:bf:a7:b8:ce:8b:80:69:96:ef:20:73:08:93:b2:
34:21:83:b9:1c:5d:aa:ba:8c:cb:f0:76:21:84:c1:
4d:f8:ce:7d:36:4d:41:f7:bc:b2:fd:1b:27:85:a6:
41:13:8a:45:fb:14:db:52:13:f1:62:4d:a9:a9:61:
2d:ba:46:b0:ed:05:a4:16:1d:cd:55:f0:92:a0:72:
38:ff:f3:13:1b:0e:c6:3b:ea:c0:0a:d4:56:fa:ac:
e2:21:8a:2c:cf:e3:d0:16:32:6d:d6:02:aa:b7:39:
80:2a:76:34:99:3a:8b:26:af:6b:dc:72:03:20:12:
13:39:4c:40:d0:0d:bf:54:df:38:59:29:25:74:6f:
df:f8:b1:d5:b6:db:8c:4b:d3:4c:33:f9:ff:53:5b:
5e:55:3c:04:28:81:e8:fc:4e:7b:ac:5a:9f:c1:02:
58:1b:fd:b6:ce:f4:2d:4c:9c:ca:ca:47:d9:e8:33:
61:c4:79:2c:52:f5:1c:74:47:db:4c:d4:27:5b:4c:
df:37:a5:62:77:6c:fb:2c:d0:ef:be:29:3d:1c:ce:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9D:10:B7:00:5F:76:21:0C:C7:0F:0B:E3:0B:25:85:1D:D2:77:FB
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.45.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:b4:89:9b:45:b1:ae:fa:ed:47:25:c7:81:f6:a6:fe:98:
cb:df:dd:84:06:e8:eb:74:13:e2:29:87:6c:25:fe:a8:e1:de:
5a:70:db:f4:55:f4:f8:0d:2b:9c:97:c0:d8:ff:31:f8:f6:b4:
98:5f:31:86:77:d3:8e:d3:2b:0a:a7:bb:d7:c1:f8:24:e0:65:
2c:4a:03:32:69:c1:66:40:3b:03:74:12:ba:b5:df:a2:2b:17:
65:f1:83:6f:e5:09:0d:72:8f:b0:9f:0f:00:10:68:a0:47:9c:
a0:36:11:35:11:53:e6:03:39:c0:f3:2b:3c:83:21:fb:2c:17:
29:35:07:59:08:a1:88:c5:4f:09:9f:49:8c:fc:e4:a5:c8:24:
5d:eb:40:ca:3b:f7:5f:50:18:21:ee:ba:1b:72:e3:b2:35:89:
72:39:ba:b6:e2:1c:f4:ac:5a:16:51:45:50:de:43:35:7e:77:
31:a9:e4:72:46:71:c6:2b:4a:00:a0:d1:6c:a2:1b:ac:23:09:
46:88:00:65:9f:ab:56:e2:7f:0e:1a:29:76:fa:8e:09:16:71:
db:17:ed:5c:b0:f8:fc:30:5f:1a:4f:c9:8b:5e:a2:c3:d4:0b:
10:bb:9c:96:da:59:5b:8a:89:d3:1d:bf:d0:18:75:9c:fe:dc:
38:14:66:28
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUV1kQvYJszrWoJnjSFbO1LD8E29wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MjgwMjE2NTFaFw0yNzA0MjcwMjIxNTFaMDMxMTAvBgNV
BAMTKDM3OUQxMEI3MDA1Rjc2MjEwQ0M3MEYwQkUzMEIyNTg1MUREMjc3RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTumcPM8yKkMHmRAE/lXJZ5YpM
5pksKSHXy59DQ9RM3j5/HlH4sQbOjGOe+Li/p7jOi4Bplu8gcwiTsjQhg7kcXaq6
jMvwdiGEwU34zn02TUH3vLL9GyeFpkETikX7FNtSE/FiTampYS26RrDtBaQWHc1V
8JKgcjj/8xMbDsY76sAK1Fb6rOIhiizP49AWMm3WAqq3OYAqdjSZOosmr2vccgMg
EhM5TEDQDb9U3zhZKSV0b9/4sdW224xL00wz+f9TW15VPAQogej8TnusWp/BAlgb
/bbO9C1MnMrKR9noM2HEeSxS9Rx0R9tM1CdbTN83pWJ3bPss0O++KT0czs/fAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUN50QtwBfdiEMxw8L4wslhR3Sd/swHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3
MmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGclLTANBgkqhkiG9w0BAQsFAAOCAQEAc/G0iZtFsa767Uclx4H2pv6Yy9/d
hAbo63QT4imHbCX+qOHeWnDb9FX0+A0rnJfA2P8x+Pa0mF8xhnfTjtMrCqe718H4
JOBlLEoDMmnBZkA7A3QSurXfoisXZfGDb+UJDXKPsJ8PABBooEecoDYRNRFT5gM5
wPMrPIMh+ywXKTUHWQihiMVPCZ9JjPzkpcgkXetAyjv3X1AYIe66G3LjsjWJcjm6
tuIc9KxaFlFFUN5DNX53MankckZxxitKAKDRbKIbrCMJRogAZZ+rVuJ/DhopdvqO
CRZx2xftXLD4/DBfGk/Ji16iw9QLELucltpZW4qJ0x2/0Bh1nP7cOBRmKA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:25 2026 by rpki-client