
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034383337.roa
File: 3130332e33372e34362e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: lOLpAVgnCUnYJWe6ryDrTHCTMWNxDnh9rtbNadrVwpE=
Subject key identifier: 3B:6D:61:52:0F:C8:EB:17:21:7F:B8:F2:EB:A2:9B:00:CA:3D:0A:32
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 603CF6AD3CB8FC5FBFFC995CE8E32C1081F01F80
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034383337.roa
Signing time: Tue 28 Apr 2026 02:21:51 +0000
ROA not before: Tue 28 Apr 2026 02:16:51 +0000
ROA not after: Tue 27 Apr 2027 02:21:51 +0000
asID: 4837
IP address blocks: 103.37.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3c:f6:ad:3c:b8:fc:5f:bf:fc:99:5c:e8:e3:2c:10:81:f0:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 28 02:16:51 2026 GMT
Not After : Apr 27 02:21:51 2027 GMT
Subject: CN=3B6D61520FC8EB17217FB8F2EBA29B00CA3D0A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:45:fb:b9:9c:a8:6a:ea:15:49:f1:df:91:
a9:3d:fc:9d:a6:01:6a:c3:e9:a9:8b:6c:56:ab:f2:
b7:bc:39:ec:13:af:ac:93:78:54:48:b9:80:e5:ba:
04:c3:f9:fc:eb:37:89:57:ff:b8:91:e5:71:f2:20:
0e:fe:7c:15:64:df:d2:4d:e8:4f:e7:0e:e0:b0:80:
53:92:e8:d8:26:b3:55:7d:8d:fa:9a:7f:26:e9:61:
0b:f5:c6:af:bc:5a:21:51:52:2c:7c:8d:f2:53:90:
df:26:bd:7b:49:ad:88:84:6b:d2:d9:ce:e8:0c:a8:
26:0c:93:c0:1f:85:37:71:de:62:9c:40:c5:5c:65:
88:be:26:03:b8:92:64:3f:1b:0b:38:b9:22:72:cf:
3f:ec:3e:b1:0e:00:93:f0:4e:e0:45:b4:79:f5:c7:
f4:a3:da:83:51:56:9d:87:32:84:26:83:5b:da:52:
9b:45:6e:1b:54:13:b0:59:ca:e5:e2:43:3b:24:99:
51:64:33:95:12:a7:a9:7b:d5:65:4d:11:ca:76:42:
8e:07:64:5a:6a:cf:20:48:32:18:f8:2d:db:61:df:
86:7f:d7:6f:2a:ca:85:47:18:c5:2b:1e:4f:5f:0e:
63:f4:bc:55:95:64:60:1a:91:92:d9:a4:0a:58:7f:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6D:61:52:0F:C8:EB:17:21:7F:B8:F2:EB:A2:9B:00:CA:3D:0A:32
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.46.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d5:9e:5b:75:a3:f8:cc:dd:25:b6:81:cf:7a:25:86:c0:cf:
54:d3:c3:03:a3:10:54:44:a0:dd:a5:73:4c:3b:27:f3:8a:2a:
90:88:c6:ef:a8:60:46:ab:5b:1b:d9:bc:77:77:db:3c:e4:9a:
59:6a:b6:35:0d:71:ca:94:64:84:89:ff:6b:01:dc:61:f0:c8:
72:68:c9:1c:5c:21:04:b9:f7:2c:cf:b2:2e:b4:f2:34:9f:ce:
1e:a5:ac:a4:2f:40:46:b6:4a:14:67:ef:51:db:c7:38:86:5f:
23:5a:49:e9:35:46:4b:5d:bb:e5:4e:d4:2b:97:d4:78:cb:d2:
b3:e8:8d:11:71:d5:8f:15:7d:d9:ca:d3:94:ee:dc:e8:69:da:
7d:65:23:d1:30:76:03:1b:2d:1f:77:1b:6a:df:0a:f7:c9:30:
72:47:b4:5e:35:02:58:59:c5:a9:a7:ea:bb:ab:b6:31:b3:bf:
80:a4:87:a9:29:2c:76:ab:5d:13:3f:0c:62:25:30:9f:8c:cb:
6a:19:87:f8:71:b8:c2:40:fa:09:58:0b:61:87:30:5c:06:3b:
42:fd:bf:4a:6c:89:25:6d:fb:04:c7:25:b2:74:a8:4e:47:b4:
7e:93:c1:cb:9b:99:aa:2e:90:f6:73:03:a8:7f:f4:f3:ec:d7:
f8:8d:69:fe
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUYDz2rTy4/F+//Jlc6OMsEIHwH4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MjgwMjE2NTFaFw0yNzA0MjcwMjIxNTFaMDMxMTAvBgNV
BAMTKDNCNkQ2MTUyMEZDOEVCMTcyMTdGQjhGMkVCQTI5QjAwQ0EzRDBBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyh0X7uZyoauoVSfHfkak9/J2m
AWrD6amLbFar8re8OewTr6yTeFRIuYDlugTD+fzrN4lX/7iR5XHyIA7+fBVk39JN
6E/nDuCwgFOS6Ngms1V9jfqafybpYQv1xq+8WiFRUix8jfJTkN8mvXtJrYiEa9LZ
zugMqCYMk8AfhTdx3mKcQMVcZYi+JgO4kmQ/Gws4uSJyzz/sPrEOAJPwTuBFtHn1
x/Sj2oNRVp2HMoQmg1vaUptFbhtUE7BZyuXiQzskmVFkM5USp6l71WVNEcp2Qo4H
ZFpqzyBIMhj4Ldth34Z/128qyoVHGMUrHk9fDmP0vFWVZGAakZLZpApYf4nFAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUO21hUg/I6xchf7jy66KbAMo9CjIwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3
MmUzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnJS4wDQYJKoZIhvcNAQELBQADggEBABTVnlt1o/jM3SW2gc96JYbAz1TTwwOj
EFREoN2lc0w7J/OKKpCIxu+oYEarWxvZvHd32zzkmllqtjUNccqUZISJ/2sB3GHw
yHJoyRxcIQS59yzPsi608jSfzh6lrKQvQEa2ShRn71HbxziGXyNaSek1Rktdu+VO
1CuX1HjL0rPojRFx1Y8VfdnK05Tu3Ohp2n1lI9EwdgMbLR93G2rfCvfJMHJHtF41
AlhZxamn6rurtjGzv4Ckh6kpLHarXRM/DGIlMJ+My2oZh/hxuMJA+glYC2GHMFwG
O0L9v0psiSVt+wTHJbJ0qE5HtH6TwcubmaoukPZzA6h/9PPs1/iNaf4=
-----END CERTIFICATE-----
Generated at Wed May 13 10:43:59 2026 by rpki-client