
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034313334.roa
File: 3130332e33372e34372e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: ZFB1U9nbWhx/A4zuMGsxvBCTtu1lsPDhx3VsXdGuaWw=
Subject key identifier: A2:06:94:83:C1:D7:68:E0:FF:2E:8C:2B:EC:B6:07:60:CC:78:26:A8
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 62D4340F3F2387FDCCB9782F3CF4F5C4748CE76A
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034313334.roa
Signing time: Mon 28 Sep 2026 01:00:41 +0000
ROA not before: Mon 28 Sep 2026 00:55:41 +0000
ROA not after: Mon 27 Sep 2027 01:00:41 +0000
asID: 4134
IP address blocks: 103.37.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d4:34:0f:3f:23:87:fd:cc:b9:78:2f:3c:f4:f5:c4:74:8c:e7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:41 2026 GMT
Not After : Sep 27 01:00:41 2027 GMT
Subject: CN=A2069483C1D768E0FF2E8C2BECB60760CC7826A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:e4:97:26:26:15:8b:aa:77:7b:71:76:6b:
44:2a:49:04:22:a2:98:6b:5e:f2:1f:14:11:f7:77:
af:c8:c7:9e:e7:d1:ce:02:ec:29:b5:eb:e4:e7:a2:
66:63:cb:9a:d0:e1:54:1a:a8:5a:5f:b2:33:5b:f5:
11:7a:a5:9b:34:2b:e5:67:d2:22:e1:bb:02:1f:e9:
9a:c1:b5:62:5d:18:05:75:35:e2:29:df:d0:e9:31:
11:02:79:4f:df:79:03:a5:fd:15:93:4a:76:e3:69:
51:c0:af:b3:a9:66:21:7a:12:02:e2:cf:09:a5:23:
1f:a3:54:bf:b3:e6:cc:ce:65:85:6d:9a:e0:80:ac:
78:0e:9b:08:11:eb:60:73:db:92:cf:e3:f4:ca:dc:
bb:ae:aa:61:15:31:c9:02:51:8c:67:25:8a:85:61:
53:c0:3e:90:11:dc:4d:ae:24:b8:46:1d:e8:2c:b4:
04:b5:74:41:df:86:70:9f:ed:fe:c0:8b:4e:6a:d9:
91:78:63:64:de:8e:13:28:d1:6d:ad:b6:6a:d3:73:
70:86:f1:a4:6e:76:56:bf:04:c4:99:1e:d6:8e:ed:
48:f9:74:41:d2:06:3f:ef:c7:2f:7f:a4:06:af:34:
a4:92:13:b0:19:c7:c0:39:2c:ab:50:40:72:cc:5e:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:94:83:C1:D7:68:E0:FF:2E:8C:2B:EC:B6:07:60:CC:78:26:A8
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:89:5d:7a:65:fe:6a:52:5f:26:0e:25:c7:67:4e:96:79:fc:
2a:95:58:c3:c2:a4:fc:b3:4c:31:a3:34:e7:b4:f9:ec:49:26:
09:68:30:3e:5d:f3:df:4c:31:34:f4:17:36:b2:54:2a:e0:fa:
03:6a:b1:f6:a4:79:ae:85:de:fa:61:8f:9e:c5:f7:7b:f8:c2:
21:ad:07:8a:e0:19:2c:9f:68:5a:60:84:93:50:75:c7:b1:e1:
ec:7b:3c:6a:4d:ed:e6:8e:5d:b6:8e:2e:18:fd:a3:c0:fb:0b:
5b:a6:5f:4a:ef:c2:73:5f:43:6f:aa:37:f0:db:ee:5d:be:89:
2f:f6:d0:55:cd:3a:90:a8:42:0b:b4:15:a6:fd:1f:f2:ab:23:
32:ef:87:01:8d:03:4d:c3:c4:e4:28:f7:6d:24:f8:47:e5:90:
ec:d2:86:54:cf:91:19:15:7c:a0:f7:26:2f:49:7a:e7:58:41:
f3:c5:cb:f9:7f:1d:73:5b:89:1c:2e:5a:04:c3:e7:77:57:45:
f8:de:db:33:95:1e:be:ea:37:3e:5d:a7:aa:a4:38:de:12:62:
c6:f5:29:22:38:4a:67:5f:b3:aa:3f:34:28:c8:74:b3:f5:5f:
25:b3:05:0f:02:eb:c5:7a:71:bf:ff:5c:0c:90:5f:73:2d:a7:
81:ab:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:44:16 2026 by rpki-client