
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034313334.roa
File: 3130332e33372e34372e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: pTgB+R3MYPzkvPD4ee/dVgeTB94DIt8jnWRQPJYnIKY=
Subject key identifier: 61:B0:EC:34:AF:2F:1D:CB:FB:CA:41:A8:D1:4D:2B:65:7E:D1:14:89
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 6FD6CADB1AFD87B2DBB9FB358D3CCB7AF810906D
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034313334.roa
Signing time: Tue 28 Apr 2026 02:21:52 +0000
ROA not before: Tue 28 Apr 2026 02:16:52 +0000
ROA not after: Tue 27 Apr 2027 02:21:52 +0000
asID: 4134
IP address blocks: 103.37.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d6:ca:db:1a:fd:87:b2:db:b9:fb:35:8d:3c:cb:7a:f8:10:90:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 28 02:16:52 2026 GMT
Not After : Apr 27 02:21:52 2027 GMT
Subject: CN=61B0EC34AF2F1DCBFBCA41A8D14D2B657ED11489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:e5:f3:24:a5:44:b3:36:5a:d9:35:88:0a:
c3:7b:8c:6e:0b:c7:a0:8a:4b:2f:7d:34:76:1a:6c:
e6:99:d9:eb:c2:79:62:76:b6:d3:de:db:e8:a2:04:
17:36:49:29:9a:30:1f:48:25:1d:a7:57:2c:38:88:
74:2f:74:e3:33:cc:07:ca:5e:17:54:68:fc:d7:47:
ed:ff:d6:9d:a9:7b:45:06:26:82:c0:69:a2:12:24:
db:11:c5:fd:64:9f:7f:2b:9b:81:cc:66:9a:e7:f0:
32:1c:84:3a:27:aa:ce:83:03:0d:92:ac:6a:68:d2:
81:9b:98:f1:f1:f9:c5:0d:16:35:53:05:58:ff:ca:
33:c7:94:16:33:81:08:c4:f4:2a:2d:6f:7d:71:33:
8a:82:42:02:37:73:9f:d9:d0:0d:d5:71:5c:7b:cd:
f4:1b:51:10:22:ac:12:10:98:6c:50:2b:02:f1:94:
b4:aa:5a:50:5f:a2:23:33:d8:2d:9f:2f:c5:b8:29:
9e:64:fd:14:75:8a:66:98:23:b9:4a:dc:5f:1f:a2:
3b:eb:96:27:aa:13:5d:eb:8d:ba:65:4a:ff:1c:46:
92:c8:6d:16:d2:29:df:22:c9:44:61:02:a4:5f:ba:
a4:86:e2:4f:f5:b6:7f:94:3f:3d:a3:9d:69:39:05:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:EC:34:AF:2F:1D:CB:FB:CA:41:A8:D1:4D:2B:65:7E:D1:14:89
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.47.0/24
Signature Algorithm: sha256WithRSAEncryption
61:de:38:a7:23:09:d0:a5:75:a2:f4:b0:00:91:5a:e4:67:5a:
c6:44:ca:c3:24:97:89:9d:04:7b:24:15:19:7b:07:6f:af:47:
02:53:a1:9c:7f:77:ef:d9:af:41:8e:43:45:6e:db:d9:29:4b:
4a:46:cb:2a:c7:7b:74:82:ff:86:e7:e8:e5:45:b9:11:c0:94:
28:1c:5b:80:f3:f7:fd:63:91:be:40:6e:4f:b1:7a:b8:72:c5:
2b:c5:97:44:84:84:94:bc:ac:31:69:60:ce:e3:61:5d:fc:5c:
18:66:b2:e5:33:1d:68:9c:90:78:af:dd:50:49:cd:58:17:2b:
84:70:67:ad:98:66:f0:b6:c4:ea:64:c5:53:8b:14:f0:6b:ac:
58:bf:4c:e4:dd:33:61:db:88:8e:7e:0e:91:49:81:74:3d:bd:
78:1f:ce:7d:4c:8d:80:ff:84:cb:5c:6c:fd:3b:64:8f:6b:ef:
22:5e:b9:b3:c3:d7:28:37:75:cd:9d:84:fc:3a:f2:ec:43:33:
82:4f:ec:8b:52:d0:38:9a:f8:9b:5a:ca:4e:31:4a:da:c0:dd:
e2:4a:d3:8b:3f:4a:bd:2b:61:69:53:f9:56:7f:e5:2a:15:e3:
d7:eb:a7:42:d5:da:65:17:8a:b0:bc:8e:25:a0:2c:f6:74:05:
26:a1:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:12 2026 by rpki-client