
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034383337.roa
File: 3130332e33372e34372e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: YOjitCb8+w8V2Vb35CfOe1D7NwYkluTL3xiuW/O9NIg=
Subject key identifier: 0A:66:FB:F8:EB:FA:10:A4:33:5A:51:97:B0:FB:0A:5F:07:99:1B:72
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 4386B5B1037564CFFF0D17400DF13371D23192E4
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034383337.roa
Signing time: Tue 28 Apr 2026 02:21:52 +0000
ROA not before: Tue 28 Apr 2026 02:16:52 +0000
ROA not after: Tue 27 Apr 2027 02:21:52 +0000
asID: 4837
IP address blocks: 103.37.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:86:b5:b1:03:75:64:cf:ff:0d:17:40:0d:f1:33:71:d2:31:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 28 02:16:52 2026 GMT
Not After : Apr 27 02:21:52 2027 GMT
Subject: CN=0A66FBF8EBFA10A4335A5197B0FB0A5F07991B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:bc:40:4a:3b:8f:c1:1a:55:fc:58:4e:1a:
15:84:0c:3e:47:eb:c0:99:17:ff:92:82:2d:6d:e2:
5c:e0:24:bd:db:ff:47:37:3a:96:35:cb:1b:4e:05:
44:4b:7f:3b:f5:34:55:d9:f0:b3:69:93:46:80:bb:
18:8a:e9:a6:4e:10:fc:1c:59:a9:73:6d:c2:22:8a:
d4:d8:80:e6:76:e0:53:10:52:98:c8:17:06:6a:3e:
4f:54:0f:50:83:0f:ca:10:77:fe:63:e4:00:5d:40:
c7:aa:42:44:c6:ab:3e:de:d9:a9:e9:52:43:d0:d0:
84:9d:eb:29:4c:f0:06:87:f5:10:4c:5e:c4:e4:6a:
f8:41:f6:15:2e:26:86:a4:60:95:ee:c0:5c:4f:13:
fe:c9:e4:22:67:0c:09:ae:67:4a:cd:76:1f:95:39:
ed:a6:b1:ab:92:c1:5f:58:5a:6c:fd:eb:43:1a:38:
58:a2:a9:ab:08:c5:b0:15:d4:43:45:16:d9:7c:ac:
02:13:0a:30:e4:dd:34:f2:8f:31:31:0b:f5:e5:95:
90:16:06:59:b5:74:f9:d5:83:37:07:c5:23:9d:f4:
6e:08:7e:75:36:56:a2:ad:d7:ce:50:30:fb:6e:60:
5d:1f:d7:10:b7:e2:66:a0:bd:9a:99:22:9e:68:62:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:FB:F8:EB:FA:10:A4:33:5A:51:97:B0:FB:0A:5F:07:99:1B:72
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.47.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9c:48:e8:41:98:58:02:05:55:f5:2d:db:e6:43:94:b4:27:
cd:bb:9d:34:da:9d:9a:66:77:98:f0:7f:ce:e3:30:51:c8:50:
a0:af:71:54:56:16:7c:28:0a:a1:69:f4:ad:0c:ef:7d:e2:3e:
03:6a:0a:24:31:f2:f4:9a:78:47:30:c5:94:27:a6:9e:7a:28:
c3:19:45:8c:ac:77:3a:91:ea:b9:42:13:85:da:84:f2:80:56:
62:d9:aa:24:5c:b4:76:07:59:0f:3e:d0:83:c2:d7:52:ed:88:
dc:f3:e7:ef:9f:4d:e7:3d:99:45:48:7a:76:79:0d:de:a2:23:
5f:85:ac:f1:04:4a:e8:c8:43:32:7d:b2:da:ef:29:b1:6f:ff:
39:cc:3b:1f:12:2a:f5:f3:b4:09:18:a5:87:9b:33:7f:f1:63:
94:54:21:d7:a0:0a:10:bb:45:d2:ff:50:69:2e:13:41:1b:30:
fa:cd:b9:c7:e4:b8:65:5e:f6:03:21:97:0f:0a:c6:75:2c:a0:
74:c4:b3:b6:4d:dc:07:f5:76:bb:7f:65:19:51:92:75:00:ea:
cd:6f:d9:d9:e5:84:51:cb:f1:cf:76:b8:97:d6:1f:b7:b9:cd:
58:e0:77:fd:63:8c:ac:63:89:97:ff:45:77:09:aa:63:5f:b2:
b2:e2:e1:76
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUQ4a1sQN1ZM//DRdADfEzcdIxkuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MjgwMjE2NTJaFw0yNzA0MjcwMjIxNTJaMDMxMTAvBgNV
BAMTKDBBNjZGQkY4RUJGQTEwQTQzMzVBNTE5N0IwRkIwQTVGMDc5OTFCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy77xASjuPwRpV/FhOGhWEDD5H
68CZF/+Sgi1t4lzgJL3b/0c3OpY1yxtOBURLfzv1NFXZ8LNpk0aAuxiK6aZOEPwc
WalzbcIiitTYgOZ24FMQUpjIFwZqPk9UD1CDD8oQd/5j5ABdQMeqQkTGqz7e2anp
UkPQ0ISd6ylM8AaH9RBMXsTkavhB9hUuJoakYJXuwFxPE/7J5CJnDAmuZ0rNdh+V
Oe2msauSwV9YWmz960MaOFiiqasIxbAV1ENFFtl8rAITCjDk3TTyjzExC/XllZAW
Blm1dPnVgzcHxSOd9G4IfnU2VqKt185QMPtuYF0f1xC34magvZqZIp5oYs9DAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUCmb7+Ov6EKQzWlGXsPsKXweZG3IwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3
MmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnJS8wDQYJKoZIhvcNAQELBQADggEBAAacSOhBmFgCBVX1LdvmQ5S0J827nTTa
nZpmd5jwf87jMFHIUKCvcVRWFnwoCqFp9K0M733iPgNqCiQx8vSaeEcwxZQnpp56
KMMZRYysdzqR6rlCE4XahPKAVmLZqiRctHYHWQ8+0IPC11LtiNzz5++fTec9mUVI
enZ5Dd6iI1+FrPEESujIQzJ9strvKbFv/znMOx8SKvXztAkYpYebM3/xY5RUIdeg
ChC7RdL/UGkuE0EbMPrNucfkuGVe9gMhlw8KxnUsoHTEs7ZN3Af1drt/ZRlRknUA
6s1v2dnlhFHL8c92uJfWH7e5zVjgd/1jjKxjiZf/RXcJqmNfsrLi4XY=
-----END CERTIFICATE-----
Generated at Wed May 13 10:00:59 2026 by rpki-client