
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
File: 3130332e34302e31322e302f32322d3232203d3e203133333738.roa (raw, json)
Hash identifier: cy6XWpX1XFCC7CZLeLGISnAQhMJ8lbrX3Ni2NwHZpss=
Subject key identifier: CA:B2:30:35:95:A7:7F:7A:C9:FA:9F:81:45:8B:B3:04:5A:79:8E:92
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 0D942A2EFDAACC95ABA9D06D6FA8B7BB7ED76582
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
Signing time: Mon 28 Sep 2026 01:00:38 +0000
ROA not before: Mon 28 Sep 2026 00:55:38 +0000
ROA not after: Mon 27 Sep 2027 01:00:38 +0000
asID: 13378
IP address blocks: 103.40.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 22:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:94:2a:2e:fd:aa:cc:95:ab:a9:d0:6d:6f:a8:b7:bb:7e:d7:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:38 2026 GMT
Not After : Sep 27 01:00:38 2027 GMT
Subject: CN=CAB2303595A77F7AC9FA9F81458BB3045A798E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:df:62:9c:76:e3:1b:bd:0a:41:bf:61:c4:
96:b3:d5:aa:f5:25:6e:84:f2:88:bb:78:3b:c8:3e:
72:ba:01:f0:32:d0:d4:75:4e:85:1c:53:d4:a4:10:
e2:54:99:82:c2:73:f4:0f:12:ed:1f:97:1a:55:7d:
17:5f:b9:f7:38:ef:ef:9c:a6:2d:de:83:ce:7c:02:
49:f6:40:54:a9:e1:93:bc:9b:36:7a:0e:19:d4:e3:
58:1c:be:22:38:c5:f2:d7:25:a7:f5:ea:c9:0a:07:
bd:83:95:7a:02:3e:ae:ae:76:56:c9:25:dc:6d:b1:
f5:60:23:c6:3a:58:b4:0f:56:dd:38:e9:41:90:28:
1e:d7:91:50:64:7f:df:58:c4:a2:de:3a:df:94:25:
3f:b1:99:c8:5b:57:6e:65:ef:43:64:59:2e:d3:e0:
00:84:59:cc:a7:99:01:96:95:92:32:2f:d0:a0:5b:
d3:9f:ac:52:c2:4d:77:b5:4b:6f:88:6f:14:b6:1b:
70:55:dc:c4:4b:0d:8e:1e:39:6f:bc:d1:d1:17:54:
6d:a0:d8:d5:18:38:bd:9e:7a:fa:b1:5a:66:d8:8e:
18:7f:96:cb:9d:11:7e:3e:c7:e2:b9:54:c9:71:32:
70:c5:16:89:e2:8c:53:92:c5:0b:cc:e9:cf:85:6a:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:30:35:95:A7:7F:7A:C9:FA:9F:81:45:8B:B3:04:5A:79:8E:92
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:28:30:28:48:8b:67:ad:1e:2a:13:53:ee:4b:aa:a7:8b:42:
03:1f:47:76:3e:47:84:f4:6e:b0:15:f3:dd:ef:c7:8e:4e:89:
d6:b7:c2:d3:f6:b3:30:97:4c:5a:42:eb:0a:0e:19:76:00:95:
fc:d8:93:21:62:0b:ce:9b:90:05:48:2d:a1:a9:db:45:a6:78:
44:a7:09:21:96:25:e2:0c:3e:d8:3d:0f:e6:74:44:6e:19:82:
b0:40:ea:92:3c:c7:2a:4a:9f:d6:be:0d:81:7e:05:c8:58:6e:
f9:8e:fc:1d:6e:2a:08:ae:da:7b:43:59:76:18:39:4b:17:de:
e3:03:3a:59:65:39:3a:6b:5d:18:76:67:3d:bf:f1:aa:64:24:
ff:60:6e:38:58:df:36:60:3f:76:12:b7:ee:1a:9b:ea:68:8a:
ce:f7:eb:d3:3b:c9:7a:57:8b:66:e2:84:ff:3c:d2:2f:e5:80:
64:1b:0f:5c:a5:3d:2c:20:84:39:78:1c:5d:d7:7e:24:c2:a6:
2d:0c:a6:b9:4c:f8:ef:17:7b:68:7c:2b:28:83:fe:0d:b4:00:
d5:07:70:de:3f:cf:f6:91:0c:65:25:af:ea:12:7e:55:5b:42:
c0:5b:62:ca:98:13:7b:5c:9f:07:2e:ef:53:16:09:76:65:bb:
fa:27:16:d9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUDZQqLv2qzJWrqdBtb6i3u37XZYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzhaFw0yNzA5MjcwMTAwMzhaMDMxMTAvBgNV
BAMTKENBQjIzMDM1OTVBNzdGN0FDOUZBOUY4MTQ1OEJCMzA0NUE3OThFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2N9inHbjG70KQb9hxJaz1ar1
JW6E8oi7eDvIPnK6AfAy0NR1ToUcU9SkEOJUmYLCc/QPEu0flxpVfRdfufc47++c
pi3eg858Akn2QFSp4ZO8mzZ6DhnU41gcviI4xfLXJaf16skKB72DlXoCPq6udlbJ
JdxtsfVgI8Y6WLQPVt046UGQKB7XkVBkf99YxKLeOt+UJT+xmchbV25l70NkWS7T
4ACEWcynmQGWlZIyL9CgW9OfrFLCTXe1S2+IbxS2G3BV3MRLDY4eOW+80dEXVG2g
2NUYOL2eevqxWmbYjhh/lsudEX4+x+K5VMlxMnDFFonijFOSxQvM6c+Fam+FAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUyrIwNZWnf3rJ+p+BRYuzBFp5jpIwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzNDMw
MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMzMzMzczOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcoDDANBgkqhkiG9w0BAQsFAAOCAQEAqygwKEiLZ60eKhNT7kuqp4tCAx9H
dj5HhPRusBXz3e/Hjk6J1rfC0/azMJdMWkLrCg4ZdgCV/NiTIWILzpuQBUgtoanb
RaZ4RKcJIZYl4gw+2D0P5nREbhmCsEDqkjzHKkqf1r4NgX4FyFhu+Y78HW4qCK7a
e0NZdhg5Sxfe4wM6WWU5OmtdGHZnPb/xqmQk/2BuOFjfNmA/dhK37hqb6miKzvfr
0zvJeleLZuKE/zzSL+WAZBsPXKU9LCCEOXgcXdd+JMKmLQymuUz47xd7aHwrKIP+
DbQA1Qdw3j/P9pEMZSWv6hJ+VVtCwFtiypgTe1yfBy7vUxYJdmW7+icW2Q==
-----END CERTIFICATE-----
Generated at Mon Oct 12 15:24:37 2026 by rpki-client