
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e2034383337.roa
File: 3130332e34352e3136302e302f32322d3234203d3e2034383337.roa (raw, json)
Hash identifier: 8RIVg8i2WSq5fO9KpA8CG9egVrz20Ci7tcvIkLKSsrU=
Subject key identifier: AA:B7:EC:09:BD:06:16:6D:A0:D5:15:E6:7D:67:E9:82:A1:D2:A5:FD
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 290266DBBDAE1DC61EA846BE15908A9DB2BA00C1
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e2034383337.roa
Signing time: Mon 28 Sep 2026 01:00:38 +0000
ROA not before: Mon 28 Sep 2026 00:55:38 +0000
ROA not after: Mon 27 Sep 2027 01:00:38 +0000
asID: 4837
IP address blocks: 103.45.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:02:66:db:bd:ae:1d:c6:1e:a8:46:be:15:90:8a:9d:b2:ba:00:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:38 2026 GMT
Not After : Sep 27 01:00:38 2027 GMT
Subject: CN=AAB7EC09BD06166DA0D515E67D67E982A1D2A5FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:c5:cf:7b:39:86:ae:85:4b:b8:67:b7:9d:
ae:6d:eb:52:2d:47:92:17:f3:7d:63:a1:32:f6:14:
86:ea:b7:a3:7f:36:1b:28:1e:e8:02:6a:8a:ec:0e:
8c:1e:fb:1f:96:95:84:6a:fb:70:f2:74:dc:f4:c2:
31:61:38:33:12:b0:4b:df:25:9e:59:ad:89:0c:1a:
79:5d:f0:f4:e6:69:ed:eb:3d:f0:cd:d5:05:77:41:
7a:27:77:72:85:8d:4b:ee:4f:36:0f:4b:95:a0:cf:
a1:a3:fc:fa:f7:dd:6c:1f:79:4f:30:3b:03:0e:e8:
69:d2:22:55:d1:c4:92:95:5d:e4:7e:9e:4c:b3:06:
4e:7b:d9:fe:1f:ea:9c:f6:d8:db:14:9d:99:cb:60:
10:0f:fa:51:06:3a:5f:2d:d5:9f:e1:85:7a:18:d2:
d0:ad:43:73:e2:39:fc:fe:c9:76:f6:f1:0a:b8:a5:
36:04:89:ab:eb:c6:49:dc:c1:f5:c2:2d:b4:f0:07:
f6:55:e5:5a:79:70:e8:1b:b5:3a:20:18:7d:63:a9:
ad:9e:93:52:66:f6:fb:cb:5d:7c:59:59:48:d8:96:
25:e5:2a:08:3a:44:93:39:ae:fb:f6:39:23:32:d4:
f5:cb:63:77:18:07:a6:5b:bf:dc:e2:c5:c4:f1:68:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:EC:09:BD:06:16:6D:A0:D5:15:E6:7D:67:E9:82:A1:D2:A5:FD
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
52:fd:67:f7:9d:34:80:c4:b3:46:d6:15:a8:34:6f:2f:70:d1:
97:89:cc:b6:97:c1:b8:1c:5f:1f:85:be:1e:4d:7b:03:0d:74:
a0:01:28:80:19:d7:89:0b:e4:ef:dc:76:4c:f6:70:30:bd:24:
28:cf:b0:98:43:07:60:c5:d6:63:2c:37:8b:5c:ea:cc:c1:19:
dd:e7:3c:ab:4e:0a:73:35:56:40:98:8a:d9:3f:25:66:b1:f4:
f4:d8:f6:57:d4:c2:36:36:39:c3:2a:88:cf:8e:5d:f1:d5:6f:
ac:ec:2e:8c:8e:db:39:99:70:1d:9e:52:2f:3d:fa:b1:97:ea:
c2:62:9f:3b:ee:23:ba:a1:91:28:16:78:d7:55:c3:ea:47:f8:
c8:60:ab:65:71:0a:62:bf:ee:b4:c6:5c:fe:58:93:69:eb:eb:
a4:d1:33:ab:1e:58:92:0f:29:f0:df:ce:aa:c2:02:0d:04:70:
ea:9d:47:6e:2f:46:65:42:12:02:84:f7:be:a1:a9:8a:36:ac:
68:6e:4f:ed:60:a3:0e:72:c4:c7:a0:80:6b:60:8f:f4:48:33:
11:3e:8a:78:45:2c:d7:34:21:6d:cd:a3:e2:94:6d:7c:f0:fb:
ed:b4:84:70:51:81:cc:ce:ac:56:45:fd:49:5f:cf:ee:06:7c:
81:ca:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:59:39 2026 by rpki-client