
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
File: 3130332e38332e37322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: cnY1aHAojPeqSMyk5Q1wGLtN0lWS6GO/+znWMKM+jcI=
Subject key identifier: DE:13:D6:61:54:FF:E0:57:3E:CF:F5:90:2E:87:1E:A4:6F:2C:AD:D4
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 5DE47AA40AA7710C144F0821AE4F643BC29C646B
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
Signing time: Mon 28 Sep 2026 01:00:36 +0000
ROA not before: Mon 28 Sep 2026 00:55:36 +0000
ROA not after: Mon 27 Sep 2027 01:00:36 +0000
asID: 4837
IP address blocks: 103.83.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e4:7a:a4:0a:a7:71:0c:14:4f:08:21:ae:4f:64:3b:c2:9c:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:36 2026 GMT
Not After : Sep 27 01:00:36 2027 GMT
Subject: CN=DE13D66154FFE0573ECFF5902E871EA46F2CADD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:a7:91:4b:3f:02:60:55:c8:79:07:7b:22:
25:cd:44:31:fe:a8:72:79:00:9e:27:79:e0:71:bf:
5e:1a:b0:78:64:9d:89:2a:7b:b3:ae:cb:c5:89:bb:
06:97:86:9e:6e:5d:88:8b:16:32:8b:74:50:28:35:
50:47:e4:c1:a2:db:ce:fe:b7:b6:76:48:8d:9e:fc:
71:ad:83:b0:99:5a:eb:7b:8f:b6:e6:49:6b:41:be:
83:0e:4b:39:8c:6b:cb:68:90:37:53:79:34:86:80:
61:8c:a6:c8:f4:4b:02:71:53:88:df:d1:31:7c:97:
45:13:50:ad:a7:f4:41:a9:5a:b1:ab:81:6f:bf:81:
d9:99:f2:78:0a:89:3d:fd:34:00:e3:69:99:e3:18:
14:f6:e6:28:80:bd:b7:e0:3b:26:5c:0c:fe:99:e5:
69:36:38:a3:9f:b0:87:0b:8f:eb:e4:de:27:12:3f:
2d:9c:a3:d2:a9:53:d6:e2:21:5f:62:0a:d4:4b:c5:
0c:7d:d2:8a:ca:83:4b:a1:af:a4:c4:91:2e:a5:95:
3a:da:44:d5:ba:5f:12:39:4b:06:e7:80:83:0e:2f:
b5:20:e7:a6:ab:33:c6:5e:b4:30:af:07:06:a3:52:
9b:74:ad:1f:3f:26:6c:ba:65:b6:af:0d:95:5c:b1:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:13:D6:61:54:FF:E0:57:3E:CF:F5:90:2E:87:1E:A4:6F:2C:AD:D4
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:aa:b4:7d:25:de:27:a1:c9:9f:e6:d4:e5:4a:73:e0:b9:29:
12:4c:bf:82:86:fa:17:48:59:b9:ad:60:56:1c:0a:ba:61:ce:
83:ba:24:36:13:f8:af:c6:5b:f3:0a:9e:c8:93:f0:b1:4e:67:
ee:47:7b:36:d5:16:2d:11:de:1c:b2:86:56:69:63:e1:ad:fa:
34:79:ac:02:59:9b:60:81:d7:e2:f6:f6:8c:33:86:e9:ff:ba:
da:29:e7:c4:a2:7c:ab:5b:65:39:31:28:95:92:94:c7:ec:00:
f8:a8:c0:15:f6:b9:72:97:76:38:d6:8b:e5:21:a3:e8:76:fd:
af:44:5a:ae:d1:4c:d7:c2:f7:1a:e4:81:40:ca:29:d2:08:9e:
a1:b6:33:a2:b7:71:86:80:c9:63:b3:a1:14:84:e4:53:e1:f9:
11:3d:a8:95:e8:4c:3b:8e:9a:f0:54:7c:c5:d6:fe:a6:59:8c:
78:ad:3b:ac:59:a2:ab:6d:f0:f3:21:d0:85:2a:44:e5:91:30:
6d:82:31:ba:03:d9:7f:1a:62:c0:99:31:72:f2:b0:49:a7:79:
60:7c:1b:17:13:00:20:e2:9b:56:66:cd:5c:a6:53:79:40:a8:
79:9f:a0:3c:94:78:ea:a9:73:ec:78:2f:50:a2:dc:ce:67:b1:
37:b7:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:42:46 2026 by rpki-client