
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38372e3138302e302f32322d3232203d3e203536303436.roa
File: 3130332e38372e3138302e302f32322d3232203d3e203536303436.roa (raw, json)
Hash identifier: RpEXIgp9tYgeSaV5JxOspK4UedpsxCvekO9FS21PNGE=
Subject key identifier: 87:BA:89:A4:52:09:40:F2:39:BD:56:95:38:46:22:55:F8:4D:AA:BE
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 08BD0C971BA90058D66810243FCE428BED639041
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38372e3138302e302f32322d3232203d3e203536303436.roa
Signing time: Mon 28 Sep 2026 01:00:37 +0000
ROA not before: Mon 28 Sep 2026 00:55:37 +0000
ROA not after: Mon 27 Sep 2027 01:00:37 +0000
asID: 56046
IP address blocks: 103.87.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:bd:0c:97:1b:a9:00:58:d6:68:10:24:3f:ce:42:8b:ed:63:90:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:37 2026 GMT
Not After : Sep 27 01:00:37 2027 GMT
Subject: CN=87BA89A4520940F239BD569538462255F84DAABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:0b:90:c3:32:b8:c0:9c:ca:7e:19:35:45:
a5:f6:c6:35:d4:11:2e:be:45:af:5e:c8:8b:2f:f8:
d8:23:89:46:8c:22:f8:6c:6d:0d:90:c0:15:bc:9d:
db:08:0a:91:68:3f:2f:a5:83:88:96:6c:c8:07:c0:
7d:97:e7:c2:2b:b5:66:0e:3f:28:f4:13:8b:f2:5c:
4d:35:60:d1:06:70:b8:17:8e:b9:00:52:1f:be:54:
56:98:79:d1:99:c7:0b:b6:93:85:70:1a:10:ec:97:
e2:ef:6f:e0:d4:4f:99:19:6f:7a:29:a0:33:8b:ae:
15:6f:33:c2:16:07:6e:b5:4d:71:c5:70:79:c0:bf:
67:26:eb:08:fe:85:d5:82:ea:05:28:43:1c:02:c0:
ba:73:9b:9f:dd:df:b0:51:79:da:28:85:27:af:4d:
69:34:4c:6f:9f:db:67:eb:8c:a5:13:91:0b:33:5f:
f3:43:e1:27:38:3e:3c:7b:08:4d:31:68:9f:58:7a:
be:1d:4c:22:32:72:13:dc:85:6f:1d:4f:57:47:ef:
4e:39:92:f5:93:d6:48:e8:45:71:8c:73:e4:29:63:
fd:d8:6d:3b:b6:5a:2d:c1:2b:bc:74:b7:b9:dd:ea:
cc:8e:82:ca:f3:4a:04:ab:47:7c:cd:37:37:33:89:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BA:89:A4:52:09:40:F2:39:BD:56:95:38:46:22:55:F8:4D:AA:BE
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38372e3138302e302f32322d3232203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.180.0/22
Signature Algorithm: sha256WithRSAEncryption
27:26:8f:55:1c:5b:4c:3c:19:79:11:23:4f:0c:ad:5c:a0:ad:
cd:c6:be:d5:43:e1:46:4b:6a:6d:c6:29:39:9c:db:00:e1:d0:
c5:6c:cf:f3:21:73:52:3e:64:a7:b1:52:ed:2c:4f:7e:3c:1d:
d4:89:f8:54:18:40:82:50:87:66:5b:14:c5:e9:2a:d6:b9:65:
a3:b5:4a:93:39:01:9b:98:a1:07:b4:ea:76:83:d1:66:d3:30:
ce:31:fb:a5:25:4a:fa:92:b6:72:52:80:7c:5c:bf:f1:13:14:
89:3a:94:44:2c:17:12:50:59:75:89:7b:72:e3:1b:80:e3:31:
ac:e0:59:44:43:98:ca:ec:f3:29:0c:8a:e5:f4:e6:7d:3b:8a:
80:62:a1:cc:56:49:3a:dd:61:21:30:8e:e7:a6:0c:95:39:0c:
6f:23:d4:78:b1:d6:99:f7:c6:a2:37:42:b6:e8:cf:03:e1:44:
01:84:7a:72:77:17:56:8a:eb:cd:c7:53:5c:8c:50:c0:ba:96:
2e:8b:fa:7c:1f:90:f1:ec:34:ed:e9:69:3a:01:e4:c7:2c:ef:
f7:c9:a5:56:01:33:b9:25:eb:71:2b:12:57:43:39:4d:d4:9b:
c1:52:69:43:7d:4f:bf:43:50:bc:17:db:a3:74:de:fb:3e:59:
b8:89:e2:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:02:31 2026 by rpki-client