
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa
File: AS13378.roa (raw, json)
Hash identifier: OPyi8mTllKWBTmPe21LoqwD2zrSCH/8SJK7Z44pkkFs=
Subject key identifier: E4:D1:C7:23:88:FF:0D:A3:A0:B9:9B:40:44:5B:DB:12:E3:D8:DD:21
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 6F31FF0515A9D03C92DF492C00DF76A5A0B3CD13
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa
Signing time: Tue 14 Jul 2026 07:19:54 +0000
ROA not before: Tue 14 Jul 2026 07:14:54 +0000
ROA not after: Tue 13 Jul 2027 07:19:54 +0000
asID: 13378
IP address blocks: 43.248.184.0/21 maxlen: 24
103.40.12.0/22 maxlen: 22
103.45.160.0/22 maxlen: 24
103.205.252.0/22 maxlen: 24
103.239.244.0/22 maxlen: 24
111.223.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:31:ff:05:15:a9:d0:3c:92:df:49:2c:00:df:76:a5:a0:b3:cd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Jul 14 07:14:54 2026 GMT
Not After : Jul 13 07:19:54 2027 GMT
Subject: CN=E4D1C72388FF0DA3A0B99B40445BDB12E3D8DD21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:03:21:f1:bb:33:ca:5e:9c:36:f4:70:f1:
ec:91:ca:33:4a:93:64:b5:8f:20:23:39:8a:a6:45:
c5:ee:8f:87:22:c7:72:56:54:91:c8:5e:ef:e3:91:
39:7f:0b:ee:2b:05:22:3c:ca:b8:f7:d6:9a:47:94:
f1:8f:21:b2:3e:b4:e0:7f:16:cf:d0:7e:ba:d9:93:
ef:0f:dc:67:13:ad:46:f0:5d:37:70:0a:dc:d0:e4:
f5:15:24:cd:42:93:c8:9f:78:6f:6f:07:dd:65:d2:
92:bf:06:fd:ea:88:45:ba:2f:dd:e4:80:29:ce:7b:
5d:93:52:b6:d4:9d:a8:18:7f:9e:96:e1:02:5f:df:
c7:ce:ac:ab:83:36:26:dc:75:03:03:bd:eb:63:fa:
5a:e8:ab:41:c1:76:8d:88:30:96:8b:4d:ab:85:c6:
bc:cf:a0:e5:a8:37:80:b0:95:f1:06:f3:27:20:29:
b9:ef:3a:50:61:86:71:6d:9a:20:99:67:86:50:20:
f4:4c:6f:4a:f2:d4:8d:55:a2:ad:e2:03:61:d3:b3:
9a:10:76:c6:5f:a3:a6:0a:3a:24:45:07:ac:77:fc:
d0:1b:8c:42:10:8d:d7:ae:f6:e0:43:a3:3b:ee:ca:
b4:94:37:f5:1d:ff:bd:62:aa:9d:0b:e1:32:57:15:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:C7:23:88:FF:0D:A3:A0:B9:9B:40:44:5B:DB:12:E3:D8:DD:21
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.184.0/21
103.40.12.0/22
103.45.160.0/22
103.205.252.0/22
103.239.244.0/22
111.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
61:9b:72:42:67:e5:74:89:ff:fa:a4:8d:76:e7:4b:ee:29:65:
bb:0b:98:42:b6:5d:a7:f4:5a:11:63:28:09:f5:01:de:d3:d3:
0b:37:82:e0:ba:1f:68:5c:55:2a:c3:29:90:df:af:fa:e8:7d:
db:68:7c:cb:aa:ab:ab:7b:63:be:98:37:41:03:96:87:71:d2:
71:31:69:84:4a:a9:47:d5:1f:9f:48:5d:4e:fc:33:2a:f2:d7:
8e:d0:b1:de:6e:11:64:6d:70:d3:e5:7f:bf:91:d2:c3:35:5a:
8c:38:0a:78:1f:4a:9c:b4:ac:16:a4:a1:ca:c6:26:b5:7d:40:
43:76:e4:c9:28:7e:f1:e8:87:a4:12:77:84:bb:80:e1:a9:2f:
12:0a:42:e1:5f:c0:90:cc:29:6f:96:22:36:b8:fc:e7:a7:1a:
03:96:82:10:1e:f6:a1:9a:7a:b3:d8:d7:7b:5b:98:b8:d4:c3:
c2:b7:5c:b7:93:f2:ba:bd:5d:d6:d6:cf:fd:4e:c8:1e:09:6a:
6f:ab:3d:4b:bb:79:53:d2:44:85:77:e1:92:4a:87:b8:90:bd:
06:3c:f7:40:f8:e4:f1:f5:ec:9b:32:17:08:f0:e0:92:3e:ec:
3a:cd:f4:21:ed:d7:48:88:40:b5:97:b5:cf:51:d0:f2:f7:7e:
4b:3a:cc:91
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUbzH/BRWp0DyS30ksAN92paCzzRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA3MTQwNzE0NTRaFw0yNzA3MTMwNzE5NTRaMDMxMTAvBgNV
BAMTKEU0RDFDNzIzODhGRjBEQTNBMEI5OUI0MDQ0NUJEQjEyRTNEOEREMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XAMh8bszyl6cNvRw8eyRyjNK
k2S1jyAjOYqmRcXuj4cix3JWVJHIXu/jkTl/C+4rBSI8yrj31ppHlPGPIbI+tOB/
Fs/QfrrZk+8P3GcTrUbwXTdwCtzQ5PUVJM1Ck8ifeG9vB91l0pK/Bv3qiEW6L93k
gCnOe12TUrbUnagYf56W4QJf38fOrKuDNibcdQMDvetj+lroq0HBdo2IMJaLTauF
xrzPoOWoN4CwlfEG8ycgKbnvOlBhhnFtmiCZZ4ZQIPRMb0ry1I1Voq3iA2HTs5oQ
dsZfo6YKOiRFB6x3/NAbjEIQjdeu9uBDozvuyrSUN/Ud/71iqp0L4TJXFfVFAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQU5NHHI4j/DaOguZtARFvbEuPY3SEwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzEzMzc4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIA
ATAkAwQDK/i4AwQCZygMAwQCZy2gAwQCZ838AwQCZ+/0AwQCb98MMA0GCSqGSIb3
DQEBCwUAA4IBAQBhm3JCZ+V0if/6pI1250vuKWW7C5hCtl2n9FoRYygJ9QHe09ML
N4Lguh9oXFUqwymQ36/66H3baHzLqqure2O+mDdBA5aHcdJxMWmESqlH1R+fSF1O
/DMq8teO0LHebhFkbXDT5X+/kdLDNVqMOAp4H0qctKwWpKHKxia1fUBDduTJKH7x
6IekEneEu4DhqS8SCkLhX8CQzClvliI2uPznpxoDloIQHvahmnqz2Nd7W5i41MPC
t1y3k/K6vV3W1s/9TsgeCWpvqz1Lu3lT0kSFd+GSSoe4kL0GPPdA+OTx9eybMhcI
8OCSPuw6zfQh7ddIiEC1l7XPUdDy935LOsyR
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:24 2026 by rpki-client