
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa
File: 3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa (raw, json)
Hash identifier: nLGhDHJd/7rK44szUZ5Kzu32mo/lJeTWCIKFN5gT67c=
Subject key identifier: 1B:D8:31:E0:42:EE:A6:09:80:95:4D:31:C0:0F:E9:81:44:99:CF:0F
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 19EBFD00CD60464A2897F8E655ACC0DAA81BA84A
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa
Signing time: Mon 11 May 2026 02:50:14 +0000
ROA not before: Mon 11 May 2026 02:45:14 +0000
ROA not after: Mon 10 May 2027 02:50:14 +0000
asID: 58854
IP address blocks: 103.236.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:eb:fd:00:cd:60:46:4a:28:97:f8:e6:55:ac:c0:da:a8:1b:a8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: May 11 02:45:14 2026 GMT
Not After : May 10 02:50:14 2027 GMT
Subject: CN=1BD831E042EEA60980954D31C00FE9814499CF0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:59:18:1a:52:df:e4:db:6c:f2:07:c2:85:
cb:01:b0:fe:d5:dd:43:37:96:23:ce:22:e3:7b:0b:
73:78:6d:ac:1d:c6:18:1f:2f:5e:77:1a:f9:ac:24:
3d:be:94:76:30:12:32:15:1d:3b:6c:3b:ad:a6:b5:
82:8a:61:8f:8d:32:d8:ff:52:c8:24:21:53:29:ca:
b3:e9:9e:35:1e:3f:96:26:5d:c1:65:b2:3e:b4:39:
b5:33:e7:d7:29:bc:73:1d:f4:68:f7:48:bb:d7:8b:
7c:b5:47:d6:c4:3b:7e:23:a1:6e:fa:43:a2:22:2d:
c1:eb:46:01:42:ae:76:3a:36:79:d4:f3:6c:b9:f9:
5e:8c:9e:76:37:0c:34:2d:79:0f:1d:9b:8d:ed:8f:
d5:c4:8e:ed:c0:50:51:e2:41:cb:a6:18:eb:4c:1f:
4b:7e:e6:8e:7d:53:3d:9f:d6:d5:cd:b3:3c:42:0e:
8f:e1:f8:18:f4:a0:82:cc:c1:ae:b6:48:25:68:1a:
72:93:7c:0e:82:a1:0d:b7:cc:2d:a8:18:47:df:33:
2a:f0:02:61:62:03:00:5f:e7:e1:02:31:e2:09:c4:
30:fb:2c:8c:94:df:aa:88:cf:68:6a:67:8a:ac:92:
03:da:d2:4b:e5:48:d3:48:02:99:48:93:90:75:16:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:31:E0:42:EE:A6:09:80:95:4D:31:C0:0F:E9:81:44:99:CF:0F
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.252.0/22
Signature Algorithm: sha256WithRSAEncryption
44:8c:c4:fc:e8:c5:db:48:39:57:09:a8:4a:42:74:e5:10:91:
cd:55:4d:04:c1:9f:62:e2:e2:9a:09:5a:41:07:90:9d:fb:86:
e5:eb:5d:8d:0d:6e:e6:b0:b4:97:3e:fe:44:2a:06:f9:08:68:
d6:0c:1f:32:09:cd:50:7f:33:e5:1a:da:88:42:11:da:a1:d3:
66:0c:3e:c5:c5:9b:7a:38:08:18:a8:77:7d:30:69:f4:e9:09:
d6:d0:f9:07:7f:9b:f5:fe:9e:e9:49:66:aa:94:bd:88:e3:31:
4d:78:f2:6e:47:ae:54:55:9e:f4:6b:49:87:da:ac:8c:f5:8c:
e0:b3:ab:16:8a:b8:2a:68:35:79:39:0a:28:a1:c8:88:6e:b8:
e9:28:7a:d5:95:96:e0:c5:05:7d:4c:0b:99:0a:f6:20:99:26:
e7:83:10:2a:21:42:f1:40:bf:0c:b2:da:22:ac:a1:f9:5b:0a:
a9:5a:bb:34:fe:c9:4a:f8:4f:b0:0e:d0:12:c4:32:bc:af:a2:
dc:2f:47:bc:90:9b:d0:c6:d7:ba:92:e0:0e:9a:d8:59:2b:6a:
84:4b:57:87:ac:da:1a:30:1f:eb:a6:0a:71:7e:1c:1a:2c:3b:
44:ad:1b:8f:00:69:60:55:c0:f6:95:57:7a:26:34:1a:e6:c1:
0d:6d:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:14 2026 by rpki-client