
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa
File: 3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa (raw, json)
Hash identifier: Kqvu3gp6OHhgSZJSSxhvDaYWPDX1Qo8zwYxhwHJDdoc=
Subject key identifier: 50:34:23:17:5D:23:8E:0D:1B:A5:9F:0D:8D:AB:C4:18:1E:2F:23:56
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 73BBF4784AFE7B87BC2C760751AC6B5BD96E317F
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa
Signing time: Mon 11 May 2026 02:49:04 +0000
ROA not before: Mon 11 May 2026 02:44:04 +0000
ROA not after: Mon 10 May 2027 02:49:04 +0000
asID: 133774
IP address blocks: 103.64.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bb:f4:78:4a:fe:7b:87:bc:2c:76:07:51:ac:6b:5b:d9:6e:31:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: May 11 02:44:04 2026 GMT
Not After : May 10 02:49:04 2027 GMT
Subject: CN=503423175D238E0D1BA59F0D8DABC4181E2F2356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:2b:6a:ed:64:a3:2e:a5:ea:1e:12:60:46:
c2:cc:25:96:50:cb:70:87:75:dd:f4:66:06:6e:37:
c0:e2:d4:a7:44:e1:71:ae:36:8a:47:89:9a:b8:e4:
63:43:54:4b:e4:78:19:d4:00:8e:5c:09:2b:e9:89:
c5:b5:0e:d0:19:9b:d5:de:85:98:3d:4d:3f:06:10:
bb:7a:44:b0:98:51:a9:a4:a4:fd:cb:6c:b6:24:18:
33:3d:b0:6a:09:98:54:0c:16:25:63:fc:bb:77:3f:
5f:18:7c:47:3a:ff:67:3c:f9:de:a2:8e:c8:29:70:
ce:58:0f:dc:7c:b8:ff:29:82:e0:74:c8:16:f4:8f:
30:12:78:59:6a:53:b4:05:ce:70:f8:09:31:0e:2a:
c5:12:69:79:8d:8c:7b:a9:5a:df:52:f7:b6:d6:44:
d8:5a:c0:b5:b5:86:07:92:2a:4e:14:38:45:29:d6:
29:3a:f7:b4:49:7d:fe:dc:7c:98:5b:b8:8b:f3:c6:
07:54:66:bc:bf:a6:51:96:3b:bb:71:3d:c1:a4:85:
dc:cd:68:76:de:f4:f4:4a:db:36:14:cd:80:01:4e:
40:d4:27:a4:9b:c1:ad:46:86:20:d8:c6:42:2e:0e:
82:fc:0e:84:ce:34:95:e1:06:1a:ed:9b:0d:a4:be:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:23:17:5D:23:8E:0D:1B:A5:9F:0D:8D:AB:C4:18:1E:2F:23:56
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.64.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:72:bd:1b:cc:20:c3:8e:0a:95:4b:f8:f6:f6:6a:61:42:c4:
97:bf:2d:e3:24:1e:fb:fd:3e:64:a1:5a:9b:30:54:21:87:f5:
ca:40:e7:9f:a3:27:2d:fe:6f:8f:cd:46:42:a8:9b:ac:91:cd:
bb:7f:4d:3b:50:b3:1c:f2:c7:0d:30:1b:6e:ca:a8:8e:79:a6:
84:3f:d3:30:1d:cc:29:ab:1d:04:d0:07:88:75:e5:a2:79:45:
db:94:c9:cb:de:23:24:98:a2:ec:76:a7:77:0a:ac:90:27:0e:
74:41:67:07:5a:6d:6f:0e:55:21:58:02:ca:aa:a3:5b:92:c2:
da:ed:0e:6b:48:bc:45:b3:d0:2c:87:78:4b:da:68:f3:32:d9:
c2:b9:ff:b9:12:b4:35:87:59:71:e8:66:ad:f3:9a:6e:6e:d2:
cd:46:cd:40:56:5c:b5:5f:0f:de:eb:3c:93:25:cd:93:e7:8a:
49:ed:1d:df:32:e5:6b:23:6f:72:b6:c1:a1:d5:ef:5e:a2:45:
fd:44:a7:37:06:dc:89:0b:da:e4:02:e8:ae:fb:24:10:c4:44:
ae:8d:11:01:12:da:43:84:20:c5:4c:88:ba:11:35:65:35:bc:
60:4b:95:00:b8:45:d5:55:29:bb:c1:09:b1:e9:cc:5a:59:85:
69:de:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:39 2026 by rpki-client