
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135332e302f32342d3234203d3e203536303436.roa
File: 3130332e3231362e3135332e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: WQDD4gBfafGInbjJn+g3Oxnr1hclFzX/JufRUC13fn8=
Subject key identifier: 39:E1:1A:71:1C:BE:0A:32:3F:3A:7C:FA:4F:EF:58:87:68:14:27:1A
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 3203231E497314D28B4542D9C6E9E9F01FFB96B7
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135332e302f32342d3234203d3e203536303436.roa
Signing time: Tue 12 May 2026 05:14:16 +0000
ROA not before: Tue 12 May 2026 05:09:16 +0000
ROA not after: Tue 11 May 2027 05:14:16 +0000
asID: 56046
IP address blocks: 103.216.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:03:23:1e:49:73:14:d2:8b:45:42:d9:c6:e9:e9:f0:1f:fb:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: May 12 05:09:16 2026 GMT
Not After : May 11 05:14:16 2027 GMT
Subject: CN=39E11A711CBE0A323F3A7CFA4FEF58876814271A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:c3:4a:ad:9c:51:1d:e2:fa:fb:2c:c6:a3:
33:d6:f4:7b:ea:b3:5f:66:82:59:0e:f8:43:2a:14:
d4:9f:4e:b6:3e:70:49:34:cb:59:61:61:7a:b4:30:
10:8e:55:26:16:ee:3d:7c:df:a7:db:c9:c5:a0:6f:
50:d3:d4:2d:70:8c:87:4a:68:c5:5b:6f:f8:df:45:
8b:ea:59:78:f2:ce:72:89:1b:63:38:43:2f:1b:ad:
44:d8:7f:39:46:0a:e5:13:d2:c9:da:b3:d7:da:a6:
9a:bb:ff:3c:a4:de:53:0c:ac:86:b8:51:cb:5c:94:
c8:af:68:26:40:95:05:4d:58:59:48:66:61:a3:f8:
44:bd:00:3f:35:67:08:60:6b:d3:e0:7b:31:27:11:
5b:a9:fc:0e:dd:76:b9:c9:f5:3b:92:0d:dd:33:bd:
96:b5:96:59:1e:14:32:1d:08:d3:42:1f:b3:e1:49:
fb:0f:3c:01:b7:99:c3:45:b7:87:be:68:54:16:fd:
5c:83:88:d1:5a:7b:4b:b6:1b:bf:1c:9b:9e:99:24:
6d:be:74:51:82:18:9a:7d:5a:46:c8:28:2f:9b:d4:
ba:ff:2c:e3:ab:84:84:73:8e:8c:e1:3b:8d:d6:b9:
3d:c6:44:11:ea:9f:dd:58:7a:f7:14:4a:e4:02:9d:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:1A:71:1C:BE:0A:32:3F:3A:7C:FA:4F:EF:58:87:68:14:27:1A
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135332e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.153.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b6:2c:65:eb:64:b8:60:7b:22:8c:b8:10:89:81:0f:23:5b:
96:c4:b4:22:48:0c:8e:e7:a3:7d:23:38:6c:af:c7:06:32:79:
f2:79:35:21:27:99:cc:e0:ec:cf:1f:f5:c8:e4:41:7e:37:bd:
59:e4:01:c6:77:33:ec:7f:39:c9:10:77:d2:62:ab:24:0a:82:
7e:d4:9b:40:51:ff:13:28:64:7a:ac:d8:2f:03:53:16:8d:a2:
7a:e1:d9:12:ca:cf:4e:d1:69:e8:09:47:a6:0e:53:0d:f8:04:
5d:fe:5f:16:93:b4:4d:1b:10:06:f8:81:89:9e:d9:99:eb:3c:
a6:50:f7:76:2a:39:00:99:f4:d9:b0:b4:d5:32:31:77:d2:12:
9d:e7:3e:3b:99:dc:26:17:76:2b:0b:ab:a0:6e:c6:ba:48:62:
a0:22:87:65:ed:b0:a5:b5:e2:4e:dc:02:7a:bc:f4:32:11:bd:
54:44:12:09:a4:eb:b3:f0:22:01:ad:f2:ca:d3:3c:74:93:a2:
1c:5a:86:92:da:44:5b:ce:fe:84:97:fb:69:9e:8d:00:bd:cd:
f2:89:d1:31:e2:3d:6d:3e:96:97:36:d7:1a:e4:28:f7:76:a2:
1f:93:35:cf:91:29:8a:61:72:df:a5:88:a8:d7:7c:a2:24:f7:
1f:d5:e9:4d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUMgMjHklzFNKLRULZxunp8B/7lrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA1MTIwNTA5MTZaFw0yNzA1MTEwNTE0MTZaMDMxMTAvBgNV
BAMTKDM5RTExQTcxMUNCRTBBMzIzRjNBN0NGQTRGRUY1ODg3NjgxNDI3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLjsNKrZxRHeL6+yzGozPW9Hvq
s19mglkO+EMqFNSfTrY+cEk0y1lhYXq0MBCOVSYW7j1836fbycWgb1DT1C1wjIdK
aMVbb/jfRYvqWXjyznKJG2M4Qy8brUTYfzlGCuUT0snas9fappq7/zyk3lMMrIa4
UctclMivaCZAlQVNWFlIZmGj+ES9AD81Zwhga9PgezEnEVup/A7ddrnJ9TuSDd0z
vZa1llkeFDIdCNNCH7PhSfsPPAG3mcNFt4e+aFQW/VyDiNFae0u2G78cm56ZJG2+
dFGCGJp9WkbIKC+b1Lr/LOOrhIRzjozhO43WuT3GRBHqn91YevcUSuQCneo/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUOeEacRy+CjI/Onz6T+9Yh2gUJxowHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC8zMTMwMzMyZTMy
MzEzNjJlMzEzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfYmTANBgkqhkiG9w0BAQsFAAOCAQEAhrYsZetkuGB7Ioy4EImB
DyNblsS0IkgMjuejfSM4bK/HBjJ58nk1ISeZzODszx/1yORBfje9WeQBxncz7H85
yRB30mKrJAqCftSbQFH/EyhkeqzYLwNTFo2ieuHZEsrPTtFp6AlHpg5TDfgEXf5f
FpO0TRsQBviBiZ7Zmes8plD3dio5AJn02bC01TIxd9ISnec+O5ncJhd2KwuroG7G
ukhioCKHZe2wpbXiTtwCerz0MhG9VEQSCaTrs/AiAa3yytM8dJOiHFqGktpEW87+
hJf7aZ6NAL3N8onRMeI9bT6WlzbXGuQo93aiH5M1z5EpimFy36WIqNd8oiT3H9Xp
TQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:36:48 2026 by rpki-client