
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/3130332e36322e38392e302f32342d3234203d3e20313337373331.roa
File: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (raw, json)
Hash identifier: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=
Subject key identifier: 09:B2:13:89:60:C4:DC:58:70:F4:2A:A7:3F:AB:41:55:52:45:37:4B
Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
Certificate serial: 0FD0A244B85F09434729E519DE4B52BFBAD184E0
Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/3130332e36322e38392e302f32342d3234203d3e20313337373331.roa
Signing time: Mon 27 Apr 2026 02:48:02 +0000
ROA not before: Mon 27 Apr 2026 02:43:02 +0000
ROA not after: Mon 26 Apr 2027 02:48:02 +0000
asID: 137731
IP address blocks: 103.62.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d0:a2:44:b8:5f:09:43:47:29:e5:19:de:4b:52:bf:ba:d1:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
Validity
Not Before: Apr 27 02:43:02 2026 GMT
Not After : Apr 26 02:48:02 2027 GMT
Subject: CN=09B2138960C4DC5870F42AA73FAB41555245374B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:dd:ca:e4:28:8f:25:e9:2c:bf:8b:ac:2a:
73:7d:35:2b:fc:96:0f:7b:74:fb:0b:01:b3:7a:81:
ca:ed:da:5f:82:7b:e4:35:27:4b:ce:87:d1:50:f9:
aa:14:a8:f0:4a:f9:30:67:f4:c8:d6:23:e8:55:e4:
f0:8b:a5:25:e3:ef:c5:75:2f:44:9b:1b:99:9e:fa:
69:a3:97:0b:ab:c1:15:56:15:13:a0:19:cb:22:7f:
5e:c4:13:d4:5a:7a:90:97:2d:28:5b:e5:78:ff:e9:
37:a8:6b:19:4c:68:4a:f9:5f:29:1b:ff:5e:c4:6d:
bc:0e:e9:c3:20:06:77:71:74:0d:f0:6d:99:ec:a7:
d4:22:43:8a:ac:8b:9c:f1:26:d5:53:f3:4c:58:8c:
c6:14:4e:a1:d9:82:26:ca:ee:62:9b:93:cd:5f:a7:
dd:6f:e1:cc:45:42:08:3f:3e:03:90:e5:82:41:42:
30:e2:2b:f7:f2:9d:d3:7b:44:00:7d:73:e1:c3:7a:
6e:75:20:d4:7e:52:6f:88:60:3f:e9:94:29:2b:1b:
06:43:c6:05:f2:2b:29:14:21:5c:f4:aa:c3:c2:3d:
14:87:fb:1b:9d:c6:fd:16:c8:2b:7a:34:63:7d:2a:
f7:d6:78:19:14:07:77:da:b1:7d:be:de:20:70:80:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:13:89:60:C4:DC:58:70:F4:2A:A7:3F:AB:41:55:52:45:37:4B
X509v3 Authority Key Identifier:
keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/3130332e36322e38392e302f32342d3234203d3e20313337373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.62.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e5:e0:28:a6:6a:53:0c:34:c2:7e:5f:3c:0f:e0:80:26:85:
fe:77:a1:1f:21:b4:95:1e:e4:ec:14:14:f4:c2:e6:18:6f:87:
c9:6f:99:18:fb:a0:69:d2:c8:fa:47:bb:77:4d:da:94:4d:a1:
e0:f5:9a:6a:ad:42:06:fa:0c:90:d5:23:b4:9d:4e:b1:cf:d3:
87:18:b9:b0:3e:ad:b1:0d:fc:25:8f:6d:88:7f:7d:6b:f9:d9:
7a:a2:38:6d:f7:1f:11:6b:c9:dd:cf:8e:42:7d:7f:80:61:15:
5d:8b:9f:e2:55:18:83:5b:99:e6:0b:ef:fc:d1:96:2f:4d:62:
3e:87:fb:4f:6c:b2:df:ab:57:a1:02:4b:27:31:ba:4f:03:6d:
15:b7:2e:44:aa:e6:9a:ec:7f:95:24:0c:cd:c1:b3:30:41:50:
25:62:dd:e0:84:f9:6d:b6:d0:f3:64:4e:40:f2:72:8e:79:02:
e5:c8:cc:3b:91:89:dd:ae:23:5e:25:85:1b:27:db:b9:69:64:
e5:7a:c7:74:92:ac:50:c6:58:73:ef:d9:ec:0c:5a:8c:11:94:
3f:de:79:cf:f0:26:12:37:f1:0b:78:53:a1:bc:48:14:32:d2:
87:59:31:bc:3e:e5:a1:16:20:cd:72:db:91:28:b0:a7:5a:85:
99:83:54:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:31 2026 by rpki-client