
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3232203d3e203233363530.roa
File: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=
Subject key identifier: 81:5E:4C:95:B0:E6:D5:C0:05:C3:A9:AA:1C:60:F0:69:B8:62:CD:7E
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 43269DFAF3BE9315E0433808472003B481A84C87
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3232203d3e203233363530.roa
Signing time: Tue 16 Jun 2026 02:01:46 +0000
ROA not before: Tue 16 Jun 2026 01:56:46 +0000
ROA not after: Tue 15 Jun 2027 02:01:46 +0000
asID: 23650
IP address blocks: 103.208.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:26:9d:fa:f3:be:93:15:e0:43:38:08:47:20:03:b4:81:a8:4c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Jun 16 01:56:46 2026 GMT
Not After : Jun 15 02:01:46 2027 GMT
Subject: CN=815E4C95B0E6D5C005C3A9AA1C60F069B862CD7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:a9:9b:19:19:57:5d:76:1a:e1:89:c3:3c:
01:c1:1c:3f:39:2a:d2:83:6c:44:6f:fa:31:83:ae:
e3:5a:6d:ae:94:20:23:38:0a:4d:e2:bc:42:9c:c7:
e3:76:f4:03:ca:67:17:3d:36:b9:86:fb:57:a9:28:
24:19:17:af:78:0d:fd:47:aa:82:fd:bf:fc:41:2b:
2a:5c:bf:8e:82:e8:af:0c:17:9f:a1:8b:8c:3f:42:
b1:1a:19:8a:7a:8a:0a:38:5c:c3:ef:66:b7:1d:0e:
3e:52:8e:58:f3:ab:ac:11:6a:13:df:64:b8:47:db:
b7:13:04:59:0f:71:e3:fc:c0:b9:0b:1c:3a:4b:a5:
39:ad:ae:a2:4d:a8:ba:9a:0a:ac:2d:d7:1d:01:b9:
ab:c8:0d:2b:53:83:82:a7:23:7a:73:c8:ac:df:2d:
0f:9b:e0:c3:f9:55:3b:17:15:c0:d5:2a:80:99:cf:
fd:7f:56:bb:e2:13:45:9b:9c:6a:34:7c:b5:92:bd:
aa:d9:5c:01:aa:c2:19:88:7f:42:0b:2d:a1:d3:b0:
38:0f:b6:50:73:c0:82:d1:9e:fc:7c:91:7d:fb:ca:
b4:99:fb:61:f0:5c:60:2e:8d:c5:96:5b:ac:04:f5:
ba:28:59:f4:d8:8b:eb:67:36:d0:91:3e:11:78:9e:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:4C:95:B0:E6:D5:C0:05:C3:A9:AA:1C:60:F0:69:B8:62:CD:7E
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3232203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ff:cf:16:fb:36:62:8f:3e:b5:61:0a:56:83:b2:92:b8:3a:
11:bd:c1:23:6a:30:a3:0e:40:b9:2b:08:e5:a9:27:7e:d0:b3:
dc:be:09:d9:b4:d1:50:f2:0f:19:b9:99:64:90:fc:a7:1e:c1:
c8:8f:62:3f:b3:31:25:db:5d:66:a7:e5:a1:c4:f3:b6:8e:71:
77:62:0c:66:82:e1:d8:f5:3f:59:5a:7a:04:49:2b:f3:d4:59:
fc:93:22:93:8b:38:91:30:69:0d:14:19:38:4a:32:86:fc:ee:
3f:9b:24:a7:d2:38:d2:b4:35:8e:55:f0:4b:b9:bf:e7:de:2e:
f8:3c:cd:7c:83:a9:11:28:b1:91:d0:78:31:dd:6b:36:b4:1b:
39:0b:64:f4:d2:f9:2d:5e:88:a8:81:8c:84:32:09:71:98:c4:
71:8e:51:1c:73:4d:0b:58:c6:11:cf:2b:22:9e:de:cb:37:63:
80:30:7b:60:0c:58:df:2d:ca:4b:cd:e7:6f:3f:07:b8:77:70:
34:e0:86:e8:7c:2b:7d:56:89:c9:ae:ff:a0:e7:e7:52:1a:70:
e5:42:0d:54:26:1b:c3:c7:5d:99:45:de:3c:73:c3:94:0c:c0:
6e:00:48:17:3d:bd:cf:38:ff:78:07:90:8b:1f:b7:8b:17:5d:
64:d1:96:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:21:24 2026 by rpki-client