
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3230332e3130372e302e302f31372d3234203d3e203337393633.roa
File: 3230332e3130372e302e302f31372d3234203d3e203337393633.roa (raw, json)
Hash identifier: bRApqqz3k6oxvIJTSV6msR1IAeD7JSzLcHtSPJhM25k=
Subject key identifier: 9A:71:39:21:9F:1D:D9:C6:2F:01:9A:32:13:D5:BC:54:92:03:E6:59
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 0648F51687F75E1303966C0D307F5ABD9F9F946C
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3230332e3130372e302e302f31372d3234203d3e203337393633.roa
Signing time: Mon 11 May 2026 16:31:28 +0000
ROA not before: Mon 11 May 2026 16:26:28 +0000
ROA not after: Mon 10 May 2027 16:31:28 +0000
asID: 37963
IP address blocks: 203.107.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:48:f5:16:87:f7:5e:13:03:96:6c:0d:30:7f:5a:bd:9f:9f:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: May 11 16:26:28 2026 GMT
Not After : May 10 16:31:28 2027 GMT
Subject: CN=9A7139219F1DD9C62F019A3213D5BC549203E659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:38:26:7c:a8:74:97:2e:50:5c:23:db:06:
77:fe:0c:8e:99:7d:80:8b:7a:03:40:8f:31:9a:5c:
6d:d3:59:c2:6e:e9:8a:1d:e8:22:91:fe:d4:15:47:
9d:85:85:6a:dd:a8:d3:fd:b9:88:22:df:1c:f9:7a:
c2:ee:22:d3:0e:38:9b:58:ae:0c:f2:40:74:a0:fd:
4e:ee:38:93:9f:55:7c:17:a0:dc:26:9a:47:25:2e:
c1:cf:c7:ca:8c:16:45:e8:32:95:43:5b:ac:65:3b:
69:79:3c:65:20:6c:e3:8d:ce:50:64:05:91:09:a8:
46:fa:9f:3e:3c:cc:13:31:2b:c2:db:ab:08:73:2f:
a5:e2:30:9f:77:50:c2:5b:5a:d5:4d:6a:2f:83:30:
01:73:f1:02:39:ef:bf:c2:99:a2:ae:99:99:5e:e1:
f7:40:2d:94:90:2e:39:cf:3a:73:0f:60:e8:83:ac:
8b:b4:b2:44:a1:a1:f4:55:c8:a6:00:4e:a8:4f:a8:
88:85:7f:01:b6:13:ab:80:be:5c:65:7e:e5:24:8f:
53:4e:96:a1:15:52:46:26:6c:e9:d0:02:c1:8e:2c:
54:fb:20:06:05:88:f7:95:af:40:27:27:96:dc:d3:
2b:9e:97:48:fa:9c:b8:b6:5e:a1:68:9c:4a:84:42:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:39:21:9F:1D:D9:C6:2F:01:9A:32:13:D5:BC:54:92:03:E6:59
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3230332e3130372e302e302f31372d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.107.0.0/17
Signature Algorithm: sha256WithRSAEncryption
98:20:ca:8a:ff:37:cf:a5:20:c1:69:4b:36:a7:6d:2e:87:63:
87:9e:29:25:b1:a8:88:1c:2b:19:0e:00:e2:31:a1:b1:98:82:
6e:0f:c7:de:48:76:32:34:f9:b5:59:38:d8:de:f5:20:95:34:
05:cb:68:4c:74:60:67:cb:bf:21:f5:ec:1d:30:1d:e4:7d:78:
e3:ed:2d:09:96:2b:ee:fd:4e:5a:f6:84:91:81:a3:28:e9:41:
fe:75:bc:d1:fa:e3:8f:b7:f7:3c:2d:18:68:14:02:a9:10:73:
86:8d:14:43:2b:e4:b4:b8:ed:86:bd:77:e3:1b:3b:21:51:a7:
e5:8f:fa:0b:98:d5:05:76:c4:64:ff:05:5e:63:0e:65:60:08:
49:d6:0b:45:1a:49:f9:1e:ef:be:82:2f:15:7a:d4:1d:bb:92:
a6:d3:cb:1d:be:d1:fe:8c:7d:65:b9:01:a2:50:96:f9:a6:67:
e4:df:25:1e:06:7d:6e:07:31:f3:d5:25:cd:eb:14:38:5b:40:
50:31:71:2a:b3:d8:19:6a:03:0f:74:01:51:12:0b:33:06:f5:
4a:c8:a5:cc:0b:7f:f2:bf:5d:7b:6b:b7:d1:c4:4f:bc:b2:bb:
fe:65:09:53:cd:d9:cd:6c:dd:ce:30:2a:81:14:43:62:f7:45:
6b:75:4e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:35 2026 by rpki-client