
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa
File: 3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa (raw, json)
Hash identifier: vd8lbbYkISGhXkrGR7wrLVtygtqfX/04YClqmQzjtHU=
Subject key identifier: AF:50:17:D7:65:F6:A5:23:22:A7:44:CF:19:A4:F3:79:6F:44:B8:9B
Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3
Certificate serial: 67554B2734F609696D86DC1785D421E895AC8F42
Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa
Signing time: Wed 22 Jul 2026 01:46:42 +0000
ROA not before: Wed 22 Jul 2026 01:41:42 +0000
ROA not after: Wed 21 Jul 2027 01:46:42 +0000
asID: 139090
IP address blocks: 103.139.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:55:4b:27:34:f6:09:69:6d:86:dc:17:85:d4:21:e8:95:ac:8f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3
Validity
Not Before: Jul 22 01:41:42 2026 GMT
Not After : Jul 21 01:46:42 2027 GMT
Subject: CN=AF5017D765F6A52322A744CF19A4F3796F44B89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:97:c7:50:7a:f1:e2:e5:dd:e5:78:2a:3a:
cf:86:4e:ab:34:f5:77:a5:24:f1:89:cd:ea:ef:c7:
74:bd:6e:26:25:18:57:77:7d:03:0e:01:c4:a8:f4:
46:d8:da:94:16:64:da:bc:1d:13:df:fd:2c:6a:a0:
7d:17:44:82:09:38:db:46:f3:4e:cb:36:15:d8:c5:
16:02:70:6b:d9:83:d8:98:ce:94:a2:a7:18:43:cf:
db:20:e9:c8:ab:fe:30:6c:54:ad:ea:ab:47:db:8a:
23:d3:82:dc:e7:6a:6e:5f:03:b6:1f:08:60:c4:a5:
91:f0:c0:55:3f:65:94:6d:2b:48:02:c1:8a:a0:fd:
0f:6c:30:20:76:e7:ce:1c:20:01:9b:a6:64:62:4e:
77:c7:a9:34:2d:10:12:8d:c2:e8:d4:97:6a:2e:8a:
2c:e4:04:dd:5c:5d:66:30:5b:76:a1:8e:61:f6:53:
03:71:a2:7a:bd:41:fb:f5:40:8b:a1:90:3a:1a:2b:
9c:b1:e7:00:20:29:9b:c4:7e:88:b1:d2:42:05:4c:
de:02:08:66:0a:b5:21:c9:e2:44:bb:91:a1:a3:5e:
70:e6:16:07:cf:df:cb:50:05:ef:a7:11:72:90:4e:
39:f4:0d:26:d6:6e:77:a7:06:31:ee:61:2f:e4:3f:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:50:17:D7:65:F6:A5:23:22:A7:44:CF:19:A4:F3:79:6F:44:B8:9B
X509v3 Authority Key Identifier:
keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:99:79:6a:f2:46:34:a1:e3:98:90:2e:34:d3:ed:1c:54:ee:
d4:92:f1:69:d1:3b:98:f5:08:41:05:e1:d2:d4:a6:2b:62:2b:
1f:75:7b:38:1f:ad:ed:16:55:3d:ab:c4:e2:4e:8a:a9:af:ed:
12:76:86:f7:23:ef:fe:da:16:d0:27:87:89:d8:19:e1:7a:3a:
5f:c9:a8:f1:57:02:16:02:4f:00:3f:d4:22:9d:00:26:0c:82:
68:39:c0:ed:07:65:18:dc:b2:2d:0c:dd:69:56:9c:ac:69:6c:
0d:cf:57:8d:1c:a8:fa:ae:56:20:55:74:cf:c5:10:83:af:b7:
c1:96:e3:4f:82:4a:7c:79:9d:24:c6:17:1a:7d:d6:fb:2a:85:
56:71:1b:46:aa:37:76:09:d3:e8:a6:9f:74:83:b5:d0:f1:6b:
b3:91:8f:df:d9:29:94:d3:61:88:be:c1:98:de:ae:9f:0f:f6:
79:96:2c:4b:ca:12:c7:ff:88:d0:05:9c:63:87:01:2e:57:29:
2f:4c:2f:74:80:df:9d:60:55:5b:d3:8d:c0:ef:98:3f:34:11:
7c:24:e1:f8:49:3b:14:b9:c2:9e:66:87:77:bd:7f:19:0e:a4:
ef:cc:b7:45:97:bd:3a:6c:1e:12:69:53:43:97:38:c5:36:ba:
41:e6:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:22 2026 by rpki-client