
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32322d3234203d3e203535393936.roa
File: 3130332e3139372e302e302f32322d3234203d3e203535393936.roa (raw, json)
Hash identifier: 2dYsMdPxQQq0dbM51KB4uyQL5tG1ty3eINr4190tHeY=
Subject key identifier: EE:90:3A:8C:8C:D8:B5:F6:FD:DE:1A:37:DB:84:9B:8C:99:B7:5D:79
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 17436BD3C4D2E8018B0002A557D9D31AB33A6103
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32322d3234203d3e203535393936.roa
Signing time: Fri 17 Apr 2026 02:12:46 +0000
ROA not before: Fri 17 Apr 2026 02:07:46 +0000
ROA not after: Fri 16 Apr 2027 02:12:46 +0000
asID: 55996
IP address blocks: 103.197.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:43:6b:d3:c4:d2:e8:01:8b:00:02:a5:57:d9:d3:1a:b3:3a:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 02:07:46 2026 GMT
Not After : Apr 16 02:12:46 2027 GMT
Subject: CN=EE903A8C8CD8B5F6FDDE1A37DB849B8C99B75D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:e8:a0:f4:ff:15:14:5b:13:5c:e1:02:10:
aa:47:7d:67:56:cf:be:44:5a:77:5f:8a:0b:b3:a3:
4a:bc:67:3b:dc:52:80:b5:8a:dd:e0:7b:2c:fd:18:
3c:7e:ef:fe:89:df:26:87:da:9f:3e:f6:bc:6c:fa:
39:cd:4c:36:db:49:bb:20:7d:59:50:b0:b1:cf:08:
16:7c:d8:27:9e:99:bd:d3:91:c5:37:68:e7:88:04:
63:6d:ad:4d:af:a3:c7:2b:59:6e:60:33:61:dd:a4:
9b:bd:79:f9:17:6e:fb:07:05:c6:0d:59:ca:27:bc:
9b:b5:b6:df:4f:fd:9f:f4:fb:1f:0e:38:ee:71:e2:
fd:01:44:e2:e2:36:b9:3e:31:b3:42:d3:66:97:32:
37:43:96:19:de:73:07:33:10:dd:d1:dc:dc:6d:f8:
65:31:69:e7:2f:b2:fb:ca:1a:3d:b4:70:7f:0d:6e:
0d:91:5a:66:16:73:31:92:fe:73:6d:9c:e7:bf:7c:
3d:c3:97:0c:fe:f5:de:43:4a:d0:3c:a6:a4:f2:ef:
3e:1f:68:ec:8c:f9:7b:2e:27:ec:c3:22:61:37:10:
dc:8b:59:f2:4c:67:86:db:49:d9:3e:bc:0b:7f:e7:
20:08:92:fe:9e:c5:11:e8:6a:ca:a5:10:57:d5:e1:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:3A:8C:8C:D8:B5:F6:FD:DE:1A:37:DB:84:9B:8C:99:B7:5D:79
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32322d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:d9:8c:7d:c5:e8:39:77:c3:05:af:89:07:db:00:a0:5d:2c:
69:31:3c:6d:2e:54:80:ff:b6:6b:0c:fb:e3:3e:64:5a:ce:82:
06:b1:1f:db:67:ef:42:9c:13:24:cc:39:0f:f1:68:c1:12:0d:
ad:87:85:91:a1:2a:8f:b5:9f:37:e3:92:d0:c4:0c:28:b7:09:
9b:5f:5b:78:9d:9a:e4:5d:b7:92:cc:4e:2b:16:5c:b5:2c:79:
0b:b0:50:a7:1a:9b:20:93:8d:90:a1:4d:22:51:7e:4c:59:ad:
4d:8b:8a:23:74:ac:0d:db:5d:3e:67:d5:cc:71:39:64:0e:40:
6b:a8:dd:c5:70:64:94:b7:62:ca:f5:0f:0f:dd:a3:6c:bf:2e:
a4:6a:a8:11:18:89:8f:4c:b5:bf:de:bb:d9:43:e3:5b:1f:1b:
b3:6c:94:6c:7d:e0:8e:e3:6d:77:2f:00:69:74:6e:6e:47:a6:
fd:d7:d9:a3:ea:43:b2:09:0e:7e:e7:32:0c:74:2a:d5:fc:41:
57:75:f4:09:ea:ac:03:56:ba:8b:96:f1:b9:8f:77:f0:ad:31:
70:3e:27:fc:87:3f:79:fa:a7:7e:23:91:69:20:89:b8:1e:c1:
91:c2:3e:7a:ca:dc:21:c8:96:54:9c:ab:d8:12:ca:40:63:a1:
20:17:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:06 2026 by rpki-client