
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32342d3234203d3e203538353432.roa
File: 3130332e3139372e322e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier: L5Lc268Tg7B7fCQPi478IpYhxl6p+IjBtKMqMgL6bjY=
Subject key identifier: A2:31:D4:41:4C:D5:C7:E7:7E:F0:65:DA:91:EE:60:90:51:4D:A9:A5
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 7C8B079A3A603C694A1A2F4E66931A61C58039FB
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32342d3234203d3e203538353432.roa
Signing time: Fri 17 Apr 2026 02:12:46 +0000
ROA not before: Fri 17 Apr 2026 02:07:46 +0000
ROA not after: Fri 16 Apr 2027 02:12:46 +0000
asID: 58542
IP address blocks: 103.197.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8b:07:9a:3a:60:3c:69:4a:1a:2f:4e:66:93:1a:61:c5:80:39:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 02:07:46 2026 GMT
Not After : Apr 16 02:12:46 2027 GMT
Subject: CN=A231D4414CD5C7E77EF065DA91EE6090514DA9A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:9f:7b:3e:5b:02:ed:2a:4b:7c:30:ab:18:
54:c8:c1:77:ac:bc:54:3f:78:10:29:2e:ee:d9:32:
07:14:5b:08:70:e7:53:2c:f2:fd:04:07:f9:7f:17:
65:2c:7c:6e:b0:a4:a8:11:31:fd:33:e0:01:51:36:
c0:b2:6b:58:b1:a5:bc:53:a8:a5:40:9d:39:d7:ab:
2e:a5:06:23:a2:2e:5e:b4:7a:db:cb:63:1c:31:2d:
2e:b6:72:b8:ec:75:c1:1b:a7:44:ff:4b:77:37:e7:
b7:e1:bf:d8:b3:c9:cd:01:12:75:2c:f1:0f:5b:6e:
35:5e:eb:e7:33:77:32:24:38:a3:4a:d5:90:d4:43:
84:6c:67:84:6e:1e:f1:41:9d:77:93:a3:8b:e9:9c:
bd:73:56:6a:25:49:ac:e1:dc:ce:34:1c:fb:ee:54:
2b:db:ba:ee:1f:b3:b4:17:9b:98:33:f3:3b:fc:32:
a5:6c:6a:f5:db:cf:34:a8:9d:95:10:9a:c6:57:c6:
ed:ec:27:46:88:0a:76:e0:4c:0e:94:62:99:b6:d3:
23:91:2f:3e:77:16:7f:dd:5f:77:38:d9:9f:80:e4:
5b:ad:8a:50:30:9d:06:02:be:fb:72:5f:77:6d:6d:
c2:d1:f2:4c:35:85:10:8e:f3:87:ae:f6:4d:61:99:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:D4:41:4C:D5:C7:E7:7E:F0:65:DA:91:EE:60:90:51:4D:A9:A5
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32342d3234203d3e203538353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:fa:7a:f5:c3:2a:71:63:81:54:80:f0:f0:69:db:69:da:9b:
1a:a6:bd:38:60:6a:f4:a6:16:9c:3b:03:d5:fd:fd:72:26:70:
4e:c3:78:6e:88:d9:86:31:e2:ab:2e:a7:7a:b4:b4:5b:5c:48:
ff:a7:34:b6:9b:78:17:85:cc:7a:9b:fc:47:7e:8e:a2:ff:9c:
1a:3f:88:c0:e7:5c:c9:89:4a:10:cd:1e:ba:27:46:3d:5b:31:
b8:b2:c8:cd:29:2f:45:9d:ea:79:45:0b:e4:bf:37:b0:10:29:
32:24:d1:b0:33:88:8f:48:32:1a:e8:84:eb:31:74:53:42:3b:
40:ad:04:43:5d:3b:e8:53:78:f9:ae:65:a8:f9:16:48:01:ca:
9e:d4:c1:06:69:57:f5:10:14:e3:cb:43:ad:54:b9:5c:22:1d:
8f:e4:fe:f4:d7:4b:6a:d2:01:93:dc:62:bd:44:1c:f5:1a:0d:
05:e0:ef:dd:d5:09:cc:74:b6:13:db:80:2d:62:2d:d5:d3:d0:
2b:09:3a:6c:2b:e8:ca:dc:7b:9d:fe:6d:57:d0:4b:20:3a:e2:
5c:12:26:8b:68:e6:74:73:24:ef:3b:ac:41:7f:83:40:a7:a1:
43:36:68:34:97:a6:a7:43:1a:f5:ab:20:a6:32:f7:e1:e8:f1:
fa:1b:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:58 2026 by rpki-client