
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa
File: 3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa (raw, json)
Hash identifier: vIksseSrPKkCjWYn7+CT7Cn4Zjoz56ZoLW71G+bdO8g=
Subject key identifier: B0:AC:1C:A1:E1:D8:2B:D5:61:C0:6C:BC:F4:E8:45:9B:1E:CE:F4:38
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 51968862E4F65EA5CB9A77C29ED7D82469F19E53
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa
Signing time: Fri 17 Apr 2026 01:56:27 +0000
ROA not before: Fri 17 Apr 2026 01:51:27 +0000
ROA not after: Fri 16 Apr 2027 01:56:27 +0000
asID: 131274
IP address blocks: 103.45.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:96:88:62:e4:f6:5e:a5:cb:9a:77:c2:9e:d7:d8:24:69:f1:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 01:51:27 2026 GMT
Not After : Apr 16 01:56:27 2027 GMT
Subject: CN=B0AC1CA1E1D82BD561C06CBCF4E8459B1ECEF438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:eb:9e:be:01:16:2d:ab:f2:be:e1:21:ba:
1d:08:f5:b2:19:12:2e:38:64:25:c1:12:4b:d3:1d:
56:86:2a:5d:42:7f:21:da:f6:7e:59:30:d4:13:69:
bf:10:24:4b:bf:31:ed:5a:81:78:1b:6c:24:37:63:
8a:c8:42:02:ca:29:5b:0c:23:e1:95:d0:54:3b:65:
04:29:f7:c2:c1:c9:57:ba:04:ee:98:d3:47:14:dd:
98:a7:40:f3:0d:49:15:50:f7:10:f3:6d:7f:f9:f7:
bc:f6:cd:0e:56:2a:11:c2:fc:48:4b:72:42:eb:fc:
f7:2a:9d:52:6c:21:9f:38:ce:d0:78:66:a2:6a:5b:
8d:31:b8:d1:fd:66:08:2a:3d:85:01:5e:ae:a4:84:
df:6b:4a:6a:40:92:56:cd:ee:47:88:72:d2:d8:2a:
cc:0f:20:ca:6c:ec:7b:91:eb:9c:7a:a2:11:bb:35:
2f:3e:8b:80:c7:7c:87:39:2d:c8:30:8f:cc:ee:5a:
36:58:00:73:18:ee:cb:79:24:9d:ab:f3:3c:c1:9b:
75:cc:df:eb:10:c7:3b:b8:24:66:0b:73:e1:ba:48:
dc:36:85:57:08:75:a5:be:50:84:9b:cc:de:ec:2a:
a6:6f:77:91:bd:b4:05:73:40:69:6c:4c:7a:4a:f2:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:1C:A1:E1:D8:2B:D5:61:C0:6C:BC:F4:E8:45:9B:1E:CE:F4:38
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.168.0/22
Signature Algorithm: sha256WithRSAEncryption
80:90:d2:97:7c:8f:22:85:fc:1f:08:dd:0a:1c:9f:6f:d3:e6:
f8:83:a8:b6:ad:02:34:41:33:6a:d4:d4:e7:4a:c1:85:31:bd:
22:03:7d:6b:37:cd:f1:96:da:cf:23:84:14:18:28:40:5b:65:
a0:7d:e1:27:2b:d1:56:4c:20:7f:25:6e:0d:bc:5c:71:c2:ca:
2c:5b:74:05:51:ff:ca:3e:f9:55:0f:e3:3d:e3:b3:b1:4f:2a:
b1:9d:77:0c:48:ff:c3:47:b0:4d:be:f3:0f:09:5e:9e:44:85:
1b:ce:9a:28:04:1e:1a:27:01:6b:3f:c4:a5:bf:fd:36:15:aa:
9a:a6:7d:26:c3:3d:ad:a7:89:88:87:14:60:5b:29:b0:92:01:
23:68:e9:6d:1b:76:dd:94:51:9d:b5:27:8a:e7:f1:ab:9c:93:
7d:32:d8:19:6c:44:27:3d:17:5b:7c:28:f8:5f:5c:da:e8:85:
4b:aa:5a:08:c2:7f:ce:42:b5:0f:87:35:e7:11:03:a7:3b:16:
8f:89:57:9e:24:00:91:f8:9e:bb:a0:48:86:59:4e:90:14:65:
f6:ab:b5:5b:9e:b8:5e:ab:11:32:49:05:cd:50:7c:f7:ea:a5:
95:d4:f1:40:e7:2c:20:b0:b3:87:d0:f3:4b:21:a9:8e:d7:9e:
64:ba:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:58 2026 by rpki-client