
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e203535393936.roa
File: 3130332e34352e3136382e302f32322d3234203d3e203535393936.roa (raw, json)
Hash identifier: EzBUAW4XD0MTn0uzSYx2Z1Df+y8MonQogz9b9jQJq8E=
Subject key identifier: D8:90:F5:16:7F:73:E2:5B:56:34:B7:BA:BC:48:D6:F5:B6:98:22:18
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 5E308F0D6AFF587F7CB041221FCEBE5414E5B8E7
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e203535393936.roa
Signing time: Fri 17 Apr 2026 01:56:27 +0000
ROA not before: Fri 17 Apr 2026 01:51:27 +0000
ROA not after: Fri 16 Apr 2027 01:56:27 +0000
asID: 55996
IP address blocks: 103.45.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:30:8f:0d:6a:ff:58:7f:7c:b0:41:22:1f:ce:be:54:14:e5:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 01:51:27 2026 GMT
Not After : Apr 16 01:56:27 2027 GMT
Subject: CN=D890F5167F73E25B5634B7BABC48D6F5B6982218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:61:68:ca:97:ec:c9:f6:f6:80:fd:d0:5a:
c5:9c:5e:4a:d3:3e:b6:2c:b9:00:76:2a:3e:41:dc:
fb:b6:be:f0:1a:60:dc:cc:24:2e:70:3e:10:84:22:
31:9e:63:e5:2d:45:1e:12:77:5f:28:26:49:bd:52:
45:3a:a3:f6:90:60:41:8e:a2:c6:ae:58:6a:79:d0:
b1:3b:c9:9c:18:59:6a:74:b2:00:d9:d5:9a:55:60:
ba:23:93:7f:52:74:da:8d:17:6a:32:b4:0e:78:db:
ad:fc:8d:4c:13:2f:ea:56:65:83:5e:ef:63:b5:87:
63:26:b5:03:2a:e6:50:ac:a3:40:69:ea:8a:42:2a:
89:56:8a:00:7c:34:17:2d:6c:d1:87:4c:80:13:d4:
76:a2:1b:e8:21:a2:45:22:2b:82:f9:31:c1:75:d2:
96:4a:85:80:db:9c:b0:3f:14:69:4b:b1:c7:eb:bd:
96:c2:ae:f7:fa:94:82:2d:02:6b:92:f8:00:a3:85:
75:31:15:22:cd:aa:0e:c8:26:4e:ec:22:0b:10:76:
13:3f:96:a2:7b:87:99:c5:fc:e5:15:cd:3e:93:4c:
1e:30:26:13:26:a7:fe:bb:fc:81:b4:ab:3a:00:36:
26:62:ef:e6:d6:c7:43:84:27:02:b3:56:01:0f:68:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:F5:16:7F:73:E2:5B:56:34:B7:BA:BC:48:D6:F5:B6:98:22:18
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.168.0/22
Signature Algorithm: sha256WithRSAEncryption
79:24:d1:89:0d:53:a9:4d:19:3c:a0:08:ba:54:dc:bf:99:9d:
e5:7b:86:9f:35:23:08:0a:f0:b2:9c:11:ae:ad:f8:77:88:f1:
ed:47:13:09:68:7a:a0:f3:ed:fd:f3:c6:2c:a9:94:53:66:25:
1a:5a:59:2a:2d:2b:e4:43:f9:9e:f2:32:34:b4:96:39:0f:87:
64:99:30:9e:75:52:a9:92:dc:31:a0:3f:62:ce:c3:c5:74:21:
ad:ac:ed:0f:7f:55:71:ae:f1:44:3c:df:d3:2f:0d:f7:a1:8b:
0d:ba:f3:1a:18:80:38:9d:da:3d:3c:cd:cc:92:37:84:b9:02:
7c:c2:3c:d9:ba:ec:43:13:1d:bd:ce:d5:ea:3e:b3:38:cc:d6:
59:ff:0f:7a:6a:57:21:e9:16:51:65:0d:49:a2:95:d8:dc:32:
43:31:4e:6c:1e:47:66:a3:92:15:72:6c:53:6d:26:12:a6:8c:
26:84:d3:39:ef:6e:9d:f3:a9:48:8e:f4:0b:89:47:8b:49:60:
e1:41:d6:ad:26:2f:e8:27:95:02:08:39:1f:ba:56:33:a8:0a:
68:e5:99:62:52:ee:8a:56:92:50:93:c0:f6:22:c3:61:1f:db:
29:48:f1:a5:45:35:7c:b0:d0:ff:78:41:1b:a4:fa:7c:f7:1d:
97:d0:79:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:45 2026 by rpki-client