
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32342d3234203d3e203538353432.roa
File: 3130332e34352e3136382e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier: FGSqTyvRkaOennembtg61JimZrrOEKPWoPZpATyJUg8=
Subject key identifier: A3:E5:1B:A6:16:1B:A3:E5:7C:B6:5A:4A:2D:D2:CC:A0:A2:6A:48:FB
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 579312C97CE7FCFA9FB14B21C71B3FDF8E962416
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32342d3234203d3e203538353432.roa
Signing time: Fri 17 Apr 2026 01:56:27 +0000
ROA not before: Fri 17 Apr 2026 01:51:27 +0000
ROA not after: Fri 16 Apr 2027 01:56:27 +0000
asID: 58542
IP address blocks: 103.45.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:93:12:c9:7c:e7:fc:fa:9f:b1:4b:21:c7:1b:3f:df:8e:96:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 01:51:27 2026 GMT
Not After : Apr 16 01:56:27 2027 GMT
Subject: CN=A3E51BA6161BA3E57CB65A4A2DD2CCA0A26A48FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:12:26:7d:ff:ab:68:9b:12:5a:bf:f0:95:
5d:df:87:d7:7e:41:09:0a:f1:46:b5:9d:70:8c:03:
32:fb:74:d7:d2:f0:28:f0:69:b8:cf:71:02:35:d5:
85:e8:89:86:f7:b7:dc:6a:7f:a4:ef:08:0c:4f:02:
ce:a5:f9:19:0c:bf:2d:1d:1d:7d:3d:76:b8:de:ee:
42:00:82:6f:61:b4:a1:87:c5:38:f6:d8:cd:6e:f0:
6e:d5:ab:17:7f:8f:8e:d2:28:c9:9b:47:0a:15:09:
59:f9:92:57:7a:b5:0c:2b:45:93:57:86:6d:f9:c2:
be:7f:be:b7:2c:bd:de:e2:a1:e0:d9:b8:9c:e0:9e:
c2:e0:28:69:91:23:3e:f6:29:b5:6d:e4:9b:59:8b:
88:6f:ed:ad:4e:d5:7b:6e:ed:db:8f:03:48:6c:66:
4a:6f:66:ac:a8:c7:6d:7b:a0:43:6f:61:69:ad:70:
78:fa:be:36:5d:26:76:6e:36:c3:d6:19:2c:ba:ac:
e6:d1:47:58:9e:89:ed:17:dd:ec:ac:dd:f7:71:32:
cb:d7:a8:44:a6:a7:3c:f7:40:1a:1e:47:e7:b4:44:
bf:a9:74:a6:7c:af:cf:9b:2d:96:1a:f3:f4:4d:b8:
a2:6b:69:ff:86:cd:f1:d8:63:b6:86:b7:8c:ec:e5:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:1B:A6:16:1B:A3:E5:7C:B6:5A:4A:2D:D2:CC:A0:A2:6A:48:FB
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32342d3234203d3e203538353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ca:66:32:a7:b7:a8:d3:92:19:02:40:41:bf:2e:9a:04:e2:
bf:fd:1e:51:e4:b9:da:13:43:1f:64:78:67:a5:37:59:da:88:
53:14:a8:4b:e1:96:30:7d:bc:1d:ef:bf:27:9a:ad:2b:5d:e1:
21:a8:42:19:78:3f:da:34:ed:55:00:f5:c4:c1:43:ac:ee:95:
6e:e1:26:2e:cd:13:df:8a:8c:af:7e:2d:07:ed:bd:90:bd:53:
3d:f0:6d:f6:eb:07:c1:31:83:3a:56:21:72:70:72:10:10:b1:
84:4c:b1:44:c1:2e:d1:52:9b:bd:cd:65:b6:e1:93:92:e7:2e:
33:3d:37:49:ad:d3:69:5a:40:24:8d:09:d5:c7:7c:8d:c8:90:
17:2b:73:5a:d6:c7:82:dc:d9:96:74:8d:86:1f:9f:81:37:59:
8d:57:ae:96:14:6e:ff:f8:8a:bb:db:ca:59:97:3b:40:92:99:
84:95:8e:03:7a:b0:41:6d:0c:f7:86:80:32:34:ec:cf:b6:a5:
a7:b4:47:34:97:4f:64:21:5d:3a:4c:7c:1b:2f:9f:39:34:ff:
72:87:9e:52:6c:e9:03:a6:66:8e:54:8d:90:70:5e:cf:bf:c1:
8e:e3:0a:b6:a5:0a:00:1a:e9:ea:7f:2b:48:26:f7:cd:ce:f4:
37:8a:69:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:43 2026 by rpki-client