
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e203137363231.roa
File: 3130332e34352e3136392e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: xT+YP3S7N8VZd77vEndeOnWv8pnG4u+pSGtfirA7Ank=
Subject key identifier: 19:3F:8D:52:ED:D0:81:BF:D0:9A:CE:34:8D:16:20:39:C9:65:82:D9
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 7880ED74474D778E8E5F19EDD78E984230E3538D
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e203137363231.roa
Signing time: Fri 17 Apr 2026 01:56:27 +0000
ROA not before: Fri 17 Apr 2026 01:51:27 +0000
ROA not after: Fri 16 Apr 2027 01:56:27 +0000
asID: 17621
IP address blocks: 103.45.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:80:ed:74:47:4d:77:8e:8e:5f:19:ed:d7:8e:98:42:30:e3:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 01:51:27 2026 GMT
Not After : Apr 16 01:56:27 2027 GMT
Subject: CN=193F8D52EDD081BFD09ACE348D162039C96582D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:61:aa:b2:ad:f2:a7:21:26:fa:04:c1:8c:
ec:e9:35:ac:a7:63:a6:e0:2d:7c:6a:8a:89:7c:ec:
27:ee:2f:8c:01:58:a3:c8:b6:56:92:6e:0d:3c:1f:
a2:9a:c1:23:e3:68:4d:4d:2a:a8:f6:70:38:b9:b0:
b6:51:e4:3a:37:5c:04:75:ec:4b:ee:32:36:47:73:
3b:b5:3f:de:c1:82:bc:b9:96:1d:1d:85:84:a1:8e:
80:b5:90:15:50:3a:90:b3:54:84:2e:66:96:6a:b0:
69:b2:18:9c:2a:49:0a:95:db:9f:10:84:e6:21:53:
78:dd:f3:69:09:e2:f0:8a:4c:06:58:a9:06:0a:71:
a9:a6:27:b9:e6:13:cb:5c:b7:39:92:99:94:2b:24:
b5:b1:04:07:ac:67:f0:22:92:fb:62:05:18:30:e8:
d1:7f:a9:3d:36:75:0a:e6:8a:62:64:9c:99:c9:7f:
5d:40:e8:f8:be:ce:4e:5d:25:ad:c5:66:19:34:38:
52:a0:13:2e:83:78:91:f9:1c:9e:70:77:cd:4d:53:
49:c4:37:94:20:0e:f0:0d:d3:28:9f:7c:92:00:68:
95:6f:dd:5f:1f:3e:90:e7:4f:4f:0b:8a:2d:0d:83:
5c:87:22:46:76:20:e1:67:38:56:09:50:34:ff:34:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:8D:52:ED:D0:81:BF:D0:9A:CE:34:8D:16:20:39:C9:65:82:D9
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:89:48:52:4e:f2:04:ba:b6:23:54:3c:3e:68:d3:d3:35:ba:
bc:f7:ae:83:02:ac:0f:32:91:4c:58:06:9b:05:7a:ab:6f:7c:
ae:9a:ed:79:c2:1f:29:6f:96:ba:7b:67:dd:64:d4:b3:02:0a:
d1:2a:44:93:c2:02:27:8f:bb:f2:95:51:8b:a1:c3:c6:93:58:
e1:c7:aa:43:ce:dd:e7:a0:c4:b8:ce:aa:1d:53:43:27:b3:19:
63:04:90:ee:ca:c7:87:44:be:37:9c:7f:0c:77:ee:ac:ec:1e:
29:3b:25:44:f6:c6:57:84:c4:c3:2e:05:93:92:9e:1f:a0:e8:
42:da:bc:23:c8:82:e4:95:57:d9:cb:1a:f4:77:4e:a7:a1:dd:
5e:4d:42:4d:b0:8f:26:cc:66:f3:a4:f4:4b:85:05:c9:51:6f:
96:55:e8:37:dc:37:3f:87:bc:65:e8:05:a6:78:dc:70:ad:6e:
14:00:28:09:9d:03:57:aa:cf:b0:5d:cb:03:43:d5:a9:7d:b0:
8f:99:95:09:c1:6c:53:01:6f:56:31:40:e8:bd:ba:6b:c2:93:
ca:56:fc:12:11:88:8e:f7:08:9b:7a:b6:a1:b5:36:85:e8:69:
06:b7:d4:7b:bc:c0:ab:2d:a5:b4:c0:c9:2b:c8:4a:19:6e:aa:
36:27:29:41
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeIDtdEdNd46OXxnt146YQjDjU40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA0MTcwMTUxMjdaFw0yNzA0MTYwMTU2MjdaMDMxMTAvBgNV
BAMTKDE5M0Y4RDUyRUREMDgxQkZEMDlBQ0UzNDhEMTYyMDM5Qzk2NTgyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DWGqsq3ypyEm+gTBjOzpNayn
Y6bgLXxqiol87CfuL4wBWKPItlaSbg08H6KawSPjaE1NKqj2cDi5sLZR5Do3XAR1
7EvuMjZHczu1P97Bgry5lh0dhYShjoC1kBVQOpCzVIQuZpZqsGmyGJwqSQqV258Q
hOYhU3jd82kJ4vCKTAZYqQYKcammJ7nmE8tctzmSmZQrJLWxBAesZ/AikvtiBRgw
6NF/qT02dQrmimJknJnJf11A6Pi+zk5dJa3FZhk0OFKgEy6DeJH5HJ5wd81NU0nE
N5QgDvAN0yiffJIAaJVv3V8fPpDnT08Lii0Ng1yHIkZ2IOFnOFYJUDT/NCTZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUGT+NUu3Qgb/Qms40jRYgOcllgtkwHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzMxMzAzMzJlMzQz
NTJlMzEzNjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGctqTANBgkqhkiG9w0BAQsFAAOCAQEAoIlIUk7yBLq2I1Q8PmjT0zW6
vPeugwKsDzKRTFgGmwV6q298rprtecIfKW+Wuntn3WTUswIK0SpEk8ICJ4+78pVR
i6HDxpNY4ceqQ87d56DEuM6qHVNDJ7MZYwSQ7srHh0S+N5x/DHfurOweKTslRPbG
V4TEwy4Fk5KeH6DoQtq8I8iC5JVX2csa9HdOp6HdXk1CTbCPJsxm86T0S4UFyVFv
llXoN9w3P4e8ZegFpnjccK1uFAAoCZ0DV6rPsF3LA0PVqX2wj5mVCcFsUwFvVjFA
6L26a8KTylb8EhGIjvcIm3q2obU2hehpBrfUe7zAqy2ltMDJK8hKGW6qNicpQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:42 2026 by rpki-client