
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e203535393936.roa
File: 3130332e34352e3232342e302f32322d3234203d3e203535393936.roa (raw, json)
Hash identifier: bp/JCvjiGiWpK/2NGOEiOHhB3v5TdAMtyDY1+SEohGw=
Subject key identifier: E7:41:7F:F1:9D:8B:E4:AA:90:C7:E3:B0:D0:66:C6:47:15:17:6D:17
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 2608AA6ECCE2354F72F7E99F0DEDA7FBF0AA3F03
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e203535393936.roa
Signing time: Fri 17 Apr 2026 01:52:51 +0000
ROA not before: Fri 17 Apr 2026 01:47:51 +0000
ROA not after: Fri 16 Apr 2027 01:52:51 +0000
asID: 55996
IP address blocks: 103.45.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:08:aa:6e:cc:e2:35:4f:72:f7:e9:9f:0d:ed:a7:fb:f0:aa:3f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 01:47:51 2026 GMT
Not After : Apr 16 01:52:51 2027 GMT
Subject: CN=E7417FF19D8BE4AA90C7E3B0D066C64715176D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:10:13:a4:30:d9:22:fd:24:55:09:d0:0d:
0f:d0:65:70:14:a1:58:20:5a:5a:fd:cc:84:d9:54:
14:f9:6a:d5:d0:1e:0e:24:28:ec:ff:73:5f:32:0a:
11:73:af:c4:a2:d5:0e:29:b9:41:89:3b:7b:e7:01:
22:d2:97:20:86:68:08:50:63:95:54:45:6b:75:b6:
e7:3a:66:c9:b1:22:20:ed:71:fa:75:37:2b:d1:e4:
55:b9:fc:cc:46:23:52:d6:a5:81:68:b6:38:41:64:
7c:1e:ee:ec:ff:36:de:bc:d0:b6:0f:c2:8f:dc:db:
b4:93:82:da:6a:8e:c9:0f:b9:99:f3:32:f4:34:5a:
b1:56:cc:ef:0f:87:34:5d:20:44:96:ba:ec:7d:0d:
10:d1:d1:68:ba:a4:9a:57:e0:3e:8e:d8:8f:4a:92:
58:17:e1:37:e5:8f:a2:9d:24:7e:52:ea:a8:5d:d7:
92:34:89:63:7c:ea:52:ed:f7:8f:de:43:20:02:f9:
13:0c:9f:22:10:cf:c3:a3:45:a5:a2:f4:0a:8c:74:
e7:1a:6d:53:c1:7f:b0:c0:53:45:b4:f2:d3:dc:ee:
05:63:9f:9c:5e:63:02:18:cc:bc:04:61:ca:11:b4:
ba:49:79:1a:eb:b5:51:2a:ee:b6:b2:c7:bd:bc:21:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:7F:F1:9D:8B:E4:AA:90:C7:E3:B0:D0:66:C6:47:15:17:6D:17
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.224.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:f7:89:84:ae:e6:e5:5a:66:cf:85:43:01:21:ed:96:ed:f2:
a6:49:98:f7:39:80:7a:75:56:19:ca:7a:f4:7a:86:74:d3:c6:
f6:1a:ed:f2:81:47:cf:f4:bf:ce:78:e6:a5:7c:87:a6:73:b2:
d4:94:78:5b:03:ed:c5:92:b7:b4:3f:c0:f7:e4:0c:c7:7f:9f:
94:ed:b8:78:e3:34:f6:80:de:d7:a5:38:ca:51:ad:d2:2e:28:
cb:02:f1:86:0d:d2:17:12:df:8e:b4:61:8e:f9:9c:2e:ac:cf:
54:36:33:ae:da:60:d4:64:61:42:63:d8:5d:06:2c:9d:0a:59:
c6:74:d9:c2:16:c9:0a:6d:7e:9d:55:bd:01:93:9f:9b:a1:d9:
4f:f8:c4:63:f5:23:6e:ce:1b:00:5b:54:29:49:5c:8a:b0:43:
8d:ba:61:6e:59:cd:55:01:83:20:4c:71:96:6c:6c:d9:86:18:
19:21:35:86:b0:0d:4c:0d:5b:7b:34:d1:f6:c7:14:9d:e1:a7:
95:66:71:cc:94:5c:47:d0:0b:fe:fa:85:58:ca:15:21:1e:26:
e9:e6:6b:ec:0c:18:a2:0c:d4:4b:ef:19:52:fb:5b:fe:c4:3f:
ce:5b:01:c8:8a:1e:9d:7d:f9:eb:91:55:31:17:0c:fc:49:23:
9f:59:3e:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:38 2026 by rpki-client