
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034313334.roa
File: 3130332e36312e3138382e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: s9FbvJB5NVjFVCiY2IbPq8YlFW9adXZgqU9IFp6XyWE=
Subject key identifier: 4C:E0:A6:F4:CB:0B:02:86:6D:E9:E2:89:AA:C2:19:85:BA:2F:DF:A7
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 01D5F66F44B25C3D8792368103E21D74E09B5459
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034313334.roa
Signing time: Fri 17 Apr 2026 02:16:05 +0000
ROA not before: Fri 17 Apr 2026 02:11:05 +0000
ROA not after: Fri 16 Apr 2027 02:16:05 +0000
asID: 4134
IP address blocks: 103.61.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d5:f6:6f:44:b2:5c:3d:87:92:36:81:03:e2:1d:74:e0:9b:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Apr 17 02:11:05 2026 GMT
Not After : Apr 16 02:16:05 2027 GMT
Subject: CN=4CE0A6F4CB0B02866DE9E289AAC21985BA2FDFA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:a1:2d:13:81:84:89:1f:c7:15:d4:77:1d:
69:5a:a8:aa:70:d4:cb:51:fd:77:0e:0e:6a:f3:58:
05:c5:3c:ac:9c:83:5f:52:05:2d:b7:16:5a:94:eb:
60:e1:12:22:c8:0b:f4:60:40:f6:09:37:0b:f2:7d:
4f:bb:63:44:fe:21:97:e9:36:c1:a8:c9:a0:95:2b:
e7:fc:b2:a7:bc:09:28:0c:95:13:7a:a8:fa:38:74:
d3:4d:2a:ce:29:ad:89:36:5c:ba:c8:06:20:f3:de:
3a:4f:b0:57:10:db:46:7a:de:17:d8:7e:2d:a5:05:
41:ea:76:d1:3b:3d:79:ea:9b:d7:36:ef:c3:58:73:
08:af:f5:93:dd:7d:8b:d5:43:38:00:01:b7:48:2a:
20:aa:90:07:12:98:bb:b1:d3:8f:64:ca:83:40:fb:
a4:8f:83:01:a0:ee:2f:8a:0f:12:b9:d7:e1:3e:ef:
7e:b1:df:dc:6a:08:65:fe:30:02:7b:12:0a:32:48:
be:f3:77:fb:55:56:a4:f7:f1:d5:ae:81:7c:9d:14:
ce:6d:1c:a0:23:35:38:66:d3:b1:23:27:f7:73:5b:
c5:c6:02:2f:62:15:19:4a:ce:df:b2:29:6a:73:e7:
e3:36:27:41:29:78:c1:da:71:3e:d7:4f:54:1d:43:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:A6:F4:CB:0B:02:86:6D:E9:E2:89:AA:C2:19:85:BA:2F:DF:A7
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d6:21:9d:60:07:42:68:83:43:2b:03:c8:b6:0e:0b:82:8d:
2e:38:25:c0:1c:59:0c:36:a7:10:21:06:55:19:35:ad:ac:df:
34:d4:7c:1d:41:5b:2c:96:dc:27:72:6c:12:1c:b4:43:06:fa:
79:ef:de:e4:8c:7d:51:86:ae:f0:ff:61:92:17:1c:b6:37:70:
e2:7a:95:9b:fc:03:64:97:62:ce:14:cd:bb:72:4b:42:e1:d8:
d1:8a:ec:8a:4d:33:a5:06:63:59:dd:f8:a5:52:6c:33:86:8f:
37:42:52:0b:16:5d:80:d7:5e:6f:16:9d:85:51:1c:b0:0f:de:
4d:c3:3d:76:ad:14:5c:5b:bc:eb:6a:1c:41:29:4c:e7:a0:40:
13:41:7f:11:2b:9f:a9:01:9a:a5:6f:8a:6e:b1:cf:7d:21:0e:
60:8c:61:10:4b:70:23:2a:80:e1:24:a5:19:3b:dc:ed:13:ca:
b3:ec:b7:b5:2d:bb:31:92:eb:0a:cc:46:75:4a:d3:1c:94:70:
56:99:78:e1:ea:ac:c9:19:fa:32:d8:02:74:ca:dc:76:b7:a2:
da:e9:fa:1a:d0:84:15:4d:da:31:43:aa:c5:8c:20:72:a3:1e:
87:7d:bc:8b:ad:ec:1e:79:92:f4:72:7a:17:1d:22:5b:52:67:
73:dc:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:06 2026 by rpki-client