
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa
File: AS4515.roa (raw, json)
Hash identifier: ZaYffZhkzBHitK6L4Gql685Dxz+15/s2YPjwtddG4aE=
Subject key identifier: C5:06:F8:7E:80:A4:F6:8E:9B:04:2B:B2:D2:2F:2D:A1:6F:D1:38:DF
Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial: 18D5C7C2123614BCB07EDBD798181344F134B932
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa
Signing time: Thu 10 Sep 2026 02:30:36 +0000
ROA not before: Thu 10 Sep 2026 02:25:36 +0000
ROA not after: Thu 09 Sep 2027 02:30:36 +0000
asID: 4515
IP address blocks: 59.153.172.0/24 maxlen: 24
103.5.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 12:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d5:c7:c2:12:36:14:bc:b0:7e:db:d7:98:18:13:44:f1:34:b9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Validity
Not Before: Sep 10 02:25:36 2026 GMT
Not After : Sep 9 02:30:36 2027 GMT
Subject: CN=C506F87E80A4F68E9B042BB2D22F2DA16FD138DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:c0:cb:a9:13:83:1a:b4:55:21:36:a6:e8:
4a:81:ac:a3:cc:c0:03:a6:25:00:d3:8a:98:e6:c6:
4f:4a:1a:76:fe:4c:74:69:13:7c:55:6e:da:fe:cf:
32:7b:b3:00:10:06:61:b3:2a:17:bb:42:7c:43:5d:
a6:52:44:00:d7:c8:59:b1:0a:c6:5e:c3:10:c6:eb:
0c:1a:9a:c3:78:8b:17:07:c1:06:74:9f:b6:51:31:
a7:6a:a7:33:ab:fc:70:ae:5e:ef:fe:66:fe:ad:46:
30:dd:04:b6:56:da:62:5f:dc:54:cb:ac:d9:44:1c:
5c:e1:07:67:d1:02:cc:6c:ee:76:70:6c:0e:4f:36:
fd:43:a3:35:dc:f4:2f:a8:59:a8:c5:f6:fc:fc:0c:
3a:03:f2:38:24:c1:10:8e:7d:0e:7c:c1:62:f0:27:
b4:ac:98:a7:53:5e:3b:e1:b8:ae:41:e1:28:05:99:
50:0f:73:96:e0:b2:b3:28:65:12:79:79:ab:9f:10:
1d:07:c0:41:70:1f:48:a7:0a:7c:16:c2:9a:31:1b:
b4:4a:85:ab:c1:b1:eb:a9:c5:49:06:20:74:0b:05:
f9:91:cb:0e:fc:13:c8:fe:94:7d:21:4e:6a:8d:07:
f3:a2:25:97:d3:b6:6b:ca:72:42:af:4a:b3:38:cc:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:F8:7E:80:A4:F6:8E:9B:04:2B:B2:D2:2F:2D:A1:6F:D1:38:DF
X509v3 Authority Key Identifier:
keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.172.0/24
103.5.195.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ed:d7:74:48:5b:87:91:41:9f:ed:63:09:e9:11:ea:df:8c:
56:0c:8f:be:6e:5c:ab:9e:91:a5:f9:cf:c1:b8:ea:f7:ba:9e:
10:7c:34:7e:b1:7e:71:33:60:1c:2d:6d:46:bc:d4:14:a7:7e:
fb:8d:66:a4:04:45:ba:45:18:83:b1:33:d0:7d:af:7f:e9:79:
0d:8a:28:87:47:a3:82:1f:32:48:5b:be:b2:01:45:44:3b:74:
75:47:5c:3f:24:4b:78:8d:26:48:3f:65:cd:1d:84:90:f5:7a:
1b:06:2a:49:67:85:eb:16:e9:28:86:1c:68:04:6c:b3:f0:94:
36:4c:e0:aa:0d:63:55:3b:45:c0:17:8b:1a:95:47:9d:8f:f6:
a6:b0:df:3b:1d:c5:6d:d2:39:30:a6:8d:0a:ae:bb:2a:de:e0:
a1:96:ff:4b:2c:29:47:0e:2f:cc:2a:04:6a:16:09:14:0a:25:
d5:d1:fa:5b:11:74:fc:e7:c5:ea:e5:40:be:81:82:f7:af:f5:
8f:a1:6c:0e:0f:23:cb:3c:ab:f0:c5:a1:ae:02:5a:51:b8:bc:
0f:cd:f9:3d:ed:d3:0e:10:55:06:0f:15:01:0a:26:32:f7:98:
a4:b0:cd:af:71:14:4f:9b:c9:4d:0e:fc:db:ff:77:8e:f8:5a:
18:c5:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:31:05 2026 by rpki-client