
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa
File: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (raw, json)
Hash identifier: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=
Subject key identifier: BF:05:36:84:B9:BE:C1:28:BE:9D:A9:2B:96:47:B4:E4:6B:DB:D3:26
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 5054F04DF53DAE583053C750F5D61566B3A83548
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa
Signing time: Wed 15 Apr 2026 07:22:57 +0000
ROA not before: Wed 15 Apr 2026 07:17:57 +0000
ROA not after: Wed 14 Apr 2027 07:22:57 +0000
asID: 55989
IP address blocks: 103.192.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 01:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:54:f0:4d:f5:3d:ae:58:30:53:c7:50:f5:d6:15:66:b3:a8:35:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Apr 15 07:17:57 2026 GMT
Not After : Apr 14 07:22:57 2027 GMT
Subject: CN=BF053684B9BEC128BE9DA92B9647B4E46BDBD326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:1e:ba:27:ff:c8:84:7e:12:42:81:6f:0f:
1f:2a:91:fd:c5:c0:45:a5:c3:91:7c:98:38:15:2a:
f8:70:21:56:85:35:a6:5e:ef:31:e4:be:af:06:88:
84:10:c1:69:66:d7:70:98:3c:e1:6c:d0:c1:b8:de:
91:c2:45:dd:bc:c6:84:76:70:ee:63:dd:f8:eb:d0:
29:47:3e:6c:42:88:76:4e:2b:1f:4a:e1:7a:13:13:
56:e0:6c:63:80:05:9b:fe:86:17:9c:94:01:24:f4:
b4:72:19:ca:d0:d1:e1:88:db:e2:9c:5f:dc:34:8e:
12:5a:22:d2:9f:43:e7:d0:dc:6c:b9:06:56:d6:a3:
16:51:a0:70:7a:86:5a:7b:7f:ba:97:66:67:87:fc:
df:e2:14:85:ec:a7:e2:f7:50:10:ce:ff:b4:e0:ae:
62:c3:1b:f0:db:5c:d5:59:1e:65:b3:83:47:73:36:
ce:0d:cb:cc:70:c1:c4:c9:97:ab:b1:96:0e:e0:ca:
c7:d7:5a:37:c0:b2:d8:94:ad:5e:26:c7:a9:20:d4:
1a:60:92:b3:db:f9:97:13:e0:a7:2a:4e:88:7e:f2:
8d:df:94:f5:1d:c0:e3:c0:58:6e:cc:29:0f:e7:23:
ad:cc:3b:47:a9:c0:4b:cd:8d:bf:11:27:1d:ff:18:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:05:36:84:B9:BE:C1:28:BE:9D:A9:2B:96:47:B4:E4:6B:DB:D3:26
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.192.208.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e6:9f:f0:89:cf:1d:82:a1:17:d3:b6:c5:ef:55:a2:de:b6:
13:a9:69:9a:17:a9:52:7e:0b:11:e1:67:7f:9c:60:48:88:01:
99:49:fd:e0:68:24:f5:0f:6f:f7:9e:1a:22:71:b0:9b:30:b7:
7e:ca:f5:1d:8d:1c:cf:d6:dc:2e:b8:c3:81:2f:96:0c:62:f1:
83:4d:60:85:c0:8b:e9:d4:40:02:b1:4d:96:96:3d:ff:17:4a:
d8:44:4b:a0:de:a3:11:d4:3f:6c:70:be:cd:ec:53:b4:d0:11:
b8:d5:b4:c3:c0:f9:4f:3b:36:9b:e6:b9:4f:e0:4c:58:08:c7:
fe:bf:07:af:f2:19:39:d6:a1:f1:69:c5:3b:97:c9:06:45:82:
fc:e7:3b:2d:2a:11:50:ce:be:86:06:4c:c7:09:0e:96:3c:54:
50:f9:d1:39:e5:91:1b:53:2c:a6:16:a4:08:0d:c3:43:75:26:
cb:ea:30:4e:d5:48:70:f0:c4:79:05:25:81:77:95:0f:f4:17:
c1:0e:c4:7c:09:06:fb:f3:92:b2:1c:cb:09:c1:94:b7:32:36:
12:f4:8e:52:f7:06:37:79:ab:95:31:e2:88:27:1b:27:6a:17:
2d:e4:4f:b1:d4:54:1c:e2:02:7a:72:06:74:11:24:77:a4:45:
1b:9e:c6:19
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUUFTwTfU9rlgwU8dQ9dYVZrOoNUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC
QTcwMTlCQjAeFw0yNjA0MTUwNzE3NTdaFw0yNzA0MTQwNzIyNTdaMDMxMTAvBgNV
BAMTKEJGMDUzNjg0QjlCRUMxMjhCRTlEQTkyQjk2NDdCNEU0NkJEQkQzMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE0x66J//IhH4SQoFvDx8qkf3F
wEWlw5F8mDgVKvhwIVaFNaZe7zHkvq8GiIQQwWlm13CYPOFs0MG43pHCRd28xoR2
cO5j3fjr0ClHPmxCiHZOKx9K4XoTE1bgbGOABZv+hheclAEk9LRyGcrQ0eGI2+Kc
X9w0jhJaItKfQ+fQ3Gy5BlbWoxZRoHB6hlp7f7qXZmeH/N/iFIXsp+L3UBDO/7Tg
rmLDG/DbXNVZHmWzg0dzNs4Ny8xwwcTJl6uxlg7gysfXWjfAstiUrV4mx6kg1Bpg
krPb+ZcT4KcqToh+8o3flPUdwOPAWG7MKQ/nI63MO0epwEvNjb8RJx3/GEnNAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUvwU2hLm+wSi+nakrlke05Gvb0yYwHwYDVR0j
BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD
QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC8zMTMwMzMyZTMx
MzkzMjJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzgzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfA0DANBgkqhkiG9w0BAQsFAAOCAQEAeeaf8InPHYKhF9O2xe9V
ot62E6lpmhepUn4LEeFnf5xgSIgBmUn94Ggk9Q9v954aInGwmzC3fsr1HY0cz9bc
LrjDgS+WDGLxg01ghcCL6dRAArFNlpY9/xdK2ERLoN6jEdQ/bHC+zexTtNARuNW0
w8D5Tzs2m+a5T+BMWAjH/r8Hr/IZOdah8WnFO5fJBkWC/Oc7LSoRUM6+hgZMxwkO
ljxUUPnROeWRG1MsphakCA3DQ3Umy+owTtVIcPDEeQUlgXeVD/QXwQ7EfAkG+/OS
shzLCcGUtzI2EvSOUvcGN3mrlTHiiCcbJ2oXLeRPsdRUHOICenIGdBEkd6RFG57G
GQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:37 2026 by rpki-client