
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa
File: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=
Subject key identifier: 82:C4:8E:51:E1:10:A4:F5:95:07:35:67:D4:63:D1:69:91:A1:FF:C5
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 200DF410D072C22CC4E33AF19CFA4F1EF5FF3980
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa
Signing time: Wed 15 Apr 2026 07:22:57 +0000
ROA not before: Wed 15 Apr 2026 07:17:57 +0000
ROA not after: Wed 14 Apr 2027 07:22:57 +0000
asID: 55991
IP address blocks: 103.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 01:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0d:f4:10:d0:72:c2:2c:c4:e3:3a:f1:9c:fa:4f:1e:f5:ff:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Apr 15 07:17:57 2026 GMT
Not After : Apr 14 07:22:57 2027 GMT
Subject: CN=82C48E51E110A4F595073567D463D16991A1FFC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:12:54:5a:9d:b3:38:32:54:88:b1:73:b8:
44:bc:52:51:58:f8:af:17:f4:2c:42:65:d3:27:fb:
ec:48:ee:a6:f0:f9:5c:6a:06:b3:41:4f:cf:02:c9:
f2:a1:56:59:c7:f6:ac:94:f2:d2:3a:44:c4:22:59:
51:23:fd:f9:44:23:69:6e:eb:43:34:4d:47:4c:02:
34:09:62:19:26:f2:22:62:a1:5c:e4:af:0b:88:ec:
ff:84:16:e6:0c:9f:c3:c2:35:1d:20:52:14:83:64:
ca:16:3d:85:a4:e5:e0:ec:55:41:7e:3d:48:fb:66:
7c:5f:f2:3e:69:98:fb:6a:07:2c:6f:97:3d:aa:6f:
69:99:8c:2e:0b:f2:c0:ff:16:ca:0e:bb:1a:ab:d5:
36:16:6b:d6:98:57:d6:59:fb:7e:f6:f3:3a:6e:fa:
96:3e:bb:65:7a:67:7e:ba:9e:f5:3d:5d:9e:f5:45:
b9:1d:45:36:ca:aa:45:4a:37:2d:92:40:39:19:a0:
e9:db:5d:94:ff:27:15:e1:e0:7e:40:83:39:87:15:
d1:73:2e:65:77:3b:44:d6:27:25:53:01:1a:f4:00:
25:07:fc:5a:b6:eb:ca:b1:c5:ca:23:f0:53:c2:50:
62:77:16:7b:63:86:67:50:92:30:e7:e5:a3:3c:9f:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C4:8E:51:E1:10:A4:F5:95:07:35:67:D4:63:D1:69:91:A1:FF:C5
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
41:10:0c:74:43:9b:ab:76:68:8e:b1:67:b1:31:80:81:2f:88:
7f:3d:d3:53:9f:55:48:3d:77:a0:12:6d:1f:e0:4d:7e:32:89:
d9:52:1d:0f:8a:b5:97:93:52:ae:2a:1e:d6:8e:14:ec:92:8d:
c6:b2:b6:c4:86:b9:87:1e:9d:be:91:22:23:93:65:a1:3d:b4:
2f:91:74:20:af:09:52:4e:13:25:f9:50:ff:3a:1b:d1:f4:8d:
89:2f:ac:47:f3:3f:25:24:ba:9b:4b:9a:72:c4:19:2f:47:3f:
7d:9f:47:d2:a5:2a:fb:01:a8:e1:7d:06:1d:ad:a3:78:25:48:
a0:47:12:cc:55:84:0c:f6:95:bb:34:2d:43:17:fe:d3:24:e7:
69:5d:27:26:4a:0a:ae:9c:1c:d3:fa:27:46:0b:7b:04:db:cc:
93:da:33:ea:71:f2:e8:f2:40:97:37:45:a6:3c:16:05:27:20:
93:d5:06:12:40:ba:ac:5a:16:41:27:b4:fd:03:d3:ae:18:12:
96:7c:0a:80:9e:bf:64:5e:7c:41:68:89:af:ff:74:83:73:6e:
cd:07:8f:94:9d:7f:2a:fe:a3:12:26:2e:1f:2c:e7:fb:fa:27:
96:ff:00:fe:24:34:4c:21:e8:75:b9:cf:e1:71:ef:01:2c:e3:
58:42:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:28 2026 by rpki-client