
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa
File: 3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa (raw, json)
Hash identifier: 79Z+OEgq58IFIFUr3XZSZV6jT+sIs4BTv39+/fzGp6A=
Subject key identifier: 10:47:4E:D0:98:33:FA:90:7D:98:3E:EB:26:F9:EF:CD:9B:36:F3:D7
Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668
Certificate serial: 07C3D13F5F2005375E8BC76C16ED8C9B23DE5354
Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa
Signing time: Thu 21 May 2026 03:32:04 +0000
ROA not before: Thu 21 May 2026 03:27:04 +0000
ROA not after: Thu 20 May 2027 03:32:04 +0000
asID: 151951
IP address blocks: 103.142.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c3:d1:3f:5f:20:05:37:5e:8b:c7:6c:16:ed:8c:9b:23:de:53:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668
Validity
Not Before: May 21 03:27:04 2026 GMT
Not After : May 20 03:32:04 2027 GMT
Subject: CN=10474ED09833FA907D983EEB26F9EFCD9B36F3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:10:8b:c8:20:d9:99:1e:da:8f:d4:5a:66:
92:99:72:2d:b4:0c:4f:39:88:89:0d:0f:3d:e6:2f:
01:24:3c:4f:49:4a:19:19:e9:d7:e0:64:cd:10:84:
53:eb:c8:84:33:f1:c7:e7:de:97:a0:fc:d8:8c:d3:
77:c8:0d:94:19:9d:ab:8a:ae:0d:ba:63:d3:0f:36:
fa:7f:60:ce:05:f4:7f:e3:c7:ac:3a:17:54:25:50:
22:6e:ef:bc:0a:c9:24:a2:6c:1d:1e:8f:63:8f:13:
2a:c5:17:dd:8f:67:73:9a:01:66:dc:85:d8:ad:6b:
f8:01:b7:ec:89:2f:d8:19:27:16:00:1a:66:ae:39:
01:73:b5:ec:62:80:1e:f0:14:2f:af:33:a7:8f:bc:
50:9a:2a:42:f1:42:30:40:08:a5:fd:71:4b:5d:59:
eb:f3:86:0d:ae:ec:4b:90:c0:43:dd:ef:b5:67:38:
9d:ea:d8:93:f1:a2:85:a3:85:40:f5:04:c4:c3:8b:
f3:90:21:54:ec:76:f5:17:5c:88:ab:e1:9c:19:5e:
17:5b:51:ae:be:50:37:44:21:73:c5:35:38:e2:9a:
0f:23:fb:04:62:5b:5f:38:79:63:0f:ce:2e:17:f3:
df:39:3f:04:07:10:cc:3c:9d:1b:1c:43:3c:90:a1:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:4E:D0:98:33:FA:90:7D:98:3E:EB:26:F9:EF:CD:9B:36:F3:D7
X509v3 Authority Key Identifier:
keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.83.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d7:27:01:4c:54:b4:cb:44:32:84:d6:f7:58:37:b2:0d:f9:
c2:5a:ae:b4:b0:ab:39:0f:15:8e:27:26:3a:58:a1:7c:6b:f5:
7b:f4:30:52:20:e8:16:e4:3c:87:17:e5:1d:18:9a:a1:99:3d:
10:43:c3:2f:0a:40:47:01:67:63:ef:81:0a:8e:50:ff:0e:f0:
9e:b8:30:17:18:72:5c:95:aa:0f:db:12:9d:37:9a:3d:7f:30:
37:7b:d3:fd:93:8c:d9:fe:94:e0:f8:2d:00:35:63:ff:ff:15:
df:12:88:30:67:55:c7:c9:18:fa:45:b4:ac:62:0e:4f:f4:f1:
02:96:a6:88:19:16:d1:f3:d5:d8:b6:18:49:2b:af:16:81:58:
af:0a:11:43:43:68:4e:30:15:dc:20:be:d8:80:4b:d2:52:65:
a1:af:da:67:93:27:e4:eb:46:5f:a9:62:b8:72:fb:a2:4e:94:
5a:e3:6f:eb:02:7a:a2:c1:c9:0d:af:30:1d:1d:95:7f:b9:23:
64:9d:fd:48:69:24:48:aa:f7:5d:07:91:d1:62:1b:dd:b8:c3:
4a:a0:b4:bf:2f:93:b4:a5:b7:64:a9:91:5d:b6:97:63:7c:be:
75:e1:02:85:07:2a:ae:9b:a8:c7:e5:44:e9:0c:59:48:b4:c0:
c7:f5:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:37 2026 by rpki-client