
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa
File: 3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa (raw, json)
Hash identifier: Tulzy2loSZQGgT5vI6JjBZGNxAzzMdSArmk0OaZXJyI=
Subject key identifier: DC:B1:85:7B:38:FB:C3:53:CE:AE:E6:B4:1D:E8:F7:20:81:6B:97:5A
Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
Certificate serial: 7A2BFD643BDBC7C3DBA0EBBAE22E245D78EAEFAD
Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa
Signing time: Mon 27 Jul 2026 16:50:33 +0000
ROA not before: Mon 27 Jul 2026 16:45:33 +0000
ROA not after: Mon 26 Jul 2027 16:50:33 +0000
asID: 137571
IP address blocks: 103.126.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2b:fd:64:3b:db:c7:c3:db:a0:eb:ba:e2:2e:24:5d:78:ea:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
Validity
Not Before: Jul 27 16:45:33 2026 GMT
Not After : Jul 26 16:50:33 2027 GMT
Subject: CN=DCB1857B38FBC353CEAEE6B41DE8F720816B975A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:fa:67:2e:8f:12:2b:84:4f:95:0c:52:ae:
62:ae:fc:af:b9:68:95:82:3e:37:ca:e5:c5:9f:05:
8e:6a:b0:57:a6:64:76:b7:d6:6f:a6:de:ec:ef:28:
e2:ce:92:a5:8e:7b:67:b9:43:64:f8:9a:9e:78:8a:
78:fc:23:58:38:9c:1a:bf:72:47:5b:09:71:17:c2:
cd:dc:5b:e9:ec:9c:39:e2:2e:76:42:58:7f:a9:16:
e0:e8:fe:09:e4:c4:c7:ca:89:52:89:12:70:39:1a:
1e:24:83:dd:95:39:e9:ff:d3:54:29:ef:f2:23:e6:
a5:bc:22:1d:e8:f9:4b:ac:2e:64:85:c5:6c:a1:9c:
4b:01:26:9a:cb:c6:9d:66:6b:d9:e3:78:eb:0b:7b:
01:6f:83:18:50:96:e1:a4:6c:a3:75:59:f1:b3:a5:
e6:0c:c6:0e:38:d9:3c:0b:be:ad:23:ac:d1:ad:52:
55:0e:45:4c:32:e3:60:91:2b:ca:4a:f7:3e:d4:fb:
c8:bf:e9:12:f0:85:ea:3c:84:5e:06:c8:f0:5f:2d:
95:68:ec:84:23:bc:cc:fa:16:b0:a9:f0:ca:5a:7b:
10:c4:47:78:f7:a6:fb:34:7f:19:8b:08:62:47:86:
7c:8e:5f:7e:6f:26:21:01:39:2d:ca:1d:d3:b4:bf:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B1:85:7B:38:FB:C3:53:CE:AE:E6:B4:1D:E8:F7:20:81:6B:97:5A
X509v3 Authority Key Identifier:
keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ed:79:57:70:da:56:c8:42:6d:88:9f:7e:e7:dd:85:82:64:
7a:49:f7:34:21:f7:b2:c8:a5:e4:19:03:46:77:54:be:6a:3e:
17:68:ea:54:2f:20:e7:fb:fd:06:92:2a:7d:f5:d3:5c:10:eb:
f5:ca:d0:0b:e9:6d:6b:3a:1a:db:43:a7:21:28:0d:52:d9:8a:
07:b3:ec:38:78:b6:45:c6:ef:c7:69:0e:02:c2:1b:56:af:f0:
83:6c:e9:1d:e1:0c:e7:47:86:e4:9c:e9:ac:fc:19:8d:81:f8:
6b:1f:e9:61:30:4c:36:6b:d9:2e:4b:3d:2f:51:7b:88:9b:9b:
ea:72:2f:59:2b:c9:bc:65:a1:b8:10:a3:d9:c2:f8:fa:7e:1a:
2f:f7:03:f5:2d:51:32:34:13:4c:71:63:cb:dc:16:b1:4c:ad:
49:38:3b:6b:d0:d9:97:e3:47:1b:fb:e7:a9:8f:cd:fd:21:af:
ff:4f:87:92:e1:a9:df:70:ab:2f:61:73:5b:53:5f:66:93:8b:
35:22:be:55:80:b4:5a:0f:8a:e2:ef:3e:ec:e5:62:ac:b1:cb:
8d:71:b9:08:49:37:bf:ef:84:d3:1c:56:76:bb:7b:9b:c6:53:
c7:53:44:12:d8:3d:ea:93:0f:16:97:67:14:97:5d:97:d3:ba:
b7:6d:4d:78
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUeiv9ZDvbx8PboOu64i4kXXjq760wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0
Q0UwN0QyQTAeFw0yNjA3MjcxNjQ1MzNaFw0yNzA3MjYxNjUwMzNaMDMxMTAvBgNV
BAMTKERDQjE4NTdCMzhGQkMzNTNDRUFFRTZCNDFERThGNzIwODE2Qjk3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVPpnLo8SK4RPlQxSrmKu/K+5
aJWCPjfK5cWfBY5qsFemZHa31m+m3uzvKOLOkqWOe2e5Q2T4mp54inj8I1g4nBq/
ckdbCXEXws3cW+nsnDniLnZCWH+pFuDo/gnkxMfKiVKJEnA5Gh4kg92VOen/01Qp
7/Ij5qW8Ih3o+UusLmSFxWyhnEsBJprLxp1ma9njeOsLewFvgxhQluGkbKN1WfGz
peYMxg442TwLvq0jrNGtUlUORUwy42CRK8pK9z7U+8i/6RLwheo8hF4GyPBfLZVo
7IQjvMz6FrCp8MpaexDER3j3pvs0fxmLCGJHhnyOX35vJiEBOS3KHdO0v1aHAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU3LGFezj7w1POrua0Hej3IIFrl1owHwYDVR0j
BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy
QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxMzM0Nzg1LzAvMzEzMDMzMmUz
MTMyMzYyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM1Mzcz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGd+ZDANBgkqhkiG9w0BAQsFAAOCAQEAoO15V3DaVshCbYif
fufdhYJkekn3NCH3ssil5BkDRndUvmo+F2jqVC8g5/v9BpIqffXTXBDr9crQC+lt
azoa20OnISgNUtmKB7PsOHi2Rcbvx2kOAsIbVq/wg2zpHeEM50eG5JzprPwZjYH4
ax/pYTBMNmvZLks9L1F7iJub6nIvWSvJvGWhuBCj2cL4+n4aL/cD9S1RMjQTTHFj
y9wWsUytSTg7a9DZl+NHG/vnqY/N/SGv/0+HkuGp33CrL2FzW1NfZpOLNSK+VYC0
Wg+K4u8+7OVirLHLjXG5CEk3v++E0xxWdrt7m8ZTx1NEEtg96pMPFpdnFJddl9O6
t21NeA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:47 2026 by rpki-client