
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e203535393936.roa
File: 3130332e3139372e302e302f32332d3234203d3e203535393936.roa (raw, json)
Hash identifier: H9hsV7HURx454jiYtrgsOddljfZyc/Z0CdeqlfGOt0c=
Subject key identifier: 12:25:BE:9C:63:EB:6C:C0:84:18:1F:95:43:4F:6B:D3:61:94:10:4F
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 2A411C77DF086F5CCD090F306EA36E629FCFBF26
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e203535393936.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 55996
IP address blocks: 103.197.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:41:1c:77:df:08:6f:5c:cd:09:0f:30:6e:a3:6e:62:9f:cf:bf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=1225BE9C63EB6CC084181F95434F6BD36194104F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:43:4b:8a:cc:9b:6f:70:f3:e9:84:8f:a5:
df:7f:5b:02:1c:e3:82:e6:a4:76:8d:11:f2:2b:e9:
69:d2:78:9c:0b:67:b6:a8:d8:1c:14:60:90:c9:9d:
02:84:2b:f5:e0:82:52:b2:8f:c0:5a:5b:8e:c1:4d:
a2:00:8f:5e:bd:95:22:3e:30:7e:81:32:d5:8f:7a:
ec:68:96:2f:b1:74:0c:2b:cb:70:17:6c:d3:b9:0a:
87:9a:cd:8c:9d:7c:10:05:71:b5:b0:c0:4d:66:6e:
e7:4d:56:95:5e:c7:96:2c:53:a4:de:1f:5c:42:e3:
18:34:17:2d:95:96:ce:de:c7:8b:ad:1f:1c:2b:bf:
5e:60:ba:91:ad:27:a9:05:ed:fd:ed:4e:63:d1:61:
44:f9:51:e6:df:b0:d5:dd:6b:38:6a:27:04:13:53:
73:1a:c7:a0:62:ec:13:c6:a8:26:75:ce:63:6d:60:
4a:2b:55:09:0b:7c:5d:e7:55:15:35:a1:ab:e8:2b:
10:a3:85:de:0b:4b:1f:e7:46:b3:18:cf:7f:04:8a:
a1:31:ee:fc:fa:a0:2c:cf:42:53:60:e0:6f:bf:55:
d5:78:94:03:4b:f1:43:d0:c4:6b:6c:df:ae:2d:30:
0f:21:22:85:1a:36:14:2f:ff:3b:95:8d:68:2b:52:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:BE:9C:63:EB:6C:C0:84:18:1F:95:43:4F:6B:D3:61:94:10:4F
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:e2:11:5a:cb:04:64:8d:1c:5c:e1:a9:56:49:be:81:26:a4:
ba:c6:21:c2:96:4c:1a:d8:71:21:73:3c:f3:25:b1:c2:ee:c8:
fa:f1:7b:45:94:c4:a4:8a:3a:bf:2b:31:7e:e4:3c:25:12:f8:
d6:16:b8:c8:01:93:d7:95:61:a5:d6:9e:ee:29:f8:75:ae:bb:
4a:c4:c7:ac:77:ec:4c:68:b2:9b:40:fa:7f:90:15:0d:aa:dd:
d0:44:54:1a:cc:13:3c:bf:ce:04:19:bf:4f:de:c3:0c:78:a3:
01:b2:98:4a:cc:5c:bb:6a:e0:32:98:06:9c:84:75:22:0e:60:
b9:b6:75:f5:63:d3:74:71:9a:ae:07:7d:86:e7:98:bc:a8:6e:
72:47:9f:85:82:86:48:d8:7b:a6:2c:00:52:b3:d9:fc:78:f5:
78:d2:c8:41:99:22:86:0b:71:14:1d:1d:88:59:c8:9d:f9:35:
ba:20:c3:2f:4c:df:c4:4a:43:de:f1:c8:1f:c7:3f:09:de:73:
9a:29:0e:c8:6f:63:19:9d:bd:5f:61:21:f6:f7:e9:18:eb:33:
2b:78:d7:07:f1:80:6c:54:d2:ca:a8:09:8a:74:82:f8:21:58:
90:94:5d:93:bb:bf:6b:61:be:76:cf:e6:c3:98:cf:07:ae:0f:
7e:70:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:30 2026 by rpki-client