
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32342d3234203d3e203535393936.roa
File: 3130332e3139372e302e302f32342d3234203d3e203535393936.roa (raw, json)
Hash identifier: gS4XLM9HgOMm5Uf+aSzL9fKHi+M+tKbMB/NsUYdedTQ=
Subject key identifier: 06:00:72:59:DD:BC:9C:4A:82:0B:65:6E:86:C2:67:0F:E4:22:DB:C3
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 1A810258ABF81B53C0D611735487965979F049C2
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32342d3234203d3e203535393936.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 55996
IP address blocks: 103.197.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:81:02:58:ab:f8:1b:53:c0:d6:11:73:54:87:96:59:79:f0:49:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=06007259DDBC9C4A820B656E86C2670FE422DBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:f2:82:76:00:92:3b:7a:21:79:32:6f:d0:
bf:ff:10:a7:c2:5d:0a:84:bf:3f:20:0a:75:d6:3f:
42:3d:55:ca:6d:9e:9c:3a:db:f6:24:58:78:1e:08:
86:9c:4a:b5:50:8d:14:a7:3b:63:97:ee:5f:bf:d6:
dc:b0:02:93:3e:d7:15:2a:58:d8:92:fe:4e:58:e0:
d6:a9:41:fa:2c:d0:ab:83:e9:04:07:e3:30:71:ba:
0b:46:0b:03:89:f6:d2:63:ee:4c:f6:5c:1d:a3:0d:
37:ab:8c:65:1a:70:cf:ef:b1:ec:22:fc:d4:cd:dc:
71:6f:8a:5d:d6:ae:7d:a6:5f:4e:46:98:97:11:14:
80:e8:00:82:15:27:6d:df:23:d5:8f:1c:69:39:b9:
22:07:d2:f1:dd:8b:50:97:08:0a:5f:39:2c:6e:66:
fb:1c:4a:60:ed:dc:43:c5:27:39:bd:f5:7d:28:c6:
2b:15:71:56:12:1f:9d:9e:e0:14:80:e1:65:d0:db:
3d:51:4e:83:b5:29:9c:be:bc:6b:5b:45:b9:c8:aa:
02:f7:f8:74:e9:08:c5:db:d7:93:f8:b6:c7:96:2e:
fd:bb:45:dd:cc:9d:d5:94:b0:49:47:6e:14:a3:b0:
09:91:dc:ea:fb:aa:dc:55:82:b2:5e:f8:5e:c2:64:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:72:59:DD:BC:9C:4A:82:0B:65:6E:86:C2:67:0F:E4:22:DB:C3
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32342d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.0.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ad:85:01:bc:0e:f3:e6:e7:ab:50:97:6f:21:4c:16:fc:cd:
ae:a2:e9:ff:71:2d:7d:33:bb:81:a6:4d:65:ba:aa:e5:5f:21:
e7:43:c7:60:d3:f1:0a:98:5c:71:bc:06:c4:cc:48:c3:e9:6e:
f5:c8:7b:64:32:64:f5:07:7e:a6:f5:cc:b4:f9:6f:d0:95:5b:
ce:97:35:a0:a8:ab:41:96:0f:6b:94:ae:95:40:7c:f5:35:7b:
42:2f:49:27:28:41:05:9f:82:f5:64:41:ec:1c:28:ec:a5:1f:
3d:ef:79:f8:0b:30:2a:81:b0:43:43:35:1c:bd:9f:49:bf:85:
29:90:e0:13:93:d4:bc:44:22:57:78:df:06:74:81:ed:63:b9:
78:e1:d4:a9:59:1b:b0:fd:6e:d3:ef:5a:16:7b:7d:af:86:8c:
e3:c2:3f:99:4a:b9:97:47:40:cb:e5:83:da:e5:f1:ef:93:a3:
7a:76:4d:f9:41:71:11:24:e1:70:c0:1a:2b:f7:70:4b:4c:cd:
d4:05:c6:59:32:90:76:00:c8:62:af:6c:fb:81:3f:ba:b1:7c:
23:7d:1d:f1:6d:01:a1:42:00:19:1a:7e:1f:d9:bb:b3:47:f4:
9a:4f:bf:f5:d9:74:88:13:a6:a1:58:46:6c:6b:7f:56:41:5d:
a3:64:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:10 2026 by rpki-client