
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa
File: 3130332e3139372e332e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier: FItEo1dOsmYj+3DmabSGIv72m6Lk7RbbGmsWTRwaFhM=
Subject key identifier: CD:3B:05:37:75:4B:3C:4D:23:14:C8:6B:3A:E0:F6:08:AB:21:6B:8B
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 7E852E1423DCC0137EBFB219F53F033162DBCCA2
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 58542
IP address blocks: 103.197.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:85:2e:14:23:dc:c0:13:7e:bf:b2:19:f5:3f:03:31:62:db:cc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=CD3B0537754B3C4D2314C86B3AE0F608AB216B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:c4:91:5d:17:a1:86:d5:82:b7:5c:b1:f2:
58:d1:25:7d:e9:f9:e3:34:e3:c0:65:32:5f:c3:87:
27:c1:ba:6a:cd:b7:10:d9:bf:ba:e4:0e:58:ce:1b:
d8:8a:ef:5d:2e:95:d9:6e:47:e2:9a:c6:3e:ab:c9:
9b:75:90:59:56:bc:7c:d9:e7:70:cd:29:14:d6:3d:
7f:0d:23:46:82:f0:e1:9f:d0:e7:4e:34:d7:eb:38:
c1:5d:11:58:89:91:94:c5:32:f4:7d:42:ff:84:db:
d0:52:b2:dc:b2:ec:20:42:36:61:13:46:33:98:4f:
ce:34:b1:64:91:e7:9e:fd:18:50:92:83:05:d9:e3:
b7:7c:49:7a:ef:b8:b3:85:f9:b7:75:58:46:50:1c:
4f:ec:d7:c1:d2:e2:e4:6f:c4:55:a0:8a:f2:e7:0f:
c4:52:da:58:e0:62:a2:96:d5:36:13:90:0c:8c:63:
88:2e:e7:10:73:47:11:dc:5b:56:32:a5:1d:0a:de:
76:5e:97:af:1b:86:32:e4:fb:cb:de:f9:27:8a:09:
62:1f:b8:40:3b:2d:f8:a7:a6:8b:e9:e7:97:84:65:
7c:c9:ea:aa:25:88:ce:ca:1d:32:24:3e:77:af:29:
b5:81:da:45:1b:7e:fe:4d:3b:ff:86:51:1c:4f:00:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:05:37:75:4B:3C:4D:23:14:C8:6B:3A:E0:F6:08:AB:21:6B:8B
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.3.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9f:16:34:73:f0:ba:0e:29:9b:3a:a7:5e:5e:20:ea:38:61:
40:06:b6:ec:0e:59:1a:b1:cf:7c:f2:7f:4f:f9:a0:ef:a4:fa:
28:f5:81:3d:bc:5d:41:91:01:a1:ff:c8:5e:3f:53:98:69:4c:
26:13:9b:3f:ce:68:22:03:86:a5:66:25:62:9f:40:53:bb:3f:
11:be:3e:c8:99:c4:27:db:5a:76:fb:53:b8:ab:f6:d2:b6:ab:
d4:68:16:98:ec:60:fd:c4:bc:41:79:e3:49:d4:9c:cf:8a:4c:
47:c0:6b:7a:c5:c1:69:7f:08:13:e0:14:28:12:a2:f9:bb:9a:
eb:bd:ca:e8:bf:17:43:75:c7:25:6a:86:94:2c:a7:53:18:74:
7f:7c:50:ef:ed:43:09:d0:32:30:0f:c9:2e:40:fa:2d:d5:77:
f8:b0:81:c4:32:08:64:6e:33:a9:a1:01:1a:ab:4c:81:3c:98:
40:19:2c:9d:17:e2:70:6b:cd:39:0e:d8:35:40:99:fe:db:52:
2a:43:6d:dc:ca:b1:3c:d4:2b:1c:2a:73:76:18:b5:a3:cd:67:
7a:4a:c9:10:93:1c:e9:ee:bd:6a:16:ba:cb:04:f3:8e:4b:16:
69:eb:44:4d:52:f7:a3:e2:26:2e:bf:ed:2f:6b:89:d4:b3:6c:
38:9f:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:56 2026 by rpki-client