
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33322e302f32342d3234203d3e20313331323734.roa
File: 3130332e32302e33322e302f32342d3234203d3e20313331323734.roa (raw, json)
Hash identifier: noBDjNHzciQ+tdrNaDmKryRRSE2i53YupSAOrNrEr+M=
Subject key identifier: A4:42:11:DE:A6:6D:E7:EC:CA:28:01:A2:C2:5B:BC:CC:F0:F3:94:3B
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 30576716AD96AC7CBC8D4CA62F96B7E385CBFDE4
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33322e302f32342d3234203d3e20313331323734.roa
Signing time: Thu 07 May 2026 15:50:29 +0000
ROA not before: Thu 07 May 2026 15:45:29 +0000
ROA not after: Thu 06 May 2027 15:50:29 +0000
asID: 131274
IP address blocks: 103.20.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:57:67:16:ad:96:ac:7c:bc:8d:4c:a6:2f:96:b7:e3:85:cb:fd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:45:29 2026 GMT
Not After : May 6 15:50:29 2027 GMT
Subject: CN=A44211DEA66DE7ECCA2801A2C25BBCCCF0F3943B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:2b:19:3e:12:5f:7f:08:5d:c5:ee:ef:55:
be:a4:bc:92:f0:95:48:e5:f4:5b:80:a8:a9:0f:18:
54:60:c2:ad:01:42:34:03:fb:d8:14:30:6f:71:56:
85:92:3b:72:9f:c9:6c:4c:2d:c1:b1:0a:a0:06:8a:
a1:50:a7:f2:69:59:9a:eb:30:ed:63:d8:cf:2c:87:
2b:36:de:11:bf:e6:cf:14:19:a9:1f:74:3d:77:12:
1a:23:c8:19:c0:75:2a:b6:10:0e:7b:00:40:11:0d:
03:3f:44:f7:81:fa:93:45:22:e2:66:60:fc:ff:d9:
cb:58:c3:5a:8b:8a:6d:80:e2:2c:63:89:67:39:65:
5d:8b:58:b1:66:8a:8a:69:ce:24:ae:b1:66:65:2e:
0a:84:a8:f0:c1:bc:3b:7c:79:cb:be:c4:26:76:8b:
f4:99:a7:2c:b1:5d:49:90:a9:c0:ef:da:8e:53:16:
d8:36:b4:a6:73:b1:ff:ad:72:34:80:7f:11:87:71:
18:b0:31:b8:7f:b4:60:72:3e:b8:71:3d:c9:6f:96:
68:d7:56:8c:f3:38:20:ca:35:1a:39:60:09:42:2f:
ab:9b:dd:a4:da:ad:79:d8:7f:3f:6b:40:6a:76:be:
16:b9:20:f1:39:c2:92:55:e7:ce:d8:3e:06:26:f3:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:11:DE:A6:6D:E7:EC:CA:28:01:A2:C2:5B:BC:CC:F0:F3:94:3B
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33322e302f32342d3234203d3e20313331323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.32.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:39:06:0c:a0:74:98:85:00:bf:85:a6:2e:13:0c:be:31:83:
c1:ad:34:ef:cb:63:95:ed:38:fa:c2:9d:01:71:29:5d:34:e7:
55:c1:5c:aa:47:ac:b5:32:09:13:d5:0c:3c:21:5c:40:39:c2:
bd:f6:66:4e:be:0e:e7:64:ac:80:02:9e:a2:f8:a3:3a:b4:a4:
6f:03:cd:50:4a:7f:da:90:bb:bf:13:6a:ea:8a:72:94:82:b4:
5d:1c:a2:3c:77:f9:1c:9d:9e:4b:4d:c0:61:fe:06:62:fd:55:
3d:65:cc:aa:b1:27:98:5d:1b:3c:9d:f4:eb:36:e7:b3:56:9c:
47:ed:21:f2:84:a9:73:fe:75:be:0a:61:7d:11:75:72:62:ee:
45:d9:95:2d:c4:e5:c2:e6:d8:36:8b:bd:bf:80:66:7e:f0:4e:
8d:1a:d4:16:b2:78:52:dd:d6:db:24:64:df:ee:9a:52:77:56:
79:2a:76:be:f7:e4:fe:12:e0:79:63:d9:6d:fe:96:4a:38:03:
a0:39:55:bb:ce:d7:3f:cb:1a:d0:2f:ec:ed:e9:81:b3:69:ac:
36:e6:fb:4b:01:20:10:a8:d4:97:1d:77:fc:cd:52:f1:06:a7:
d0:4c:54:61:a1:12:4a:1a:f7:15:03:97:35:f2:c7:13:f7:00:
64:9c:ac:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:37:47 2026 by rpki-client