
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34302e3137342e302f32332d3234203d3e203535393936.roa
File: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (raw, json)
Hash identifier: J1BtbywEK2jVbGM+X/gcyGPdNErL2cdbOfI+KpNvCc4=
Subject key identifier: E1:2C:2F:3E:BC:8F:E8:DB:F7:92:CE:66:EE:21:D8:DE:48:8F:67:6A
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 479851B6F640BF4374FDBE9BF81F9AAB94662D53
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34302e3137342e302f32332d3234203d3e203535393936.roa
Signing time: Thu 07 May 2026 16:06:42 +0000
ROA not before: Thu 07 May 2026 16:01:42 +0000
ROA not after: Thu 06 May 2027 16:06:42 +0000
asID: 55996
IP address blocks: 103.40.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:98:51:b6:f6:40:bf:43:74:fd:be:9b:f8:1f:9a:ab:94:66:2d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 16:01:42 2026 GMT
Not After : May 6 16:06:42 2027 GMT
Subject: CN=E12C2F3EBC8FE8DBF792CE66EE21D8DE488F676A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:8c:f7:7e:11:6b:74:ec:3c:36:7c:3b:cd:
37:ec:0a:be:a9:b2:a9:e0:b8:a3:2f:d9:56:7e:93:
63:2f:2d:e6:10:6a:18:e2:07:c3:79:e3:fa:6b:a3:
33:3e:f5:0c:aa:bc:d0:ed:6a:3a:41:bb:e0:11:ca:
c1:0b:51:96:ce:1f:7c:d3:a9:2b:07:cb:7f:4a:04:
41:d4:39:3d:ee:7b:4b:fe:75:30:cd:06:bd:63:4b:
42:47:e8:09:5b:61:21:d8:dd:13:c4:4f:4b:6e:bd:
ca:3b:46:5d:3f:98:0c:a5:84:8f:b1:96:98:15:31:
e9:44:f1:8d:9b:4c:6f:8d:28:dd:05:28:86:66:fc:
f3:4f:df:b1:28:47:da:25:b2:7b:db:cf:d2:2b:08:
5f:4f:ac:b2:f3:c1:3c:ca:b2:ee:6c:64:84:52:b0:
7b:3a:f9:45:e0:2e:2d:5c:91:a3:9e:8f:01:89:c8:
e5:6c:a4:3d:fa:e3:68:4e:d6:34:34:21:b6:55:b9:
37:0f:d6:ee:82:7f:54:42:f8:a7:5b:98:0a:ad:af:
ab:a2:d4:19:52:04:b8:d1:a2:32:d5:cd:4a:79:f0:
fc:59:f4:d0:97:a4:28:91:c7:1f:fb:dd:ec:94:0c:
8d:4e:14:c0:13:e7:29:ea:4a:bb:a0:a1:4f:da:92:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2C:2F:3E:BC:8F:E8:DB:F7:92:CE:66:EE:21:D8:DE:48:8F:67:6A
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34302e3137342e302f32332d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.174.0/23
Signature Algorithm: sha256WithRSAEncryption
53:81:d5:44:7d:14:7f:7b:72:da:5e:96:2b:8d:ac:ce:8c:85:
f9:e1:f3:6f:b0:03:1c:80:e7:54:d2:ec:33:d1:82:9b:1e:f4:
7f:37:a1:61:61:c9:be:32:46:d0:97:1d:d7:84:50:e9:20:94:
8f:7c:f2:53:37:f5:51:53:02:b0:d0:0b:82:3e:1c:53:56:95:
b0:ad:82:08:25:96:9b:41:90:a6:c3:ea:a0:75:10:6e:ae:c0:
74:62:2c:51:2c:dd:cc:f3:7c:02:b9:04:45:f9:91:9b:15:07:
8e:8c:45:bb:98:1e:90:08:48:4f:e8:02:34:f0:d0:99:f3:38:
b9:99:2e:f5:93:d4:93:28:c4:37:ef:3b:53:e0:bf:f2:10:45:
55:52:5f:b2:6f:fa:c3:40:9d:31:7a:9c:0d:6b:a2:0c:d7:5c:
a1:60:33:8a:8d:e7:87:95:03:40:02:b2:3c:fc:3b:a6:4e:d9:
9e:16:82:76:34:df:7e:7e:de:03:6c:70:cc:54:1b:f7:d1:2a:
ad:7f:d3:79:2a:76:ab:f4:7d:81:08:d0:9c:5e:fd:aa:1d:1e:
f7:fd:ce:c3:eb:43:ee:e1:3e:91:05:f3:32:b8:57:64:d0:3f:
b4:bf:3a:aa:c5:a4:56:a4:fc:8a:81:6c:9a:38:04:ae:8a:08:
0c:26:44:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:36:11 2026 by rpki-client