
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3137312e302f32342d3234203d3e203535393936.roa
File: 3130332e34352e3137312e302f32342d3234203d3e203535393936.roa (raw, json)
Hash identifier: em0INCdOjHzKR4A5dFNDDw4gwUgBmzuNsgrZMsNJ6D4=
Subject key identifier: 60:96:5F:04:AC:1B:CD:F2:64:7A:AB:E1:D5:E1:18:43:4F:F1:B8:7E
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 622F7643A44A77E7B9F689AA74D0E84DD15ABA64
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3137312e302f32342d3234203d3e203535393936.roa
Signing time: Thu 07 May 2026 15:56:18 +0000
ROA not before: Thu 07 May 2026 15:51:18 +0000
ROA not after: Thu 06 May 2027 15:56:18 +0000
asID: 55996
IP address blocks: 103.45.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2f:76:43:a4:4a:77:e7:b9:f6:89:aa:74:d0:e8:4d:d1:5a:ba:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:51:18 2026 GMT
Not After : May 6 15:56:18 2027 GMT
Subject: CN=60965F04AC1BCDF2647AABE1D5E118434FF1B87E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:18:a6:ff:a4:15:d4:33:a6:44:fe:2e:9f:
77:82:76:ef:97:e7:b4:6c:c6:eb:58:c6:d6:ab:cb:
b9:1a:e7:f0:81:14:05:be:63:41:ef:62:72:02:6a:
bf:48:c3:5c:3f:60:5e:28:21:f2:44:b8:09:a6:fd:
25:04:33:79:1e:16:6e:82:52:c8:50:a1:5a:c2:8a:
f5:b9:f7:68:7c:f7:ee:f3:b3:98:c8:ec:66:5b:25:
e1:58:74:f4:22:79:69:1e:b9:fc:ca:9d:bc:3b:8b:
b6:cb:ff:1b:d6:e4:d5:fd:f0:74:37:ca:00:83:40:
a1:ec:7e:8a:16:ca:92:de:08:de:e8:d5:78:ed:3a:
0d:fb:f8:8e:4a:46:a3:cb:83:c0:a4:ff:84:51:f9:
c2:a4:8d:0a:5f:d2:9d:14:cc:38:9d:e1:ad:c7:4c:
3f:e2:86:15:64:18:41:90:3a:e9:d3:04:13:f7:46:
22:bc:df:79:98:46:61:90:5f:ee:f8:fd:29:56:f8:
98:8b:7b:6d:4b:c4:ef:71:12:95:50:ff:30:64:c4:
94:c0:9a:cf:7d:d5:a8:fc:39:fc:eb:58:0c:64:82:
81:fb:c5:57:80:f9:c7:c0:66:e0:2b:37:63:8e:67:
8b:29:6f:9e:82:c0:8d:46:18:7b:21:55:78:66:1c:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:5F:04:AC:1B:CD:F2:64:7A:AB:E1:D5:E1:18:43:4F:F1:B8:7E
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3137312e302f32342d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.171.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d5:af:64:d0:89:dd:87:59:83:55:32:37:cd:dc:51:a3:fd:
b6:01:93:55:86:d1:39:bc:01:84:d4:4c:52:01:34:e0:97:ba:
3d:9f:c0:b0:e3:18:e2:9d:a4:00:80:79:73:68:63:3e:eb:9f:
b6:a4:bd:11:3b:d0:9d:1d:9c:55:9c:e2:4f:9c:68:c6:56:5a:
56:69:7d:db:b4:20:df:36:1e:4d:f5:e0:c6:72:4f:18:32:60:
9f:ea:2d:32:a8:46:c6:a2:c1:d7:89:d1:60:83:72:63:4a:4f:
27:70:e4:93:49:0e:dc:0c:2e:ba:3c:c9:6b:9a:f3:6c:30:dc:
98:10:0b:1d:b9:c3:78:51:2b:bd:18:c3:61:f9:6b:e9:ce:49:
24:77:0a:60:99:8c:6a:24:3c:7a:8e:b1:81:86:71:cd:a4:60:
a1:7c:7b:a9:dd:17:df:b5:32:b8:af:c8:0c:71:b9:e2:9b:aa:
4a:59:18:5b:5e:a1:2d:0d:13:b7:26:62:8d:5c:ae:fe:84:a8:
2b:37:76:7b:6c:75:70:e4:c3:63:e5:a9:80:98:d8:db:87:de:
0f:b9:5a:0d:c6:e9:eb:20:5f:43:91:9b:ea:13:63:02:8e:7a:
2f:56:47:b2:23:10:f4:e2:c2:89:d6:69:86:eb:83:4e:7e:e3:
16:1d:6e:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 08:23:51 2026 by rpki-client