
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034383131.roa
File: 3130332e36312e3138382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: 5d5Vjwm2rktCCp830jqbkVnLiUJ4EyPxVRWFN92YceM=
Subject key identifier: 38:A5:A5:D1:7F:EC:24:B4:AE:32:85:37:A2:D2:1F:41:CC:60:5A:8F
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 4544F7C3EC73F5A6C4C378860495F878688D3BA8
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034383131.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 4811
IP address blocks: 103.61.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:44:f7:c3:ec:73:f5:a6:c4:c3:78:86:04:95:f8:78:68:8d:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=38A5A5D17FEC24B4AE328537A2D21F41CC605A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:d6:c9:20:d6:20:d0:46:14:28:b9:22:80:
a1:95:fb:31:e5:72:2d:c5:7a:f5:92:a9:06:c0:1c:
6c:1f:14:aa:31:65:f4:02:0a:7d:ed:1e:c0:9c:cf:
1c:df:e9:45:b6:db:5d:79:e0:9e:a6:7c:1d:93:f7:
9c:68:6d:67:cf:1c:18:69:d0:66:e2:3e:bd:0d:60:
0e:f4:ac:73:50:10:61:3e:02:db:b6:12:17:e9:04:
d5:6b:81:8a:ba:fd:62:80:fa:53:ad:35:66:ad:75:
52:ee:a0:b6:7b:52:bd:1a:fb:b4:78:45:f9:e5:50:
45:9c:5e:d1:69:d5:c8:64:54:1a:62:ec:e2:98:7a:
26:1b:98:71:38:8b:00:7f:4c:e1:05:fc:56:5b:da:
c0:92:49:fb:77:c4:4b:e0:55:40:7b:f7:b4:c5:72:
64:55:bd:0e:04:be:8a:1f:c3:7e:0d:57:6c:6a:02:
e9:c7:2c:ec:e4:6e:72:bc:61:9e:d5:63:e1:cf:b8:
6d:69:f0:30:98:6a:83:89:d5:cb:a0:d7:4c:93:68:
bb:0d:23:4f:4a:67:34:0e:c7:9d:bd:78:72:52:b2:
d7:b8:b1:5e:d8:96:7c:e5:77:a3:0a:af:20:5b:3b:
26:d8:00:77:b7:d3:9c:03:c4:34:f9:17:48:06:5d:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:A5:D1:7F:EC:24:B4:AE:32:85:37:A2:D2:1F:41:CC:60:5A:8F
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.188.0/24
Signature Algorithm: sha256WithRSAEncryption
56:05:51:22:dd:a5:99:bf:79:55:e4:1e:72:14:58:ba:f0:fe:
9e:c9:d0:ea:b8:f6:bf:a4:b9:76:27:6b:03:2e:b0:c5:ec:f7:
79:0e:91:09:e8:c7:32:d3:65:d4:d2:00:bc:68:de:76:12:87:
af:32:7b:e4:f2:b6:38:c6:46:3f:9b:b5:aa:e3:6d:39:94:fb:
a6:49:1f:a7:fc:b0:e0:c5:b6:66:89:13:52:fd:d1:fa:d8:6e:
94:e3:b9:9d:74:f1:68:98:c7:e5:6b:08:8c:02:52:3c:e0:a4:
f9:54:e8:d0:59:1b:6a:a4:c0:cf:3d:c5:a0:67:99:1c:e8:bc:
9b:dd:4b:29:a9:25:e3:9b:ac:16:88:21:d6:c5:d2:67:60:b6:
7b:46:a3:8d:36:65:c2:aa:24:97:30:c1:8d:dd:e0:5f:79:fc:
77:4e:e5:8c:7c:33:b6:75:8a:39:0d:fa:c8:90:be:f7:75:99:
a7:70:8a:6b:07:ad:76:0e:f3:d6:7c:a6:e9:10:d1:68:e0:e5:
df:41:b4:73:e2:92:bf:42:fc:03:8d:58:a7:a5:a2:bf:e2:f5:
45:6c:db:a7:87:e1:ba:84:71:3c:2e:07:bf:ca:b8:98:16:7d:
da:54:b2:9b:b2:19:c6:18:2c:94:7e:b7:07:db:d6:21:2e:6e:
d0:d6:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:55 2026 by rpki-client