
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138392e302f32342d3234203d3e2034383131.roa
File: 3130332e36312e3138392e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: bJ8OeKYd/HLWGuDn51Oeik2TThv04WXJ948zAzMKHC4=
Subject key identifier: F3:32:74:BA:A2:5D:58:96:16:53:2C:13:6D:F5:65:CC:D3:52:EA:9E
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 5AE546F7C39F07FD10964664AB077804230443BA
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138392e302f32342d3234203d3e2034383131.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 4811
IP address blocks: 103.61.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e5:46:f7:c3:9f:07:fd:10:96:46:64:ab:07:78:04:23:04:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=F33274BAA25D589616532C136DF565CCD352EA9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:e1:d5:e4:0c:49:97:5b:5e:e4:be:fa:47:
17:79:86:5d:1d:fa:46:6b:64:53:78:7f:20:0f:dd:
a1:b3:ed:b8:55:e2:f8:dc:16:c0:85:14:ee:e1:66:
e1:5b:86:1c:11:a9:25:04:86:db:21:5b:60:7c:15:
ea:1d:0b:bb:01:9d:c9:00:67:36:25:5f:bd:e9:68:
56:c2:b9:86:ef:7d:72:88:c8:fd:74:a4:31:c1:45:
1b:70:2e:11:8f:79:e2:7c:02:a9:16:1e:32:49:4c:
67:dc:d8:0a:4a:28:65:7e:0e:d5:71:9a:70:b6:dc:
5f:fe:51:a8:1a:d5:65:1e:bb:38:bf:09:b9:15:cb:
f7:24:22:90:f1:dc:65:cd:98:e9:73:07:47:f9:c1:
7a:46:13:bf:8c:29:71:97:ca:45:80:d9:25:95:c1:
93:9f:08:44:64:29:8a:16:51:5b:ce:73:4c:ee:6f:
45:90:e7:39:9c:bd:3c:fb:e7:3c:5b:49:13:18:0e:
77:47:d0:35:fb:40:61:d9:57:68:25:9c:56:1c:1c:
08:12:78:a8:80:15:2f:14:86:2c:0c:08:98:c7:3f:
3a:65:57:ff:ab:b9:ec:b0:e6:78:0c:ca:06:d0:a5:
85:43:cc:9f:18:57:c0:75:c0:54:67:2f:76:dc:76:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:32:74:BA:A2:5D:58:96:16:53:2C:13:6D:F5:65:CC:D3:52:EA:9E
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138392e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.189.0/24
Signature Algorithm: sha256WithRSAEncryption
06:02:f0:1e:61:8e:24:09:95:79:0f:81:8b:36:2d:6d:d2:99:
99:84:4a:3e:75:23:4f:b3:53:3b:8b:01:56:23:93:e6:67:95:
b7:d4:cd:8a:36:9d:84:59:82:b7:07:20:e7:c5:56:a9:02:ff:
f5:9e:fd:e3:32:15:bc:31:13:ee:f0:da:07:b4:c2:4d:41:8f:
a4:2c:4c:ff:1d:12:72:e4:23:34:86:b9:33:53:27:17:30:be:
ff:22:25:c1:0d:bf:bd:df:3a:75:e2:8a:36:c4:06:b2:c6:d9:
cd:50:c4:59:ec:97:d8:cd:78:12:97:1a:25:26:ba:71:28:71:
10:1c:e6:80:35:c1:c0:82:6e:9f:8e:03:db:31:67:21:a0:20:
cb:4c:be:00:17:53:52:21:97:90:b5:c2:3c:2e:28:43:8b:ca:
e4:78:f6:2b:5a:e3:c6:8c:34:bb:9c:4c:8b:95:af:4e:79:94:
2c:76:ef:6f:b4:d7:69:fd:91:01:27:17:43:36:c3:4b:0c:a0:
fb:18:b5:44:03:aa:72:c4:5d:86:63:e3:17:c6:43:6a:1b:eb:
d6:9b:9a:13:c4:2d:b1:1f:c3:37:a3:c2:a9:99:fc:94:df:db:
38:8c:b2:7f:bd:9b:fb:c5:27:75:13:f6:72:68:9d:79:0b:ff:
41:bf:62:ab
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUWuVG98OfB/0QlkZkqwd4BCMEQ7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA1MDcxNTU4NDJaFw0yNzA1MDYxNjAzNDJaMDMxMTAvBgNV
BAMTKEYzMzI3NEJBQTI1RDU4OTYxNjUzMkMxMzZERjU2NUNDRDM1MkVBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5v+HV5AxJl1te5L76Rxd5hl0d
+kZrZFN4fyAP3aGz7bhV4vjcFsCFFO7hZuFbhhwRqSUEhtshW2B8FeodC7sBnckA
ZzYlX73paFbCuYbvfXKIyP10pDHBRRtwLhGPeeJ8AqkWHjJJTGfc2ApKKGV+DtVx
mnC23F/+Uaga1WUeuzi/CbkVy/ckIpDx3GXNmOlzB0f5wXpGE7+MKXGXykWA2SWV
wZOfCERkKYoWUVvOc0zub0WQ5zmcvTz75zxbSRMYDndH0DX7QGHZV2glnFYcHAgS
eKiAFS8UhiwMCJjHPzplV/+rueyw5ngMygbQpYVDzJ8YV8B1wFRnL3bcdmh/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU8zJ0uqJdWJYWUywTbfVlzNNS6p4wHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzEzMDMzMmUzNjMx
MmUzMTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGc9vTANBgkqhkiG9w0BAQsFAAOCAQEABgLwHmGOJAmVeQ+BizYtbdKZmYRK
PnUjT7NTO4sBViOT5meVt9TNijadhFmCtwcg58VWqQL/9Z794zIVvDET7vDaB7TC
TUGPpCxM/x0ScuQjNIa5M1MnFzC+/yIlwQ2/vd86deKKNsQGssbZzVDEWeyX2M14
EpcaJSa6cShxEBzmgDXBwIJun44D2zFnIaAgy0y+ABdTUiGXkLXCPC4oQ4vK5Hj2
K1rjxow0u5xMi5WvTnmULHbvb7TXaf2RAScXQzbDSwyg+xi1RAOqcsRdhmPjF8ZD
ahvr1puaE8QtsR/DN6PCqZn8lN/bOIyyf72b+8UndRP2cmideQv/Qb9iqw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:23:03 2026 by rpki-client