
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138392e302f32342d3234203d3e203535393936.roa
File: 3130332e36312e3138392e302f32342d3234203d3e203535393936.roa (raw, json)
Hash identifier: giIso/4gJFu0KNIh4Iogg2rYAItUOJo5haYbY2/YwiY=
Subject key identifier: C6:6A:0C:C0:06:1D:96:0F:5C:AC:65:D6:2B:4D:DB:AF:29:F2:E4:F7
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 24F0B98F64B816FE2CD063FCC41BA783F0CB8A36
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138392e302f32342d3234203d3e203535393936.roa
Signing time: Thu 07 May 2026 16:06:43 +0000
ROA not before: Thu 07 May 2026 16:01:43 +0000
ROA not after: Thu 06 May 2027 16:06:43 +0000
asID: 55996
IP address blocks: 103.61.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f0:b9:8f:64:b8:16:fe:2c:d0:63:fc:c4:1b:a7:83:f0:cb:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 16:01:43 2026 GMT
Not After : May 6 16:06:43 2027 GMT
Subject: CN=C66A0CC0061D960F5CAC65D62B4DDBAF29F2E4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:2e:72:61:19:6c:57:f8:8e:59:73:4d:5f:
ab:58:30:81:6b:91:09:e2:4b:da:0f:ac:b9:5b:90:
10:fa:5e:36:63:0f:c0:94:b5:14:ba:b0:cb:b2:15:
38:b4:bb:a2:77:c9:e1:5a:bc:2d:af:48:ca:ee:8a:
ce:e1:b3:8c:a5:f5:85:d5:58:9e:c5:fc:49:8a:ae:
4b:ee:1a:9f:d9:0d:0a:b6:ef:3b:d9:90:c8:dc:ae:
c5:4a:65:ab:ed:7d:f6:b8:f0:bf:8a:b6:1a:7e:a5:
ee:38:33:40:de:00:81:cb:96:cf:17:c2:a2:e4:6e:
ae:ea:4a:98:bc:37:d4:29:16:e0:2b:21:f1:c5:04:
d0:31:dc:d2:fd:26:a2:13:c9:9c:7f:90:f4:9a:09:
f0:84:7e:80:0b:22:c5:b7:3a:7f:9e:69:4c:e5:96:
67:8e:e0:82:eb:a0:17:d7:4b:d7:f1:32:4d:98:0a:
ba:1f:f7:ad:25:b0:43:50:32:58:7c:a7:41:a0:16:
44:42:76:2f:4b:54:2e:62:ce:a3:2b:74:ac:6a:4a:
bb:86:b7:04:97:94:5d:c7:0b:29:00:04:8d:26:68:
2a:ae:24:e6:84:de:b1:2e:c7:67:ef:00:99:1f:51:
c5:fb:52:56:fb:04:1d:35:e6:a7:6e:d1:29:f4:24:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:0C:C0:06:1D:96:0F:5C:AC:65:D6:2B:4D:DB:AF:29:F2:E4:F7
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138392e302f32342d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:6e:ac:3e:73:60:ca:77:6f:bc:94:d6:70:70:0a:46:a3:54:
4f:b5:25:46:a5:90:3e:ed:50:f9:d7:51:1a:5a:4a:50:0a:4f:
a0:b6:bf:08:d4:7e:67:75:44:9c:3c:03:9d:a9:94:31:45:79:
a6:b0:dd:b7:df:87:39:9d:a6:60:8c:4e:b0:4f:e4:b5:57:59:
98:ac:2e:5b:5d:74:1e:f9:b0:b4:31:2e:08:21:cb:61:47:1f:
ce:68:2b:fe:bb:8c:fc:68:57:47:ac:98:53:47:5d:02:9d:15:
c7:ac:f7:8f:1e:00:bf:8c:55:af:cb:09:c5:52:7c:4f:c8:01:
9f:8c:b0:30:33:d5:2c:24:cd:33:c9:73:9c:f5:8c:7b:04:1b:
bc:2b:6a:ce:05:8d:30:1a:e0:31:d4:99:fc:9a:29:8b:c3:60:
84:d8:e5:96:f4:69:92:9f:ca:70:fe:a3:fb:5d:34:99:c7:01:
83:ba:59:5a:7c:8f:d0:91:82:22:a0:d4:89:dc:a3:4b:5f:4f:
2e:87:66:51:39:f2:ff:b5:e8:63:3c:be:db:80:83:18:ea:07:
e0:14:94:26:da:c8:96:2d:03:b9:12:96:15:13:36:26:be:58:
62:a7:a8:02:4d:db:20:e8:ed:02:16:8a:c7:6f:fe:a2:40:16:
8f:53:10:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:51 2026 by rpki-client