
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32332d3234203d3e2034383131.roa
File: 3130332e36312e3139302e302f32332d3234203d3e2034383131.roa (raw, json)
Hash identifier: CBKxF4mrYIU4hd6Ww9WMpGNTlOd0LqHFkID3/+5GoMg=
Subject key identifier: 6C:38:DD:A4:B7:34:D5:52:48:E5:05:27:4A:25:F9:0D:B6:A9:45:31
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 6B6BA0E0A07BD6D7B8F2CC0C648C7D0ED0514E27
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32332d3234203d3e2034383131.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 4811
IP address blocks: 103.61.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6b:a0:e0:a0:7b:d6:d7:b8:f2:cc:0c:64:8c:7d:0e:d0:51:4e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=6C38DDA4B734D55248E505274A25F90DB6A94531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:b7:aa:59:8e:40:16:47:54:e2:6b:69:6e:
31:d4:f6:81:01:89:88:42:3d:09:dd:8d:42:bb:ef:
ff:69:dd:f2:4b:c9:21:10:5c:a5:cd:51:27:73:a2:
12:9f:7e:ee:d2:1b:5c:f7:6b:af:2c:64:7b:3e:cf:
9e:d0:78:9d:06:31:bc:9d:b9:d6:2b:01:9c:77:32:
9e:70:92:42:fe:a4:71:8c:aa:11:38:d9:b4:99:8a:
2d:2e:8e:9a:a8:a0:d3:66:e5:2b:61:bc:57:44:9f:
68:74:b0:53:4c:de:6a:18:82:1e:f9:49:65:d1:ad:
b7:cd:7d:b9:27:f2:f5:e7:c5:30:6f:68:b7:50:8c:
8e:eb:64:ab:f4:1c:36:6e:a3:6a:bd:75:ef:f4:ef:
64:67:ce:ef:21:c7:f7:d3:0e:4b:4a:53:88:6d:26:
8e:99:6f:c7:ac:2e:20:ed:79:7e:8e:13:07:e7:76:
8a:ee:d8:f9:16:0e:b6:89:16:40:89:2a:53:11:30:
e1:bd:92:49:4d:2f:36:1a:f4:a6:63:1f:bb:4c:7a:
08:b4:d4:93:0a:70:36:da:bc:4e:61:49:8c:4b:d0:
e7:3b:7d:cc:11:6b:95:a8:58:e6:ea:ec:21:7b:da:
f7:5c:c2:5f:0f:54:4a:17:77:45:df:4c:8c:20:2f:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:DD:A4:B7:34:D5:52:48:E5:05:27:4A:25:F9:0D:B6:A9:45:31
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32332d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.190.0/23
Signature Algorithm: sha256WithRSAEncryption
66:42:0e:99:7f:4c:5e:15:32:20:16:74:af:84:9e:53:43:22:
f6:41:c7:8a:dd:5b:21:62:52:f6:b0:5f:6b:5c:f9:be:79:f7:
67:68:ef:b4:86:07:b6:a9:7a:90:89:e8:db:6b:74:74:33:44:
51:9c:32:6f:eb:5c:40:a4:33:ae:2a:e3:45:9e:d4:2d:56:79:
ca:69:d0:d1:f2:4d:6f:7f:e5:fb:60:81:4e:1e:22:3b:91:9b:
a1:78:6a:d9:4b:dd:a8:68:2a:f1:95:dd:75:40:75:e6:ff:65:
bc:20:10:c5:3e:2c:f8:c4:f3:e3:61:e8:b1:e1:52:1f:1b:22:
d7:0a:8c:1b:90:db:b0:d0:9c:59:84:a8:31:45:f2:dd:e6:27:
f1:73:54:5e:31:39:aa:5f:6c:a1:e4:1a:2d:df:11:00:68:cf:
25:b9:a6:eb:b3:16:4e:71:61:e5:f4:ed:5b:6a:b0:cd:7b:ac:
58:93:15:87:30:c5:00:0b:45:24:f2:00:dd:2a:92:be:5b:a4:
4b:88:84:6d:68:03:19:1b:b7:95:b9:48:1e:17:fd:3a:7a:ed:
77:6b:c4:18:0c:fe:4b:c3:cf:d2:a7:fb:92:42:15:57:22:68:
e4:a4:48:7d:96:5b:c0:95:c2:6a:30:5c:e9:05:d2:f8:96:44:
65:58:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:34 2026 by rpki-client