
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32342d3234203d3e203137363231.roa
File: 3130332e36312e3139302e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: Fk8P7gCUw0L6K0c2d42vhmO2HNwhOKbWXUQd76vTIZI=
Subject key identifier: C2:B6:53:AC:D9:7C:D4:84:AF:D0:72:F1:8A:56:98:92:9B:71:E0:B8
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 4F1AF99BF17B91679D67BA2EB5BD3F3C681AF207
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32342d3234203d3e203137363231.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 17621
IP address blocks: 103.61.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1a:f9:9b:f1:7b:91:67:9d:67:ba:2e:b5:bd:3f:3c:68:1a:f2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=C2B653ACD97CD484AFD072F18A5698929B71E0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:a5:d6:94:18:38:6c:6a:b2:7d:63:c9:08:
9f:1a:1b:37:9a:e6:3a:67:e6:82:c5:a8:b8:c1:fe:
90:96:89:da:27:38:31:bc:0b:78:cd:89:59:8a:cc:
2b:fe:99:53:55:0c:fa:72:ec:97:94:da:bb:1b:2b:
a7:6c:5e:3e:f4:40:5f:5a:4e:53:fa:58:1a:35:7e:
e4:2b:01:16:46:d8:16:88:74:a1:82:60:fa:4e:56:
06:3a:c6:3b:6b:89:99:8d:09:ce:af:77:57:77:b1:
8b:d5:b3:9f:81:0f:13:ac:8a:73:00:94:e5:e8:02:
c5:d4:a6:a8:30:c4:ff:cf:16:36:f9:af:d3:f3:fb:
3e:1f:a2:64:92:25:7e:eb:59:68:13:31:0b:9c:42:
c8:9e:d1:6e:22:d7:58:34:49:97:11:5d:a3:02:23:
27:44:4b:49:ab:10:3b:56:f3:a6:32:62:87:c9:23:
2d:78:4d:59:10:5b:b5:32:30:83:6a:a5:ea:74:b2:
29:46:78:c4:96:59:85:11:d2:d6:0e:53:f1:c4:46:
e4:39:a5:31:1c:48:c8:7d:5d:10:a7:98:b8:1f:4b:
f6:9b:c9:ea:6a:7f:b6:4e:3c:21:51:46:74:16:da:
9b:f6:52:d8:0f:88:8e:82:db:1b:a4:4d:86:d1:85:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:53:AC:D9:7C:D4:84:AF:D0:72:F1:8A:56:98:92:9B:71:E0:B8
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.190.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bc:62:22:92:03:8f:10:97:49:64:84:cc:9c:a2:25:89:a5:
8b:dd:36:42:d2:f0:82:71:54:92:30:f9:d9:47:c0:5f:4f:8a:
92:8c:9b:cb:95:4e:7e:93:de:51:af:52:c4:63:70:d1:de:82:
ef:d2:08:0a:ea:d8:01:74:2d:fa:68:cd:fe:f4:02:83:f3:e6:
7e:ed:ef:61:05:96:f4:31:e8:f0:e0:01:f0:41:6a:ff:e4:16:
00:f2:1d:39:98:1d:de:4d:26:47:fa:95:2a:1f:85:93:3b:83:
a8:54:9b:79:64:8e:d6:9c:9b:8e:6c:a2:4c:82:b4:af:fa:f0:
1d:ca:d6:34:96:7c:ee:5c:f0:d4:61:61:14:3f:12:1d:63:7a:
bf:8e:31:c6:47:a5:e9:75:bb:63:1f:60:f9:e1:92:1d:a8:16:
27:f1:46:97:f0:ef:e4:68:46:62:7c:a8:e7:0e:19:da:49:e0:
b7:62:84:31:59:68:0a:c9:80:5c:08:bc:70:a5:33:3c:03:0f:
0a:ae:aa:05:26:e9:f0:f6:a4:37:ae:a3:8d:06:aa:d1:f2:3b:
2f:da:cf:99:76:52:3a:02:56:05:fd:e1:e3:ec:c7:f4:c0:22:
9d:73:bb:fe:68:c5:e0:e4:9b:02:b2:f8:2f:6b:1a:b4:99:e7:
1c:25:3f:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:23:55 2026 by rpki-client