
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139312e302f32342d3234203d3e203535393936.roa
File: 3130332e36312e3139312e302f32342d3234203d3e203535393936.roa (raw, json)
Hash identifier: 6to3JJtaQzjtPd7nCnkNyfroQV5WHV9RjgGhYfwwwbI=
Subject key identifier: F4:61:3A:4F:5E:96:98:F3:82:B8:6A:75:16:68:65:EE:14:AB:DA:46
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 2A8B8320153AEFE05F42B81377B40BCB1D3EF1E2
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139312e302f32342d3234203d3e203535393936.roa
Signing time: Thu 07 May 2026 16:03:42 +0000
ROA not before: Thu 07 May 2026 15:58:42 +0000
ROA not after: Thu 06 May 2027 16:03:42 +0000
asID: 55996
IP address blocks: 103.61.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8b:83:20:15:3a:ef:e0:5f:42:b8:13:77:b4:0b:cb:1d:3e:f1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 7 15:58:42 2026 GMT
Not After : May 6 16:03:42 2027 GMT
Subject: CN=F4613A4F5E9698F382B86A75166865EE14ABDA46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:27:f2:a9:15:79:aa:c9:9b:d1:62:dc:52:
3e:90:af:8c:d4:6d:65:e5:91:ac:e3:fc:a2:5c:ea:
47:07:86:40:c4:25:30:14:e8:a3:28:08:9e:b6:8e:
9e:24:a9:84:c5:12:c5:bb:c1:ce:75:ca:03:3b:b9:
9e:e5:8b:a8:88:49:58:28:a5:be:93:70:4f:eb:9d:
dd:14:d3:b4:bd:d6:91:8f:1a:14:9b:8b:4e:54:ee:
c0:33:a1:b6:21:0e:7f:b5:85:6a:69:ed:87:a5:44:
ba:d9:15:f5:9d:73:bf:b8:31:74:18:63:27:29:39:
d2:47:a6:9b:13:b2:19:ff:f1:43:b5:ab:61:68:75:
f0:53:3a:12:4b:df:33:76:a6:1c:65:8d:4a:06:e8:
a0:b0:86:05:73:35:c3:8e:8e:2b:20:9e:9f:97:55:
e4:ae:fe:9b:cf:68:d0:0b:bc:b5:a9:de:0b:82:63:
d3:fc:1f:f2:b1:62:58:4a:ed:bc:3d:6d:47:31:65:
a8:5e:8e:99:9c:05:56:01:fd:58:4f:57:3c:10:04:
c0:b8:d0:9f:03:1a:39:84:d9:56:eb:10:3d:ff:46:
6f:7b:6d:37:64:d9:5f:5a:83:00:1d:ae:0a:12:fe:
00:78:76:38:05:48:c1:20:64:16:f5:a8:a5:d3:39:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:3A:4F:5E:96:98:F3:82:B8:6A:75:16:68:65:EE:14:AB:DA:46
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139312e302f32342d3234203d3e203535393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.191.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e8:a5:12:05:5d:d1:4a:9f:cc:5e:3b:3a:c2:10:d4:56:40:
5e:1e:4c:24:56:15:a4:36:95:d9:87:53:8c:ae:a3:5e:19:00:
79:10:47:85:1a:23:fb:7b:f9:23:ee:b1:81:fa:ea:0a:db:6a:
9c:de:79:94:c1:d1:64:ea:5c:77:99:26:01:11:18:aa:cd:35:
b7:72:64:be:c2:68:9a:a9:86:7d:fe:a3:cc:94:89:ab:ed:32:
1e:58:28:75:83:20:43:c3:32:16:66:f2:a0:3e:a6:18:4c:ab:
ff:2b:5b:cf:0b:ce:ec:b7:f0:86:f0:bc:bb:3b:8d:5b:b6:72:
8f:9d:80:7a:22:3d:6c:61:1b:5c:36:1d:d8:ff:77:59:42:f5:
68:75:2f:f3:65:ff:da:60:fa:bb:71:2a:ca:dd:55:08:63:53:
f6:b6:7f:c3:74:ab:69:eb:96:4f:6c:a7:97:16:d6:40:db:06:
3f:de:76:02:16:de:01:d9:b0:47:5d:bd:a1:ca:f6:d6:59:ee:
18:36:62:0d:ab:c1:5c:49:9f:76:c5:5e:ea:55:64:0c:8d:5c:
cb:1c:ad:6b:cb:ab:34:e1:ec:7b:ee:1b:77:73:9f:00:b1:93:
90:83:37:ab:36:32:57:38:c5:5e:a4:59:a5:e4:ae:2f:03:42:
9e:62:58:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:59 2026 by rpki-client