
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa
File: 3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa (raw, json)
Hash identifier: lQ13UuPzTlufRvDjFOEWE2dk0mrydNAJ47hg604cWo8=
Subject key identifier: FE:44:77:8D:6B:46:97:F4:CB:8A:63:EE:C0:20:3C:17:36:14:F9:2B
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 4EE801037EE9BAC52E0C023BFE3E91E040A7003A
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa
Signing time: Wed 23 Sep 2026 02:47:19 +0000
ROA not before: Wed 23 Sep 2026 02:42:19 +0000
ROA not after: Wed 22 Sep 2027 02:47:19 +0000
asID: 133033
IP address blocks: 103.19.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e8:01:03:7e:e9:ba:c5:2e:0c:02:3b:fe:3e:91:e0:40:a7:00:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Sep 23 02:42:19 2026 GMT
Not After : Sep 22 02:47:19 2027 GMT
Subject: CN=FE44778D6B4697F4CB8A63EEC0203C173614F92B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:f5:9b:5c:7e:f9:73:f8:5d:91:c5:75:62:
be:26:d7:8d:d3:5f:c5:19:61:40:d9:3e:2d:36:0b:
83:5d:10:57:ed:7b:27:6c:2a:c5:53:c3:2d:63:4f:
1a:f7:e9:c8:40:c4:c0:19:f1:84:3e:ff:74:56:66:
d0:b4:df:a7:a8:16:96:36:be:d7:d2:b6:9b:89:dc:
37:09:78:db:bf:7b:09:e4:2a:00:57:f5:37:84:fb:
f2:ef:72:06:c1:93:4a:b2:93:69:39:bc:b8:fc:53:
bf:85:de:98:d2:4e:22:56:82:0c:7e:8f:a0:58:41:
16:f5:7e:ae:00:93:f2:59:2d:00:59:94:d4:5d:12:
94:b3:e0:55:18:5c:c1:cb:16:9d:d4:61:38:36:7b:
7d:59:b1:3a:55:34:9f:54:54:cf:16:3f:67:93:35:
44:ae:e2:b5:a4:e8:d7:ab:b1:d9:c6:01:74:84:83:
82:8b:d5:fa:87:f2:11:6c:d9:52:f6:39:50:fa:fe:
60:f9:18:44:e9:62:08:dc:b6:8c:60:3b:be:2c:44:
56:dd:3b:82:22:88:7d:d1:ef:06:28:5a:a8:75:9f:
cf:7b:d2:32:a3:b8:74:43:fc:29:c6:b0:7b:05:9d:
ad:ca:56:e6:2e:e3:b2:97:d9:8a:cc:03:6b:c0:59:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:77:8D:6B:46:97:F4:CB:8A:63:EE:C0:20:3C:17:36:14:F9:2B
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.232.0/22
Signature Algorithm: sha256WithRSAEncryption
17:76:b9:1a:92:0f:5f:12:65:35:0e:a0:f4:33:36:5f:cb:61:
d6:13:22:28:fe:79:5e:e2:0d:f9:8a:1f:22:e7:5d:99:0e:b4:
d5:5a:56:a1:33:8f:7b:54:88:ef:f8:1b:93:12:61:f1:b1:f6:
aa:4e:f5:65:86:16:c0:30:90:7e:2a:60:eb:ab:ff:27:7a:21:
50:7d:14:db:94:65:28:bb:65:c2:4c:88:2c:b0:39:33:88:6d:
42:67:73:8e:47:9c:85:e7:fc:95:10:9a:94:61:4c:c2:21:84:
fd:00:2b:8f:59:1d:b5:de:4e:bf:ca:10:41:54:11:34:32:9c:
39:a2:31:95:23:1c:3c:2d:46:96:09:48:65:9a:2d:91:af:83:
41:f4:86:ac:fc:1b:a1:ba:8b:c4:1b:1d:a3:8e:f2:f0:b6:64:
d1:d5:d9:58:7f:ce:cb:16:63:e8:39:b0:67:2f:04:3d:00:aa:
61:ad:f5:68:5d:87:a4:4f:bf:0c:64:ba:9f:54:26:62:c7:6a:
2f:3a:97:92:2b:08:e2:1f:47:1e:03:9d:67:33:f2:08:d8:de:
d5:0d:39:9a:36:7f:29:95:ce:b8:62:2d:7f:43:04:b3:99:15:
80:51:b2:49:81:e2:4f:0c:0e:55:08:2c:58:c6:60:72:06:1d:
2c:a1:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:36:39 2026 by rpki-client