
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32332d3233203d3e203536303436.roa
File: 3130332e35332e3132362e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier: VjvNTzvvNqmWM/DILM+dEge/ZbyuU6oC7QCr4+5XLso=
Subject key identifier: 8C:5D:40:27:8D:E9:06:FB:C8:FE:78:1B:56:69:92:B6:19:0F:3D:BA
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 13008373B4FF2A92D5C39B19EFA2EBF77A05C617
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32332d3233203d3e203536303436.roa
Signing time: Wed 23 Sep 2026 08:01:25 +0000
ROA not before: Wed 23 Sep 2026 07:56:25 +0000
ROA not after: Wed 22 Sep 2027 08:01:25 +0000
asID: 56046
IP address blocks: 103.53.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:00:83:73:b4:ff:2a:92:d5:c3:9b:19:ef:a2:eb:f7:7a:05:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Sep 23 07:56:25 2026 GMT
Not After : Sep 22 08:01:25 2027 GMT
Subject: CN=8C5D40278DE906FBC8FE781B566992B6190F3DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:a7:7e:e4:09:7d:91:ce:c8:57:95:1b:d4:
b7:0c:38:61:1c:aa:09:a2:eb:71:14:3e:f3:34:f5:
04:7d:ba:d9:61:b9:2d:1f:6b:62:13:bd:9b:36:84:
da:35:be:8d:b1:67:84:a9:36:34:24:42:00:16:78:
5b:e3:f5:c5:f1:29:4d:49:05:7f:9f:92:a6:1a:46:
57:1b:90:e5:a0:1c:dd:59:54:65:31:f9:f9:fa:55:
1c:08:2b:dc:80:ed:b9:84:00:1e:56:13:21:de:53:
30:1e:c3:ad:b7:bf:0d:f5:ee:72:40:40:4c:a1:3d:
81:40:33:1f:db:e7:2d:26:a9:75:9b:9f:b0:71:4a:
01:1c:84:9c:04:6f:cb:59:7a:9c:bc:df:ca:af:44:
36:c3:50:cd:f3:a3:13:79:77:08:3f:36:4d:9d:26:
82:0b:51:37:07:6d:96:f9:de:97:b8:31:4d:7d:37:
e9:95:9d:d8:98:48:f3:0c:e6:81:7e:fc:07:eb:31:
21:30:78:6d:c0:e5:a2:a7:1c:f2:78:2c:7b:6b:5f:
50:d4:59:fd:5e:89:70:e3:b6:0b:60:1f:ac:ff:25:
be:6d:0a:a1:66:5e:08:f0:5a:c8:3c:8e:07:8b:99:
a7:2a:5e:a1:2f:dd:b3:66:c4:6a:3f:4c:0b:ec:fb:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:40:27:8D:E9:06:FB:C8:FE:78:1B:56:69:92:B6:19:0F:3D:BA
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32332d3233203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.53.126.0/23
Signature Algorithm: sha256WithRSAEncryption
82:e2:bf:46:9d:77:e1:4e:ea:59:18:1e:84:97:4c:9e:20:b5:
77:fe:62:d0:ab:15:bd:05:20:06:82:9e:6c:a0:4b:d6:07:58:
4a:3f:14:05:21:d8:06:bd:d4:66:0c:b2:97:ca:0c:9e:4f:8e:
84:48:88:56:16:9d:23:a0:51:a3:89:ff:43:eb:57:83:d8:90:
5c:71:40:bf:f9:76:e8:b0:a7:6e:ed:fb:87:65:f0:c9:6a:b7:
38:06:51:09:6b:4c:4e:a5:30:5a:dc:73:dd:9e:c8:c1:43:40:
a3:77:c4:61:22:bb:9c:a2:d1:85:ab:95:69:6a:55:0d:59:b0:
37:7a:b6:b7:7a:e7:45:6a:a4:99:4f:d7:1f:3b:8c:60:5f:9f:
4d:2a:5c:7a:13:8a:b6:15:e4:62:f4:4e:1e:da:43:5b:85:04:
a1:a8:93:cf:55:ba:ff:ad:5d:1f:b4:15:38:44:31:04:04:7d:
aa:d3:c7:e8:d9:7b:f0:f5:ab:cc:46:58:37:da:97:3f:49:8b:
ce:a0:59:f6:38:a3:bc:3b:b7:f5:b9:62:bb:97:48:90:93:b8:
c7:dd:ae:98:d7:90:39:02:1b:c0:74:02:be:ec:b0:37:a7:24:
6a:69:e0:ef:ef:3b:6b:db:e6:63:c8:0f:1a:b7:29:49:52:fa:
dd:3f:c5:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:48 2026 by rpki-client