
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa
File: 3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa (raw, json)
Hash identifier: VdI8Hd96kkKdMIdSMU6NKFtjxr9wbzZqclzh8Sq5uiQ=
Subject key identifier: 9D:FC:6A:9B:F1:0F:0C:50:AB:04:E6:99:34:00:E2:CC:88:26:F4:53
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 57A65B163BB895984E59C7B602C79B4F7998A8B2
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa
Signing time: Wed 23 Sep 2026 02:45:11 +0000
ROA not before: Wed 23 Sep 2026 02:40:11 +0000
ROA not after: Wed 22 Sep 2027 02:45:11 +0000
asID: 133033
IP address blocks: 103.60.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a6:5b:16:3b:b8:95:98:4e:59:c7:b6:02:c7:9b:4f:79:98:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Sep 23 02:40:11 2026 GMT
Not After : Sep 22 02:45:11 2027 GMT
Subject: CN=9DFC6A9BF10F0C50AB04E6993400E2CC8826F453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f1:66:81:8c:10:af:19:e9:04:5d:b8:a4:84:
fb:ce:d6:7e:eb:d2:9d:d1:db:b4:96:f2:d6:e1:3b:
0f:78:bb:3b:84:ad:dc:6a:48:a9:2f:bb:b9:25:88:
c3:9b:45:da:98:46:51:ae:b5:24:6a:09:bf:fc:0c:
7d:58:25:8c:49:db:38:2d:26:84:a7:e5:26:90:f1:
39:1d:94:9b:6f:cd:29:8d:07:9e:d4:b5:22:f2:7c:
0e:0f:59:57:77:05:e0:b4:6a:57:7d:f1:c1:85:2b:
6b:6a:d6:e7:73:b1:38:30:c6:c4:8d:57:3a:55:25:
a3:ad:39:91:d1:26:13:2c:2c:66:4d:05:9b:12:12:
58:fc:b5:c9:01:c9:5b:d9:2f:23:9a:6c:40:e3:14:
84:f0:a4:c1:5f:22:2e:3e:ed:42:0b:a1:2c:7b:60:
8e:59:93:f9:76:8a:b0:be:1e:1b:d7:f3:66:1e:7c:
24:5d:ea:5a:26:b4:2b:58:e5:50:83:ee:f5:a2:2b:
85:f5:25:f8:7c:1b:1a:56:64:5d:bf:c2:5a:06:6a:
64:e4:be:be:c6:45:c1:76:b4:22:ba:cc:c9:4f:7f:
55:2d:19:e4:ee:8f:ac:77:24:02:e5:ac:95:91:86:
be:3b:0a:3d:58:24:7d:a6:7e:ee:df:1f:fb:99:ef:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:6A:9B:F1:0F:0C:50:AB:04:E6:99:34:00:E2:CC:88:26:F4:53
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:09:d1:f5:9d:3a:92:94:48:fe:bc:a1:81:a7:d6:27:7d:83:
1d:43:ca:ec:48:89:a3:3c:5c:c1:eb:ec:ef:2f:94:9e:69:13:
77:e1:48:af:a3:4f:f7:d3:e8:93:94:5b:15:e2:a9:4e:06:fd:
79:dc:a5:4e:5d:62:9e:33:aa:d5:15:76:6d:df:1f:3b:34:c4:
2c:cd:4c:5a:86:ff:59:dc:f0:5d:da:c6:ae:50:74:23:0d:7a:
5d:c7:6c:6f:10:37:c4:58:03:19:c4:15:43:72:ee:aa:f6:ac:
e7:30:6f:97:41:43:f6:6c:df:50:87:09:9f:74:b5:e1:6a:73:
d7:09:90:26:54:41:4c:b9:a9:4d:2a:a2:54:dd:aa:05:37:7e:
8d:87:99:71:ef:41:a5:c6:19:5d:e6:f6:f9:2e:50:75:2e:82:
91:35:5d:88:13:35:c2:7a:f8:d2:79:94:e0:26:ee:78:40:fc:
d8:bf:1f:13:33:95:94:51:8a:f0:86:b4:bc:8f:9f:b9:39:1c:
3e:67:67:c9:51:1d:14:03:42:78:2d:25:12:1d:24:43:47:9c:
e6:15:cc:6a:4a:69:65:b5:57:50:d2:ee:87:8f:6c:a8:f4:93:
c1:b7:11:5a:87:62:a3:27:c0:0e:53:58:52:d3:ae:32:d8:c4:
5a:59:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:48:57 2026 by rpki-client