
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38372e302f32342d3234203d3e203137383136.roa
File: 3130332e3231392e38372e302f32342d3234203d3e203137383136.roa (raw, json)
Hash identifier: AkcodKSLOJnqmykPjfYRdG32yI0Bg0CB2+vqj+ECd+o=
Subject key identifier: 25:58:3E:A1:04:E4:03:5C:53:AD:4D:A3:B1:52:7D:4F:C1:21:B4:F0
Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial: 535F85F8AF0BCA6316D5ACAD83CC6EC1FB6C58F6
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38372e302f32342d3234203d3e203137383136.roa
Signing time: Sat 09 May 2026 01:20:08 +0000
ROA not before: Sat 09 May 2026 01:15:08 +0000
ROA not after: Sat 08 May 2027 01:20:08 +0000
asID: 17816
IP address blocks: 103.219.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:5f:85:f8:af:0b:ca:63:16:d5:ac:ad:83:cc:6e:c1:fb:6c:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Validity
Not Before: May 9 01:15:08 2026 GMT
Not After : May 8 01:20:08 2027 GMT
Subject: CN=25583EA104E4035C53AD4DA3B1527D4FC121B4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:8d:5c:b5:fc:08:fb:83:1b:ca:39:f7:68:
58:ff:4d:58:d4:14:f4:97:f1:26:be:f3:22:6a:ec:
00:d6:92:a6:4f:a5:db:50:f3:29:23:82:10:95:3b:
de:19:ec:11:d8:d5:4b:38:63:6f:36:48:82:01:f2:
8d:45:a1:d7:62:09:ae:db:3a:50:6e:c7:15:4d:74:
54:a6:3a:2e:57:9f:33:7c:4b:90:39:e7:7a:35:46:
43:d3:32:96:6d:96:d8:4c:57:1e:ed:f0:0a:cf:62:
84:13:f0:82:13:58:50:7b:a8:0e:e6:27:65:a5:82:
96:4e:82:88:9e:96:52:bb:53:c8:c2:e8:f5:ed:b4:
b1:21:3c:c7:01:05:b1:e4:81:be:af:c4:2c:d7:be:
e6:fe:49:a8:b2:fd:d9:56:a3:59:b2:25:6f:cb:f6:
5c:59:2d:28:e1:02:6d:61:19:03:23:b1:7a:97:ba:
dd:a9:b0:ec:c5:97:58:21:d1:90:b4:26:92:69:bf:
73:e2:ec:fc:54:5e:35:d4:5a:be:4f:20:8a:67:71:
35:d0:2a:00:fb:b7:ce:42:bb:74:0e:8d:71:17:40:
b8:65:ce:3a:c9:d3:b3:76:5e:07:83:fc:2b:db:aa:
04:1f:56:e0:22:cc:24:9d:a1:23:67:6f:f2:61:1b:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:3E:A1:04:E4:03:5C:53:AD:4D:A3:B1:52:7D:4F:C1:21:B4:F0
X509v3 Authority Key Identifier:
keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38372e302f32342d3234203d3e203137383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.87.0/24
Signature Algorithm: sha256WithRSAEncryption
09:da:84:c8:db:09:87:7b:8a:95:89:ec:af:e1:0f:89:26:e3:
66:44:c9:93:bd:5f:02:b2:81:35:f6:96:ba:c6:84:59:e6:61:
4d:29:45:e0:66:54:4c:ab:7e:5f:1a:c6:1c:01:98:6b:bb:84:
44:5f:db:9f:2a:81:a2:61:a9:f1:51:7a:96:e0:14:02:e9:79:
a4:7d:2c:21:01:f3:76:c7:aa:bf:15:3a:90:10:c8:c4:94:2d:
15:0e:49:ec:36:32:82:63:04:db:af:b9:1d:75:e4:3e:d9:3b:
d5:c7:e4:ba:57:42:4b:59:8f:b7:67:be:a2:f8:0c:e7:25:ff:
fb:b8:d4:e7:c4:db:f5:16:23:54:37:d4:06:c1:57:c3:80:c7:
b4:03:d9:17:0f:d9:71:95:01:90:8c:d4:01:cf:08:db:74:4a:
2b:34:d6:a1:bf:2c:42:a6:5b:1e:b0:ad:09:44:b4:36:88:be:
d0:f3:be:94:11:dc:37:16:58:eb:2a:32:59:f9:bb:31:4f:18:
19:f6:55:87:20:b9:c9:ef:3b:98:11:22:3c:43:4f:60:11:88:
7b:33:73:35:59:44:13:d9:42:c1:ab:80:72:f9:ad:9e:1a:67:
8d:84:a8:4a:86:b3:81:13:d5:bd:b4:33:f3:4a:22:4b:86:df:
ef:a2:d7:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:18 2026 by rpki-client