
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/3130332e36322e38382e302f32342d3234203d3e20313337373331.roa
File: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (raw, json)
Hash identifier: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=
Subject key identifier: 06:40:2A:13:49:28:1E:8F:78:57:89:33:B5:DB:2E:E8:5E:3C:2D:0B
Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
Certificate serial: 53A8EB67CF87D0807F360A215A5CC843D13C04A0
Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/3130332e36322e38382e302f32342d3234203d3e20313337373331.roa
Signing time: Mon 27 Apr 2026 02:48:03 +0000
ROA not before: Mon 27 Apr 2026 02:43:03 +0000
ROA not after: Mon 26 Apr 2027 02:48:03 +0000
asID: 137731
IP address blocks: 103.62.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a8:eb:67:cf:87:d0:80:7f:36:0a:21:5a:5c:c8:43:d1:3c:04:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
Validity
Not Before: Apr 27 02:43:03 2026 GMT
Not After : Apr 26 02:48:03 2027 GMT
Subject: CN=06402A1349281E8F78578933B5DB2EE85E3C2D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:7a:6b:35:59:3e:5a:44:33:90:31:be:a5:
0e:84:ee:b0:00:ad:3d:8c:f5:a4:0e:91:46:1b:64:
22:5b:5e:b2:5a:c6:77:1a:0f:dc:c0:b1:0f:a0:f7:
b3:31:04:68:ee:9c:68:7c:1d:d4:67:de:be:ca:bd:
d7:e7:ae:39:3c:9a:c9:08:58:1a:e7:19:f7:d8:be:
7c:29:a6:c8:91:45:35:19:f2:47:02:b9:eb:04:4f:
68:6d:b1:64:2f:87:09:25:53:3e:95:9d:0d:3a:63:
cc:91:29:f7:3d:96:dc:28:87:aa:b5:7e:f1:62:2f:
15:f5:86:e3:e8:1f:93:05:fc:ed:57:67:5d:a3:6e:
b6:8e:29:92:7a:a4:24:d6:83:0f:7d:b9:0e:ed:ad:
a2:f8:6f:22:19:5a:06:a0:7c:50:ea:c8:99:f4:c7:
2f:b4:d6:73:e1:1e:3f:4c:d5:a2:87:3d:ab:d1:a6:
95:ee:20:ee:ef:8c:39:10:39:b7:b7:6a:e2:d4:10:
f9:08:7e:34:4c:81:0d:2e:4b:79:13:4e:ae:61:b5:
79:cb:7b:16:0a:c6:45:21:ac:7f:0b:e1:54:71:40:
09:be:1c:e3:63:04:ab:14:36:89:eb:de:53:89:bf:
d3:ae:44:20:f2:a3:ca:97:0a:85:01:f1:57:73:98:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:2A:13:49:28:1E:8F:78:57:89:33:B5:DB:2E:E8:5E:3C:2D:0B
X509v3 Authority Key Identifier:
keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/3130332e36322e38382e302f32342d3234203d3e20313337373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a0:ac:d5:d8:71:5a:ce:97:f7:0a:de:2e:5d:6f:54:3f:2e:
7c:d7:ad:0f:62:86:16:b7:70:b4:7d:b0:ad:b4:66:2c:a3:2a:
33:2a:48:5c:ab:5b:0e:1f:9d:f5:87:18:9b:71:bf:76:e9:02:
c7:fb:2f:13:6d:43:2a:30:bb:40:15:f1:53:1a:b4:05:ef:ce:
8e:7e:6a:b9:9b:6a:5a:76:a3:f9:16:c6:8d:5a:5e:7f:72:b0:
ae:77:96:7e:c2:c6:36:a2:c9:c7:fe:33:22:92:a5:e3:b5:29:
6c:3a:30:8b:40:56:e7:d8:b1:7d:cf:87:9f:73:a7:17:39:e8:
a5:9a:91:d7:39:1f:b3:c9:e0:50:cd:8e:98:82:ec:fc:76:8f:
6d:33:86:cb:2f:f2:1f:0d:68:4d:ea:00:44:29:6c:4f:a5:6b:
2c:8a:03:7f:80:a8:50:56:c0:eb:b4:20:ed:e3:da:9a:d5:68:
2d:90:40:7e:fd:d4:03:7f:29:61:e9:99:f5:d9:0c:65:88:29:
c6:f0:ff:a6:62:d0:e3:32:3c:d9:79:ef:90:71:95:eb:3b:0f:
f2:4d:1c:4b:44:1f:96:a4:f9:05:51:b4:b5:59:40:4d:d4:c0:
dd:75:6d:8d:ee:dc:8b:e7:5d:b6:fd:00:f3:52:f5:a2:b6:46:
2d:d9:1c:90
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUU6jrZ8+H0IB/NgohWlzIQ9E8BKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw
MjYzNjg2RDAeFw0yNjA0MjcwMjQzMDNaFw0yNzA0MjYwMjQ4MDNaMDMxMTAvBgNV
BAMTKDA2NDAyQTEzNDkyODFFOEY3ODU3ODkzM0I1REIyRUU4NUUzQzJEMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxnprNVk+WkQzkDG+pQ6E7rAA
rT2M9aQOkUYbZCJbXrJaxncaD9zAsQ+g97MxBGjunGh8HdRn3r7Kvdfnrjk8mskI
WBrnGffYvnwppsiRRTUZ8kcCuesET2htsWQvhwklUz6VnQ06Y8yRKfc9ltwoh6q1
fvFiLxX1huPoH5MF/O1XZ12jbraOKZJ6pCTWgw99uQ7traL4byIZWgagfFDqyJn0
xy+01nPhHj9M1aKHPavRppXuIO7vjDkQObe3auLUEPkIfjRMgQ0uS3kTTq5htXnL
exYKxkUhrH8L4VRxQAm+HONjBKsUNonr3lOJv9OuRCDyo8qXCoUB8VdzmAplAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUBkAqE0koHo94V4kztdsu6F48LQswHwYDVR0j
BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC
QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODMzNTUyNDgzOTQyNS8wLzMxMzAzMzJlMzYz
MjJlMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzMzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGc+WDANBgkqhkiG9w0BAQsFAAOCAQEAHqCs1dhxWs6X9wreLl1vVD8u
fNetD2KGFrdwtH2wrbRmLKMqMypIXKtbDh+d9YcYm3G/dukCx/svE21DKjC7QBXx
Uxq0Be/Ojn5quZtqWnaj+RbGjVpef3KwrneWfsLGNqLJx/4zIpKl47UpbDowi0BW
59ixfc+Hn3OnFznopZqR1zkfs8ngUM2OmILs/HaPbTOGyy/yHw1oTeoARClsT6Vr
LIoDf4CoUFbA67Qg7ePamtVoLZBAfv3UA38pYemZ9dkMZYgpxvD/pmLQ4zI82Xnv
kHGV6zsP8k0cS0QflqT5BVG0tVlATdTA3XVtje7ci+ddtv0A81L1orZGLdkckA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:32 2026 by rpki-client