
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3234203d3e20313534333231.roa
File: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (raw, json)
Hash identifier: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=
Subject key identifier: 7E:5C:BD:6B:14:B2:F9:A8:BA:BA:39:25:F8:48:79:5C:D8:32:72:B7
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 51F49C66E50569A113EE18EE5B003EA0E7B78796
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3234203d3e20313534333231.roa
Signing time: Tue 10 Mar 2026 04:53:13 +0000
ROA not before: Tue 10 Mar 2026 04:48:13 +0000
ROA not after: Tue 09 Mar 2027 04:53:13 +0000
asID: 154321
IP address blocks: 103.97.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 05:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f4:9c:66:e5:05:69:a1:13:ee:18:ee:5b:00:3e:a0:e7:b7:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Mar 10 04:48:13 2026 GMT
Not After : Mar 9 04:53:13 2027 GMT
Subject: CN=7E5CBD6B14B2F9A8BABA3925F848795CD83272B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:27:0d:b3:e5:3f:b7:3a:50:c0:57:b7:84:
63:6e:63:a3:b5:85:02:a7:4f:88:98:9d:e4:e4:36:
dd:98:cf:51:b9:ff:01:ca:2e:0c:b9:8f:84:a5:43:
3e:de:bb:94:1d:e6:ea:08:ed:a4:eb:55:d8:50:8c:
78:22:32:01:e6:ef:ac:7f:d8:32:96:d1:57:09:af:
25:b4:5a:9c:1d:55:73:8c:a1:29:7a:6c:d6:63:8b:
22:0f:d6:9e:6f:72:7c:d3:8e:c9:21:36:b4:98:27:
51:05:af:d2:78:f2:3b:88:0e:10:6e:0e:97:55:d6:
89:27:49:12:05:81:8d:39:ba:3e:36:92:b6:4f:cc:
e5:45:06:ff:a6:ac:73:69:30:33:73:6a:d8:e4:44:
2e:00:74:f4:3e:c6:86:27:ba:7f:b0:94:96:f7:91:
d1:2c:13:18:c5:88:b9:32:f7:d9:e2:58:db:4f:54:
80:4c:c5:32:46:e9:c0:8e:a1:69:44:d9:64:14:63:
d8:77:25:46:d6:88:c5:9e:71:2f:5c:a0:72:54:c3:
98:0e:f3:a8:fe:a6:ee:f0:b0:48:03:39:57:f1:93:
6d:a9:03:e9:98:10:2c:53:76:1c:2e:62:f3:76:74:
24:92:78:1d:40:d7:12:6b:b1:82:5f:9c:ca:c6:4a:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:BD:6B:14:B2:F9:A8:BA:BA:39:25:F8:48:79:5C:D8:32:72:B7
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3234203d3e20313534333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
55:77:df:70:ed:84:8b:32:53:b3:bc:04:d7:96:48:19:ba:81:
c8:bd:da:31:fa:4f:85:30:32:b4:32:90:24:38:ba:e0:34:ca:
ea:01:38:86:5f:47:b8:c4:d3:24:2a:99:46:9e:af:62:48:f8:
76:71:e3:6a:a2:43:03:3b:c6:17:6e:89:34:73:6f:4e:04:d6:
6a:b7:f7:1a:86:25:8f:45:06:03:94:f4:83:b4:c7:04:d3:cc:
3a:bc:d2:f9:d0:b8:66:f7:8d:b8:da:20:90:a4:56:2a:ba:3c:
8e:a7:3f:54:f0:dd:2b:30:16:72:45:80:3e:23:37:21:a8:b6:
61:e6:be:a2:b0:f2:87:a6:bd:33:ea:b0:00:90:c7:c1:cb:83:
1f:b8:a8:8f:c5:bb:09:8d:73:4e:af:be:3b:50:90:be:65:a9:
35:a5:1e:76:59:f1:d0:1f:1d:6b:55:f6:33:ee:fc:3a:15:07:
f7:a0:d4:16:e3:95:f8:ab:50:19:ef:29:c3:25:d3:74:48:26:
40:26:66:ee:44:55:c2:3d:6c:4e:e6:c7:a9:cc:f6:98:2e:aa:
ce:c8:f6:9d:b1:d6:2c:9c:82:b7:4e:85:4b:35:24:fd:a1:36:
97:a6:4c:ed:22:81:ce:93:58:e4:e1:9a:27:80:f3:39:54:98:
bd:bf:98:48
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUfScZuUFaaET7hjuWwA+oOe3h5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2
MzU0NjFBQjAeFw0yNjAzMTAwNDQ4MTNaFw0yNzAzMDkwNDUzMTNaMDMxMTAvBgNV
BAMTKDdFNUNCRDZCMTRCMkY5QThCQUJBMzkyNUY4NDg3OTVDRDgzMjcyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1icNs+U/tzpQwFe3hGNuY6O1
hQKnT4iYneTkNt2Yz1G5/wHKLgy5j4SlQz7eu5Qd5uoI7aTrVdhQjHgiMgHm76x/
2DKW0VcJryW0WpwdVXOMoSl6bNZjiyIP1p5vcnzTjskhNrSYJ1EFr9J48juIDhBu
DpdV1oknSRIFgY05uj42krZPzOVFBv+mrHNpMDNzatjkRC4AdPQ+xoYnun+wlJb3
kdEsExjFiLky99niWNtPVIBMxTJG6cCOoWlE2WQUY9h3JUbWiMWecS9coHJUw5gO
86j+pu7wsEgDOVfxk22pA+mYECxTdhwuYvN2dCSSeB1A1xJrsYJfnMrGShNhAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUfly9axSy+ai6ujkl+Eh5XNgycrcwHwYDVR0j
BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC
MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODMzNTUyNTE2NzEwNS8wLzMxMzAzMzJlMzkz
NzJlMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzNDMzMzIzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdhODANBgkqhkiG9w0BAQsFAAOCAQEAVXffcO2EizJTs7wE15ZIGbqB
yL3aMfpPhTAytDKQJDi64DTK6gE4hl9HuMTTJCqZRp6vYkj4dnHjaqJDAzvGF26J
NHNvTgTWarf3GoYlj0UGA5T0g7THBNPMOrzS+dC4ZveNuNogkKRWKro8jqc/VPDd
KzAWckWAPiM3Iai2Yea+orDyh6a9M+qwAJDHwcuDH7ioj8W7CY1zTq++O1CQvmWp
NaUedlnx0B8da1X2M+78OhUH96DUFuOV+KtQGe8pwyXTdEgmQCZm7kRVwj1sTubH
qcz2mC6qzsj2nbHWLJyCt06FSzUk/aE2l6ZM7SKBzpNY5OGaJ4DzOVSYvb+YSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:05:07 2026 by rpki-client