
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59803.roa
File: AS59803.roa (raw, json)
Hash identifier: LGUAblMvIhm2ls/u6OEE9pJVQIfQbyGlRz2jjgz8j4M=
Subject key identifier: B2:F5:49:E4:48:A0:D3:2C:43:68:EA:00:17:84:74:18:4C:83:41:A2
Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial: 3077F844E9CDFDF2B8EBFFE0E6A03C6997D2D8BD
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59803.roa
Signing time: Tue 21 Apr 2026 06:43:23 +0000
ROA not before: Tue 21 Apr 2026 06:38:23 +0000
ROA not after: Tue 20 Apr 2027 06:43:23 +0000
asID: 59803
IP address blocks: 2403:1b80::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:77:f8:44:e9:cd:fd:f2:b8:eb:ff:e0:e6:a0:3c:69:97:d2:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Validity
Not Before: Apr 21 06:38:23 2026 GMT
Not After : Apr 20 06:43:23 2027 GMT
Subject: CN=B2F549E448A0D32C4368EA00178474184C8341A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:6d:1d:a3:ad:fa:6a:9c:03:0d:49:5b:4c:
ab:64:d7:15:00:49:35:40:c9:8c:c3:90:32:91:54:
9a:63:6d:6b:4d:cf:6f:9a:6a:51:f2:f2:40:06:57:
cf:27:6c:16:85:66:78:74:bf:d2:9c:7b:cf:46:ec:
9b:d8:e5:66:6f:27:ad:83:a2:a0:fd:df:d3:c1:52:
88:a3:06:95:6c:17:01:d0:72:a9:69:d3:0f:7a:b1:
69:65:a9:14:c3:7c:62:6e:a9:18:43:2e:28:41:e4:
e5:05:cd:16:4f:9a:7d:ef:13:0d:ed:de:25:56:ea:
86:cd:44:7b:e2:f6:4f:b9:a6:a6:95:1d:37:b5:e6:
d9:81:b8:74:0e:72:bf:de:f9:df:ac:39:48:51:18:
94:66:08:46:07:c2:1a:4e:31:e7:31:55:d8:39:2e:
18:8c:1f:ef:e1:d1:25:2a:77:ff:99:2b:e7:98:09:
99:76:d7:67:c6:9b:67:53:bf:11:0d:3e:71:04:55:
76:7d:95:1d:75:44:bf:38:5b:48:2f:a1:5b:d6:9e:
06:b7:bc:89:28:12:f6:a7:00:f8:02:3f:c3:9e:ab:
8b:1c:48:01:34:a2:d8:73:dd:f5:c1:7f:d9:79:4f:
55:bb:1c:2f:8a:fc:11:03:b9:ad:9a:3f:4d:0b:07:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F5:49:E4:48:A0:D3:2C:43:68:EA:00:17:84:74:18:4C:83:41:A2
X509v3 Authority Key Identifier:
keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/48
Signature Algorithm: sha256WithRSAEncryption
9e:3a:5a:8b:e0:3d:10:d6:e0:74:e2:51:ac:c5:94:3f:b3:da:
c7:15:59:24:77:0d:a5:2e:93:44:92:72:e9:8c:20:81:93:a0:
7a:13:8f:e1:58:cf:83:ed:c5:e0:b7:8a:3e:18:21:33:9f:96:
97:bc:0f:22:5b:92:62:4a:8b:f1:10:9d:ee:8f:e5:ba:d9:38:
71:7f:6b:dd:3f:c7:80:fe:06:f3:6b:50:74:d3:ad:75:1a:26:
de:71:af:de:57:8f:b0:42:7a:0b:11:3a:67:8d:03:66:38:6d:
50:dc:52:fb:18:d2:24:e7:27:91:b5:94:ac:31:cd:29:cb:9f:
17:aa:a7:68:37:f2:77:56:75:c7:2e:38:c1:25:94:89:6f:ee:
b7:0a:2d:4d:77:a7:88:1e:a0:16:10:a6:e7:46:59:d1:84:c7:
e7:0e:99:54:33:c6:5b:8f:cb:4e:9e:93:71:ba:ad:d6:a4:a2:
8f:b9:a3:11:2a:8a:8f:e4:b1:6e:48:fc:cb:77:1c:9b:72:56:
18:48:87:c5:c8:33:b2:e8:c6:06:d5:c9:72:d4:a9:91:e7:53:
b1:cf:66:fb:80:7b:42:98:2b:20:32:25:c8:eb:63:af:69:22:
66:44:24:02:56:61:ae:dd:71:85:15:1d:40:9d:6a:67:e1:e6:
38:be:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:07:01 2026 by rpki-client