
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa
File: 3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier: 6N3+73HOIfBb+Xu5C5PWQopZ7m+4sk0JVZa6rnEvbYc=
Subject key identifier: 7E:71:70:60:D8:F0:89:5B:E7:4D:CD:27:EB:FF:2D:70:D6:DF:95:2B
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 6F76D165FEC7DFA90B47AFE04D2E9CA0A04B62CA
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa
Signing time: Thu 14 May 2026 07:24:30 +0000
ROA not before: Thu 14 May 2026 07:19:30 +0000
ROA not after: Thu 13 May 2027 07:24:30 +0000
asID: 137697
IP address blocks: 103.19.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:76:d1:65:fe:c7:df:a9:0b:47:af:e0:4d:2e:9c:a0:a0:4b:62:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: May 14 07:19:30 2026 GMT
Not After : May 13 07:24:30 2027 GMT
Subject: CN=7E717060D8F0895BE74DCD27EBFF2D70D6DF952B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:dd:38:47:7a:8f:68:c6:69:77:43:f5:54:
30:ca:ab:ed:94:10:ee:b6:56:57:52:d5:90:4e:74:
47:12:38:eb:2e:5d:df:9f:24:e0:ae:7d:fd:be:fe:
8a:10:c8:93:91:54:7e:87:07:49:90:69:b3:21:35:
de:06:45:66:6f:6e:71:f0:d1:d5:ca:d8:e2:01:f4:
50:0b:f2:83:72:e8:b7:f0:df:a5:94:49:9f:7c:d2:
db:8d:f0:0f:54:d3:c1:af:ac:43:c0:3b:34:d9:47:
a7:d8:61:58:f7:da:f6:55:82:b5:77:dc:f7:c3:73:
5b:fd:e4:e8:39:f9:4d:16:76:ef:b7:28:22:ea:78:
d0:6c:72:0b:04:b3:46:74:6e:38:52:4c:76:df:ec:
ac:d3:09:41:52:61:ef:6f:37:11:da:8f:99:1a:b3:
71:c9:76:da:05:3a:11:50:cb:c3:a0:18:ef:0d:e8:
40:01:ed:99:b1:22:b5:67:27:e9:8f:4f:1c:09:03:
7e:40:0a:dc:f1:8a:68:a5:48:42:8d:d6:53:7c:de:
5d:81:aa:2b:a7:d8:0d:4a:c8:2b:ba:b2:4f:35:25:
2c:5d:82:dc:23:c3:0a:3d:b1:3f:36:dd:63:f3:26:
ca:68:ae:20:50:05:9e:6b:3c:1f:54:05:a4:30:1d:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:70:60:D8:F0:89:5B:E7:4D:CD:27:EB:FF:2D:70:D6:DF:95:2B
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:b4:ca:0d:77:ef:c5:7f:b4:c1:de:4f:24:27:a7:f7:5c:5a:
d8:b1:8b:16:23:21:b4:ca:88:2f:13:b8:73:a8:f1:31:a0:3e:
9f:7b:e2:5c:2f:e6:1b:19:95:b2:08:ee:bf:30:18:58:1f:4a:
77:17:ff:b1:23:0d:f1:84:0c:fd:a0:65:56:a2:6a:92:7f:d2:
c9:d3:b7:ee:6c:a8:24:ca:8b:a8:9d:a9:98:ff:c1:e5:cd:de:
fc:7c:a0:6a:5e:0a:7a:8c:e3:71:86:c1:fa:a7:c6:6e:0e:31:
5d:06:cf:f5:3d:c1:08:63:de:d7:6e:84:c4:4f:85:e6:36:14:
c6:95:7c:e2:3d:e2:dc:17:1e:87:a0:c1:49:b0:33:bc:96:80:
fc:16:b8:46:69:90:32:cc:ba:79:6a:42:ef:b9:8a:d1:fe:77:
bd:20:37:d7:8f:d9:c8:26:10:f5:dc:dc:92:91:7e:b8:3d:e0:
aa:cd:eb:53:14:fe:c1:53:68:5f:6d:2a:45:7a:4f:4a:78:af:
95:00:7e:93:a5:72:d8:93:e3:bf:c1:78:07:db:5d:cf:93:3a:
13:32:2f:21:66:15:1f:14:40:66:31:3c:64:41:fb:35:d5:8f:
3e:0d:ac:b1:9c:d7:37:ec:bd:a7:f9:f8:4a:6c:33:d8:cc:ab:
62:bb:8a:8f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUb3bRZf7H36kLR6/gTS6coKBLYsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA1MTQwNzE5MzBaFw0yNzA1MTMwNzI0MzBaMDMxMTAvBgNV
BAMTKDdFNzE3MDYwRDhGMDg5NUJFNzREQ0QyN0VCRkYyRDcwRDZERjk1MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWU904R3qPaMZpd0P1VDDKq+2U
EO62VldS1ZBOdEcSOOsuXd+fJOCuff2+/ooQyJORVH6HB0mQabMhNd4GRWZvbnHw
0dXK2OIB9FAL8oNy6Lfw36WUSZ980tuN8A9U08GvrEPAOzTZR6fYYVj32vZVgrV3
3PfDc1v95Og5+U0Wdu+3KCLqeNBscgsEs0Z0bjhSTHbf7KzTCUFSYe9vNxHaj5ka
s3HJdtoFOhFQy8OgGO8N6EAB7ZmxIrVnJ+mPTxwJA35ACtzximilSEKN1lN83l2B
qiun2A1KyCu6sk81JSxdgtwjwwo9sT823WPzJsporiBQBZ5rPB9UBaQwHeMXAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUfnFwYNjwiVvnTc0n6/8tcNbflSswHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC8zMTMwMzMyZTMx
MzkyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNzM2MzkzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmcT6DANBgkqhkiG9w0BAQsFAAOCAQEAs7TKDXfvxX+0wd5PJCen
91xa2LGLFiMhtMqILxO4c6jxMaA+n3viXC/mGxmVsgjuvzAYWB9Kdxf/sSMN8YQM
/aBlVqJqkn/SydO37myoJMqLqJ2pmP/B5c3e/Hygal4KeozjcYbB+qfGbg4xXQbP
9T3BCGPe126ExE+F5jYUxpV84j3i3Bceh6DBSbAzvJaA/Ba4RmmQMsy6eWpC77mK
0f53vSA314/ZyCYQ9dzckpF+uD3gqs3rUxT+wVNoX20qRXpPSnivlQB+k6Vy2JPj
v8F4B9tdz5M6EzIvIWYVHxRAZjE8ZEH7NdWPPg2ssZzXN+y9p/n4Smwz2MyrYruK
jw==
-----END CERTIFICATE-----
Generated at Sat May 30 00:58:07 2026 by rpki-client