
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa
File: 3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa (raw, json)
Hash identifier: IxvGkSL3Er+XiPPz4CPRi6DYs7Ptmccc5+yrQw2zvDc=
Subject key identifier: 56:49:79:F0:45:7D:1D:6B:4B:D5:10:4C:E1:1E:A5:0B:EC:DE:15:1F
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 1D3470DA15612A8AD9E979704DF17D9F2A303B11
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa
Signing time: Mon 15 Jun 2026 06:18:15 +0000
ROA not before: Mon 15 Jun 2026 06:13:15 +0000
ROA not after: Mon 14 Jun 2027 06:18:15 +0000
asID: 133033
IP address blocks: 103.53.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 09:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:34:70:da:15:61:2a:8a:d9:e9:79:70:4d:f1:7d:9f:2a:30:3b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Jun 15 06:13:15 2026 GMT
Not After : Jun 14 06:18:15 2027 GMT
Subject: CN=564979F0457D1D6B4BD5104CE11EA50BECDE151F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:11:07:07:cf:bc:47:6d:6a:64:18:05:01:
d6:44:e4:fc:96:9c:56:4a:6b:cd:2b:a2:29:b7:7d:
73:77:02:08:cf:f5:2c:19:ff:0b:01:31:13:40:bb:
19:5e:6b:1f:c7:b2:72:97:63:24:d4:a8:e7:5f:45:
1f:05:89:d1:d9:8e:a4:a8:6e:ce:28:68:bb:81:38:
fc:71:3b:63:c7:0c:e6:9e:87:e1:a2:0f:e8:83:e3:
3d:fc:74:bb:06:9e:9f:4f:15:50:ed:87:a5:4a:c4:
6a:4a:c7:74:76:09:92:35:bc:2c:de:bc:77:96:f9:
76:b7:ab:19:b9:84:29:82:74:e3:46:b2:b3:66:fe:
aa:3a:4a:0a:94:8e:fd:03:1e:b9:1b:73:08:c0:e9:
50:9d:9d:c2:22:44:8c:a2:39:b8:3d:61:14:87:63:
e2:db:6c:76:ba:44:f6:46:34:cd:0b:92:d3:ba:76:
99:6d:c9:47:12:6b:5e:40:78:8a:1a:0f:fb:a0:cb:
a7:bc:4e:9b:8d:5d:44:75:66:a9:28:dd:48:05:86:
84:d4:2f:b0:88:bf:56:76:cc:5d:24:14:43:7c:83:
8c:76:ad:86:1e:d2:42:31:fa:67:b8:67:0b:29:cc:
09:07:f0:1c:0e:79:5c:c0:66:74:e0:63:50:92:59:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:79:F0:45:7D:1D:6B:4B:D5:10:4C:E1:1E:A5:0B:EC:DE:15:1F
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.53.124.0/22
Signature Algorithm: sha256WithRSAEncryption
59:31:bd:5c:f0:80:51:3d:28:91:72:e0:5c:f6:37:6a:3c:c6:
29:0b:bb:28:d6:4e:47:59:2c:43:fb:27:a9:c8:86:6c:1a:10:
04:d1:1e:80:fe:40:73:64:2a:18:5d:c3:1f:64:fd:a2:c5:93:
25:17:06:ff:c7:e3:36:73:71:9d:c5:e3:45:cf:bf:e5:33:33:
1b:aa:e8:2f:ad:8d:75:20:51:e8:b6:d6:2f:03:45:34:f0:ea:
26:0b:36:b0:1e:75:1b:8d:da:00:7e:75:68:2c:c6:58:36:6e:
fc:d8:5b:ce:40:4e:0c:2b:da:e5:a3:95:23:df:b5:f8:37:0f:
c0:86:7b:b2:7a:78:90:b1:90:9e:ea:77:39:9f:52:a3:27:0f:
79:45:bf:32:1d:90:d7:37:42:b5:97:82:e1:04:23:24:31:5f:
fc:62:a6:44:e9:9f:eb:9c:ed:7c:9e:58:3a:c0:c9:09:89:c7:
84:4b:1c:7b:67:d2:ff:bc:62:24:c3:64:85:4d:c5:fe:79:eb:
fd:de:f5:4b:6b:f0:d7:54:2b:eb:f5:17:b5:96:53:56:22:5a:
06:f7:de:d0:19:83:ab:dd:07:da:4c:64:e7:40:8e:5a:fd:29:
cc:1c:26:d8:9d:78:ce:49:22:8d:1d:61:95:18:db:39:b6:de:
44:83:f7:e5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUHTRw2hVhKorZ6XlwTfF9nyowOxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA2MTUwNjEzMTVaFw0yNzA2MTQwNjE4MTVaMDMxMTAvBgNV
BAMTKDU2NDk3OUYwNDU3RDFENkI0QkQ1MTA0Q0UxMUVBNTBCRUNERTE1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDleREHB8+8R21qZBgFAdZE5PyW
nFZKa80roim3fXN3AgjP9SwZ/wsBMRNAuxleax/HsnKXYyTUqOdfRR8FidHZjqSo
bs4oaLuBOPxxO2PHDOaeh+GiD+iD4z38dLsGnp9PFVDth6VKxGpKx3R2CZI1vCze
vHeW+Xa3qxm5hCmCdONGsrNm/qo6SgqUjv0DHrkbcwjA6VCdncIiRIyiObg9YRSH
Y+LbbHa6RPZGNM0LktO6dpltyUcSa15AeIoaD/ugy6e8TpuNXUR1Zqko3UgFhoTU
L7CIv1Z2zF0kFEN8g4x2rYYe0kIx+me4ZwspzAkH8BwOeVzAZnTgY1CSWbgtAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUVkl58EV9HWtL1RBM4R6lC+zeFR8wHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC8zMTMwMzMyZTM1
MzMyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzMwMzMzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmc1fDANBgkqhkiG9w0BAQsFAAOCAQEAWTG9XPCAUT0okXLgXPY3
ajzGKQu7KNZOR1ksQ/snqciGbBoQBNEegP5Ac2QqGF3DH2T9osWTJRcG/8fjNnNx
ncXjRc+/5TMzG6roL62NdSBR6LbWLwNFNPDqJgs2sB51G43aAH51aCzGWDZu/Nhb
zkBODCva5aOVI9+1+DcPwIZ7snp4kLGQnup3OZ9SoycPeUW/Mh2Q1zdCtZeC4QQj
JDFf/GKmROmf65ztfJ5YOsDJCYnHhEsce2fS/7xiJMNkhU3F/nnr/d71S2vw11Qr
6/UXtZZTViJaBvfe0BmDq90H2kxk50COWv0pzBwm2J14zkkijR1hlRjbObbeRIP3
5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:22:07 2026 by rpki-client