
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa
File: 3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=
Subject key identifier: A6:A1:14:89:CC:0B:5C:F3:29:BF:89:DC:6B:52:13:6C:CB:D5:DB:E6
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 1C52B5710CFACCBA73DF2105A680C6FBC4742933
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:05:14 +0000
ROA not before: Thu 25 Jun 2026 07:00:14 +0000
ROA not after: Thu 24 Jun 2027 07:05:14 +0000
asID: 151263
IP address blocks: 103.255.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:52:b5:71:0c:fa:cc:ba:73:df:21:05:a6:80:c6:fb:c4:74:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:00:14 2026 GMT
Not After : Jun 24 07:05:14 2027 GMT
Subject: CN=A6A11489CC0B5CF329BF89DC6B52136CCBD5DBE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:01:ce:a3:9d:bf:3c:bd:31:ec:07:ce:9e:
aa:35:a3:a7:e8:6e:39:ee:b4:25:27:fe:e2:db:39:
af:46:0d:92:ea:2a:c3:f3:df:c1:4f:d3:5a:27:fa:
5d:1f:87:f9:f1:d3:36:b7:79:5b:16:56:37:7f:37:
11:07:50:c6:03:87:13:18:b7:6d:00:af:a0:b3:b8:
87:a0:14:c6:23:e3:38:b6:a5:f5:f6:28:63:cc:2a:
d5:f2:0e:f8:9a:4a:4f:24:11:d5:5f:8b:aa:40:5c:
ff:f0:4e:fd:7a:ad:0a:02:66:0f:f6:dd:18:60:b0:
74:ba:2f:f2:04:7d:59:b8:61:f4:ea:03:9a:5b:a7:
f2:54:1e:c5:34:8c:ed:a4:47:71:bc:95:4a:43:12:
37:8c:9b:b9:8c:73:b6:14:cb:f4:f2:ca:2d:70:a4:
aa:54:2a:f0:39:5a:7e:cf:ca:90:36:32:ef:1c:24:
67:e1:b9:34:e3:2a:7f:41:57:6b:79:80:b2:9d:ce:
86:7f:46:4a:50:26:c0:b5:c3:c3:4d:25:eb:f7:48:
cc:48:60:47:ab:bc:53:d1:06:59:ff:52:e6:9d:e6:
e8:89:fc:5c:d3:e1:98:1a:ec:c3:04:d7:32:5f:bd:
dc:b5:10:60:8b:f9:99:71:d2:7e:ba:d4:d0:6f:c5:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:14:89:CC:0B:5C:F3:29:BF:89:DC:6B:52:13:6C:CB:D5:DB:E6
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:74:bd:db:d3:8d:4c:1a:58:39:58:36:36:94:9d:12:09:19:
25:ae:74:0a:0b:4f:7a:6f:58:8c:bc:cb:ef:e6:b5:1c:44:9f:
7b:bd:c2:e9:1a:01:f0:6a:83:29:94:d7:8a:d3:43:11:84:ff:
45:12:1f:96:c2:9c:d9:8c:00:25:c3:bc:1a:41:9f:10:2e:75:
e6:8b:52:34:1c:54:e1:13:f9:fe:d2:5e:66:af:ab:16:08:b2:
73:03:4a:c2:91:55:6b:a1:e4:7c:d4:fa:48:58:2b:fc:66:26:
d3:74:40:40:6f:94:af:d4:1a:ee:4c:71:67:73:22:73:9b:2d:
4d:88:f0:62:e3:c4:f4:64:48:7c:0b:15:e0:38:b0:f2:f6:ed:
42:d5:db:2c:e7:3a:25:b6:d6:5b:52:cb:46:5b:ae:7e:c9:d2:
9b:b5:b0:44:b7:da:73:e6:4a:18:8b:90:b6:bd:9b:98:0f:1d:
fb:f9:fa:b8:07:ef:ae:60:e3:a2:ea:c1:68:3c:d1:0c:33:fd:
43:02:5f:11:32:50:eb:3b:de:5f:7b:c2:09:da:66:73:2c:70:
91:d0:2b:c1:2a:bc:d9:d9:2f:ab:88:09:84:e1:34:96:4b:e7:
6b:d1:4c:c8:00:06:13:63:20:09:89:be:82:7e:d8:6b:0c:e9:
a1:c2:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:54:04 2026 by rpki-client