
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa
File: 3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: a99k+lBbCozD/s7hN4/uMLkMLJAT1LwAXPLm/HtxG/s=
Subject key identifier: 78:B6:15:E9:1A:D1:04:7F:92:E8:9B:B1:CB:D9:DF:C5:1E:9B:D2:0E
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 3B88259D4AE152F36CFC757908F38BC3551278A7
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:05:14 +0000
ROA not before: Thu 25 Jun 2026 07:00:14 +0000
ROA not after: Thu 24 Jun 2027 07:05:14 +0000
asID: 151263
IP address blocks: 103.255.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:88:25:9d:4a:e1:52:f3:6c:fc:75:79:08:f3:8b:c3:55:12:78:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:00:14 2026 GMT
Not After : Jun 24 07:05:14 2027 GMT
Subject: CN=78B615E91AD1047F92E89BB1CBD9DFC51E9BD20E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:b0:c8:73:33:54:a8:df:14:ab:ba:4a:99:
58:c7:82:6f:53:4d:9e:80:c7:a4:2a:f9:ae:e8:3a:
97:b5:c1:e4:f9:7a:d5:c5:b0:52:2e:55:39:54:11:
07:d2:5d:38:0d:23:d7:08:6e:d9:44:23:b8:85:9a:
a0:cd:73:8f:af:89:e7:85:44:7b:96:73:3c:9b:e6:
f0:4b:a7:0a:e9:45:b6:1e:b4:e8:cb:89:19:42:60:
9a:c6:fd:3f:3f:88:ce:0b:61:cd:b9:d9:6b:e8:b3:
59:e1:51:d8:bd:e9:0a:79:a8:43:fd:3e:46:2d:8a:
60:b1:65:c3:c0:09:c8:07:6f:51:1f:ae:6d:ca:b5:
48:db:62:fb:48:93:b7:72:b7:73:d9:33:4b:6e:c2:
02:a5:d9:34:7d:0a:66:b4:91:29:11:f3:d9:4d:c8:
c5:7c:5d:aa:a2:4a:d8:07:74:9a:32:ac:05:13:78:
43:d6:b7:3e:3e:ce:bd:14:15:72:16:ef:3e:bb:2a:
90:40:58:fd:a4:f6:ff:33:aa:c2:f7:97:0e:db:0a:
08:6b:56:2c:15:ef:40:1d:ac:c4:91:ab:29:b0:4a:
67:d7:f9:6f:d4:80:9e:a1:0c:80:41:d8:13:f7:73:
6f:dd:d5:12:57:70:67:b3:1e:9e:d8:08:02:42:37:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:15:E9:1A:D1:04:7F:92:E8:9B:B1:CB:D9:DF:C5:1E:9B:D2:0E
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.70.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:e8:46:31:51:f3:ab:eb:45:6b:3b:8b:0f:a5:e6:27:3e:80:
df:53:a7:7c:68:b1:eb:41:6b:dd:bb:2e:b7:07:7a:53:5e:ba:
7a:d6:9b:80:16:aa:39:21:25:c0:73:45:5d:87:89:33:15:e7:
c9:e9:a9:d9:60:de:8b:bc:30:d7:f9:22:5c:01:e3:31:9b:ef:
16:cc:fd:ee:ec:7d:f5:10:cb:9e:bb:77:ff:27:09:91:f8:ba:
36:70:7f:a3:75:3e:b2:cb:11:2d:41:1a:65:10:8d:22:a5:7e:
b5:6c:54:ce:3d:9f:3f:24:72:12:0c:bd:9e:41:41:86:10:3b:
fb:7a:52:7a:5f:ea:a6:52:87:0d:97:4b:5c:d2:df:ae:6f:8f:
7e:1b:12:94:02:4d:75:4b:74:8f:51:05:3b:af:81:83:f2:06:
aa:02:31:ca:b2:e5:99:d5:08:79:4d:f3:8f:18:3d:13:dc:76:
c8:5c:ed:26:92:32:6b:fa:ff:94:fb:c7:af:4d:1d:3f:d8:47:
96:b9:5c:ca:d8:8b:82:f9:b9:66:b6:b6:d7:1c:76:36:97:9e:
94:33:44:7d:b1:41:68:34:ce:5b:ac:4d:a4:a5:11:9d:01:2f:
11:ea:82:12:21:3b:02:54:08:61:e7:b1:44:8d:98:89:20:cd:
44:fc:6d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:37 2026 by rpki-client