
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa
File: 3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa (raw, json)
Hash identifier: X33fm0XluohYCJXj8jxmsLTScEPvBSwfdlSzKHPZU2c=
Subject key identifier: 27:B5:46:2E:3F:82:FA:B7:0F:E2:39:84:79:B9:4F:95:EC:97:41:13
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 657D731DF5F50DC8A01422CF0DE0F9A492DAE962
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa
Signing time: Thu 25 Jun 2026 07:07:27 +0000
ROA not before: Thu 25 Jun 2026 07:02:27 +0000
ROA not after: Thu 24 Jun 2027 07:07:27 +0000
asID: 151185
IP address blocks: 103.45.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7d:73:1d:f5:f5:0d:c8:a0:14:22:cf:0d:e0:f9:a4:92:da:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:02:27 2026 GMT
Not After : Jun 24 07:07:27 2027 GMT
Subject: CN=27B5462E3F82FAB70FE2398479B94F95EC974113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:bd:a9:65:b2:c1:ee:44:37:14:89:77:92:
62:6b:9d:67:2c:94:40:84:2c:8c:8b:35:53:c8:3b:
28:e1:68:50:4d:4a:c4:ff:ac:ae:40:f2:60:da:55:
d1:19:23:c5:c4:a0:57:2b:7e:f8:a7:4e:09:08:e8:
e9:7e:1b:ec:8a:48:d0:1c:08:21:3e:81:4b:25:84:
a8:d7:13:0a:9a:ad:43:f6:bd:9f:bc:d0:aa:e9:c3:
5b:bf:b7:63:f3:b6:4b:1c:49:d6:b7:6f:69:b3:8a:
a8:8f:f1:e6:b6:df:f5:36:6c:57:8e:34:65:27:67:
44:0b:4f:de:f5:87:ae:0e:0d:47:92:90:80:0b:62:
87:d8:c6:99:37:5f:52:0d:1c:40:e0:2f:42:56:65:
4d:9c:d5:21:a9:cb:99:6c:15:f9:c5:40:f9:af:11:
ee:04:b1:ae:31:a6:e5:a7:3b:07:c7:82:94:ef:02:
4f:e4:a0:5e:49:88:71:2c:81:f2:bc:17:47:35:aa:
c8:18:c0:40:71:a1:38:a8:69:0a:36:b9:a5:c1:35:
76:2d:7d:a0:4c:9a:dc:cb:21:06:16:ab:5a:30:eb:
9b:e5:71:9f:f8:6a:f5:20:b4:9e:b7:10:f0:7c:4c:
d3:6e:62:b9:30:a7:4b:37:24:d9:6f:61:65:76:5a:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:46:2E:3F:82:FA:B7:0F:E2:39:84:79:B9:4F:95:EC:97:41:13
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:1a:31:34:ca:9d:e9:0f:4d:94:2d:a0:86:fc:4c:06:e2:f0:
1f:2d:03:82:60:5f:7f:d1:91:6f:af:db:79:bc:07:be:6c:86:
9c:b4:2a:30:0e:38:41:80:de:87:12:36:47:2e:f5:89:16:e1:
1a:6d:c6:de:8b:da:b8:34:3e:99:d1:5a:56:96:2f:1d:84:d2:
f4:24:c6:3a:a1:2f:07:18:63:e6:c4:b0:34:ae:3c:54:a2:01:
24:5e:db:5f:e3:f6:dc:4f:7e:b6:6d:d4:fd:6d:e1:d7:01:d3:
6f:95:d7:b1:0a:3a:d5:66:f1:6b:cd:db:39:24:a0:de:94:92:
70:8e:db:16:c0:2f:e9:fc:6f:a8:c3:08:53:30:57:dc:66:0e:
6f:5e:cd:b4:b8:d7:ec:55:77:96:46:a1:bc:9a:ee:97:42:e2:
55:00:ad:64:a9:69:bd:3b:25:14:73:19:ff:a2:fb:6d:1d:92:
09:51:1e:98:72:e1:5e:1e:39:39:88:ef:54:70:20:db:72:3c:
d3:8a:a4:5e:de:4f:df:17:3c:5d:af:bd:b7:c9:e7:47:55:d2:
87:59:e2:f6:34:62:24:06:4b:f5:67:56:74:be:62:70:34:69:
e2:c4:c0:43:ac:32:9d:81:0e:27:f1:41:ed:15:c4:cf:a1:a9:
8c:55:76:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:56 2026 by rpki-client