
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: YxBgZLLk6/7uSKhrpJTWAUnz6bdVYdSgz1srU9WCmoY=
Subject key identifier: 24:F9:21:97:47:84:B9:D0:5D:C1:C6:31:B3:8F:CD:8C:C6:33:4A:FD
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 175F9B8F792B789A75FAB52B5334DB49E707C907
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:09:54 +0000
ROA not before: Thu 25 Jun 2026 07:04:54 +0000
ROA not after: Thu 24 Jun 2027 07:09:54 +0000
asID: 151263
IP address blocks: 103.45.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:5f:9b:8f:79:2b:78:9a:75:fa:b5:2b:53:34:db:49:e7:07:c9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:04:54 2026 GMT
Not After : Jun 24 07:09:54 2027 GMT
Subject: CN=24F921974784B9D05DC1C631B38FCD8CC6334AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:78:02:5f:1d:63:ac:82:af:9e:36:cd:fe:
f1:25:7b:4b:6a:0a:d7:7b:5a:83:4f:d6:5b:45:82:
40:b5:18:1d:d3:69:83:de:68:a0:37:13:9d:e4:46:
7d:74:31:7e:b8:ef:a6:cd:0f:80:4c:3d:74:aa:7b:
39:25:f7:21:79:1b:0f:fd:d9:18:db:bb:77:99:62:
27:39:a4:92:da:e5:c3:30:1b:2a:5e:5d:31:2c:ca:
7c:fe:73:49:de:a5:1e:5e:d2:c0:62:c2:fb:3a:f7:
fc:57:71:e8:9c:a2:0d:15:88:03:82:90:7d:84:7b:
a6:63:7b:78:0c:3b:23:f6:85:d1:b6:48:33:af:33:
04:d4:aa:ee:d7:14:79:b2:ed:ec:79:13:1e:08:38:
11:de:4c:01:32:f1:2f:5c:32:3d:f4:9c:9a:aa:f8:
42:c7:b7:88:50:0f:66:56:da:33:c8:56:36:e0:a0:
58:bd:68:99:79:2f:3f:ce:2d:1f:6e:6a:7f:b4:b1:
10:c9:c1:74:c6:c6:b2:2a:3d:cb:c3:94:76:51:83:
ca:29:80:35:d1:a2:f0:8d:27:bc:2d:74:39:45:a4:
2b:ea:a6:93:23:6a:d2:42:e4:ca:50:9f:55:9d:08:
07:f3:b4:45:7c:d6:3d:60:49:23:2c:52:bc:e3:f5:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:21:97:47:84:B9:D0:5D:C1:C6:31:B3:8F:CD:8C:C6:33:4A:FD
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.130.0/24
Signature Algorithm: sha256WithRSAEncryption
44:dd:97:8b:ca:d0:ad:33:20:89:6a:a0:cf:25:b2:18:a3:ee:
77:f5:78:f6:a1:e5:2e:7d:39:88:59:a5:01:27:fe:3a:6f:60:
89:78:ef:d7:20:18:08:13:1d:cc:98:1c:0e:9a:ad:48:66:59:
7a:51:80:ee:1a:77:90:75:a4:15:92:1c:53:80:bf:da:11:48:
9a:fb:a4:37:dc:87:ed:60:b4:84:bb:3f:05:38:64:62:da:7b:
60:eb:ea:75:16:48:27:a9:e4:53:81:b6:34:a8:aa:d1:76:d7:
b0:76:60:e8:e3:e0:1b:66:8a:e3:8e:d2:2a:9d:a6:9a:1f:fe:
1a:2c:a2:3f:de:c9:14:08:c4:c8:81:ff:c0:3d:80:e6:50:37:
ac:01:fd:25:c6:43:8d:59:75:f4:b7:e6:07:b6:87:18:ed:30:
d4:02:7f:9b:d2:e2:8a:00:2a:e2:f0:09:1b:c3:ea:49:52:1c:
20:04:aa:6e:ea:c6:9d:3e:3e:43:bd:fb:c5:73:14:cf:ad:0e:
b8:7d:e5:3e:8d:ee:14:a9:e7:d3:8a:9d:c5:89:f2:f2:02:e1:
01:78:35:c7:1d:7b:14:9c:9f:da:e3:e9:2a:28:7a:9c:0d:c5:
b8:e6:5d:8a:55:70:f6:02:f1:72:d4:93:85:48:39:68:a2:9f:
4f:25:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:35 2026 by rpki-client