
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: c4+QizUwQ9LtfeNAuXm49/cIor41PzvBxYOWPZ9iLDU=
Subject key identifier: DB:CE:25:DF:39:E0:34:64:73:0C:36:2F:43:39:DB:5C:ED:06:2F:CB
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 521CBA81A32CB43981F50ABA4CBE3CBAC6D07345
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:11:05 +0000
ROA not before: Thu 25 Jun 2026 07:06:05 +0000
ROA not after: Thu 24 Jun 2027 07:11:05 +0000
asID: 151263
IP address blocks: 103.45.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1c:ba:81:a3:2c:b4:39:81:f5:0a:ba:4c:be:3c:ba:c6:d0:73:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:06:05 2026 GMT
Not After : Jun 24 07:11:05 2027 GMT
Subject: CN=DBCE25DF39E03464730C362F4339DB5CED062FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:85:5e:1b:64:f2:d0:1b:7f:99:07:1a:d3:
85:44:2b:dc:0b:a2:59:95:bf:60:87:02:2c:96:02:
13:11:6a:92:8a:f8:be:08:f2:dc:e6:46:30:5e:5e:
05:48:e0:9a:78:13:89:29:d5:e2:76:de:26:45:3d:
6f:71:67:d3:cb:ae:4b:56:c4:7b:6c:6e:5b:24:e2:
52:10:fa:fe:6b:16:a5:02:8c:9c:a8:4a:63:53:ff:
a2:f1:0e:c2:3f:35:2b:27:83:c7:c0:98:41:6f:44:
4a:6e:35:54:8e:2d:bd:29:bf:b0:eb:99:96:8e:c0:
8d:e0:e9:2d:02:4c:19:41:db:5c:15:34:6d:fe:ce:
92:ab:30:91:d1:12:76:2a:ad:b6:bf:ac:67:51:41:
a1:a0:23:75:c4:b2:80:d0:57:1f:b7:3a:2a:60:02:
dd:e1:07:d1:a9:0b:4c:bf:c9:f6:b3:6c:09:25:eb:
21:1b:ee:bb:d0:9e:52:54:1d:ce:db:f1:6a:98:06:
f0:97:fe:76:8b:0a:ec:d6:a7:00:09:88:73:97:ac:
08:0f:04:69:26:8c:16:2a:fc:94:9f:f6:3e:ca:61:
95:0d:9d:d3:f4:d7:d5:8b:28:6d:04:5e:18:23:49:
55:06:9f:4c:7a:92:ce:cb:86:bd:4e:2f:be:8b:86:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CE:25:DF:39:E0:34:64:73:0C:36:2F:43:39:DB:5C:ED:06:2F:CB
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.131.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:29:87:89:53:7c:ca:54:21:41:b8:78:06:89:a4:a9:45:fa:
ec:30:48:9b:c1:f1:ef:19:86:33:51:91:0a:ba:de:11:9f:2c:
a0:9a:9c:37:15:34:c5:b3:69:10:f8:d9:97:01:cf:9d:8d:27:
70:ec:1d:42:a0:8c:4d:7f:9f:87:49:07:ee:6f:d2:7a:e1:86:
1d:34:3d:e3:2b:d2:f7:d2:96:dc:35:c0:bd:71:cc:b2:df:00:
77:19:a8:3c:25:ad:ef:f2:bb:7c:95:ad:da:b6:5e:4e:c3:aa:
f7:6b:8a:b5:87:6f:07:84:42:cc:94:14:55:5d:ba:15:55:21:
8d:db:23:ff:e9:70:0e:fa:0f:e3:a8:26:49:e7:ae:61:06:ab:
a3:db:03:c0:30:0b:7c:49:03:14:81:2d:56:ba:37:8f:a9:ac:
b5:7d:7e:aa:5f:66:2a:14:0e:92:0f:31:52:e5:20:ff:20:0c:
65:47:f1:b1:1b:c1:a2:ef:96:9e:c6:ae:15:2d:b1:80:06:da:
13:3a:69:ad:71:dc:74:cb:e2:c0:c6:e4:85:a5:1d:af:2e:84:
7e:26:63:bc:32:a2:4d:32:bb:65:53:1e:49:08:8d:ae:c5:1d:
db:4b:b1:42:8f:01:ee:93:49:f1:ef:11:c7:19:ca:64:33:70:
ef:17:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:52:47 2026 by rpki-client