
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: TLtvholRbFMVX7PQaQfpBBj2HiEUdloBNRkONI50XTU=
Subject key identifier: D6:C7:65:E8:39:13:E7:AF:F1:81:33:5A:2A:94:B2:E7:E2:DE:1D:9B
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 166BB0ABA986B8FA475DC053D0BA5D4C88E0272B
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:11:05 +0000
ROA not before: Thu 25 Jun 2026 07:06:05 +0000
ROA not after: Thu 24 Jun 2027 07:11:05 +0000
asID: 151263
IP address blocks: 103.45.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6b:b0:ab:a9:86:b8:fa:47:5d:c0:53:d0:ba:5d:4c:88:e0:27:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:06:05 2026 GMT
Not After : Jun 24 07:11:05 2027 GMT
Subject: CN=D6C765E83913E7AFF181335A2A94B2E7E2DE1D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:69:b5:74:26:bf:24:5d:7a:92:81:27:96:
1b:b5:e1:b7:ef:a3:c6:5b:fd:8a:99:d0:c4:52:e1:
2e:e3:df:89:10:6c:33:3b:30:0f:e2:a0:c4:53:51:
47:d1:79:0b:66:67:7b:bd:a5:e4:73:b0:33:e2:ed:
e4:d0:2c:52:21:0b:4c:1f:e6:de:db:4a:60:ed:ea:
1d:82:6f:74:c6:24:04:cb:b2:7c:55:ef:d3:1e:1d:
11:ad:cb:b0:db:bd:65:0f:15:e1:8f:a6:11:1d:04:
25:0e:03:91:54:4f:41:4c:b7:13:1f:4f:a4:fe:2b:
9f:bb:6b:a2:d1:58:ae:83:89:59:5e:5e:e8:78:0d:
5a:bd:1a:7b:e7:bb:5b:c8:09:40:d9:d0:6f:f2:47:
79:da:f2:c7:80:a7:5a:be:89:c3:d7:97:37:a8:ab:
86:29:b1:91:2b:2e:0a:d8:8b:1e:95:7c:15:77:5b:
25:cb:c0:fd:c1:25:e4:8b:4f:7a:4d:44:8b:3c:3b:
26:75:81:17:8a:88:77:b4:e3:ea:3c:9f:d6:42:fd:
24:bf:bf:7b:a9:67:22:b1:80:ec:a3:66:3e:71:f9:
bf:8e:4a:b0:1a:0b:48:ce:14:6c:18:85:38:42:8c:
0a:b7:c9:9f:87:05:c5:04:b3:47:b3:d5:30:11:cd:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:65:E8:39:13:E7:AF:F1:81:33:5A:2A:94:B2:E7:E2:DE:1D:9B
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.132.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:10:52:95:51:ae:d9:75:1e:d4:ba:b3:a9:6c:cc:77:02:96:
1a:13:76:c9:42:eb:ef:6f:c9:5c:70:a9:e3:c8:3e:23:ba:27:
fd:01:2c:ba:0a:0a:68:a3:a7:2c:05:83:4e:b3:cf:d4:74:e1:
b7:8c:26:46:9b:42:8d:c4:c5:6a:38:df:d2:92:1f:c0:c0:bd:
3e:19:df:b6:78:1c:d6:81:55:79:a2:31:3c:1b:af:29:ec:41:
7d:0f:1c:61:a8:0b:c1:23:09:2c:f1:7b:28:d4:f9:7b:1b:40:
cd:7e:43:81:bb:b2:92:c8:b1:84:af:10:b3:74:34:b5:54:fb:
77:b2:d7:5a:08:09:a4:a1:c5:fd:37:e8:4a:fc:65:52:12:28:
80:39:c5:be:08:9b:55:ea:30:74:8c:be:0a:28:8c:cc:5c:93:
07:7c:c4:4d:ed:9c:43:c1:96:6e:b7:1f:3d:15:a7:c0:ea:5f:
bd:fe:75:34:4b:d7:25:66:21:4e:07:10:52:27:07:8f:02:ed:
ca:91:1c:6e:27:80:d2:ac:df:27:0c:5e:6f:9a:16:0d:fb:39:
78:49:00:30:fe:e8:4d:ad:98:d5:06:c3:56:f3:cb:92:86:38:
1c:d9:f5:0a:46:cf:16:12:8d:1a:f5:7a:2e:c1:35:88:f4:c0:
5b:d5:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:38 2026 by rpki-client