
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: 132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=
Subject key identifier: AC:30:57:89:BC:82:27:3E:E1:DF:13:97:1D:D9:5D:22:79:40:FD:B4
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 76C6A21BCD3FBAE8DB6C5F28B94EDBC0B9D06EFC
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:09:54 +0000
ROA not before: Thu 25 Jun 2026 07:04:54 +0000
ROA not after: Thu 24 Jun 2027 07:09:54 +0000
asID: 151263
IP address blocks: 103.45.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c6:a2:1b:cd:3f:ba:e8:db:6c:5f:28:b9:4e:db:c0:b9:d0:6e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:04:54 2026 GMT
Not After : Jun 24 07:09:54 2027 GMT
Subject: CN=AC305789BC82273EE1DF13971DD95D227940FDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:9f:ec:ff:8e:fa:b4:c9:05:70:93:86:2c:
cc:f1:8a:bf:fb:dd:cb:77:68:fe:40:8b:e7:d3:8d:
94:bf:be:cf:ad:91:5e:8a:36:b7:e0:46:86:62:0f:
fc:d4:d4:b8:3e:0d:96:e3:de:26:73:89:28:1a:7f:
d7:ac:dd:2d:2b:9b:ff:35:40:73:11:08:8a:c2:21:
2a:34:ef:b0:94:e0:f7:27:48:d1:84:17:30:d1:0a:
84:d4:99:f0:4d:43:2a:bf:00:87:3a:af:07:d1:fb:
85:55:e2:5f:2f:ca:2d:c2:a7:4d:b7:ad:f9:80:35:
57:5e:83:76:95:98:ac:22:33:85:4c:13:c5:50:5a:
33:53:16:b1:34:7a:b9:09:c6:9a:42:8e:3a:8d:b7:
3c:95:93:d0:56:04:74:36:59:2f:ce:5b:d9:83:b0:
36:14:54:11:8a:e5:71:35:2b:af:37:7c:65:40:6d:
0b:95:62:28:13:33:a5:7c:ee:55:d8:5a:34:81:c9:
fb:c4:51:45:3a:3d:7f:15:2c:9c:fc:f7:67:04:e5:
7d:bc:f8:41:ae:60:7b:ee:35:6e:e4:6d:18:b6:12:
33:02:ae:79:d8:62:79:37:b3:bd:a7:87:03:e1:a4:
b1:f7:58:cf:8a:2c:d2:fc:42:1d:fd:f8:eb:6b:cd:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:57:89:BC:82:27:3E:E1:DF:13:97:1D:D9:5D:22:79:40:FD:B4
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:42:ee:11:f1:e7:7f:07:5f:60:68:f9:f9:73:eb:bd:44:58:
8d:4e:02:55:25:4a:f4:f5:1b:6c:45:87:35:2e:da:ec:0c:bf:
10:57:a1:08:9e:bf:53:f9:17:07:bf:e8:5f:a6:89:77:1d:4e:
26:77:a0:70:4f:c9:3b:8e:8f:8f:7e:e8:d3:93:08:7c:e6:08:
2b:20:9d:41:c8:4f:42:0d:67:ac:0c:cc:f0:e3:63:ea:50:9a:
94:49:79:e5:54:be:83:9d:f2:db:9f:e0:b5:82:0a:2b:59:f1:
85:e5:b0:c4:0b:b7:a2:c3:87:0e:ca:bf:15:79:0f:98:a0:3b:
11:03:46:45:82:c9:70:04:b9:64:8f:98:ea:88:f4:26:19:e0:
9f:91:87:85:c4:35:ca:c4:bf:43:ef:94:23:f7:0e:c9:b0:5b:
2d:7e:7b:2f:17:58:b6:90:59:03:d6:d1:9f:89:bd:37:9e:7c:
ed:b4:4a:12:66:8a:6f:a4:bd:9a:f4:ec:58:84:26:4d:31:07:
dd:fe:37:49:08:86:94:60:40:08:aa:ed:49:84:7f:11:3f:80:
22:10:d1:db:03:4e:78:76:8b:4e:48:8f:e1:88:13:e9:1f:5c:
6e:7a:3b:65:2e:8e:82:2c:52:ec:51:5a:fb:b9:5d:a8:fc:44:
c8:6d:40:94
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUdsaiG80/uujbbF8ouU7bwLnQbvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzA0NTRaFw0yNzA2MjQwNzA5NTRaMDMxMTAvBgNV
BAMTKEFDMzA1Nzg5QkM4MjI3M0VFMURGMTM5NzFERDk1RDIyNzk0MEZEQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYp/s/476tMkFcJOGLMzxir/7
3ct3aP5Ai+fTjZS/vs+tkV6KNrfgRoZiD/zU1Lg+DZbj3iZziSgaf9es3S0rm/81
QHMRCIrCISo077CU4PcnSNGEFzDRCoTUmfBNQyq/AIc6rwfR+4VV4l8vyi3Cp023
rfmANVdeg3aVmKwiM4VME8VQWjNTFrE0erkJxppCjjqNtzyVk9BWBHQ2WS/OW9mD
sDYUVBGK5XE1K683fGVAbQuVYigTM6V87lXYWjSByfvEUUU6PX8VLJz892cE5X28
+EGuYHvuNW7kbRi2EjMCrnnYYnk3s72nhwPhpLH3WM+KLNL8Qh39+OtrzWUrAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUrDBXibyCJz7h3xOXHdldInlA/bQwHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0
MzUyZTMxMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGcthTANBgkqhkiG9w0BAQsFAAOCAQEADULuEfHnfwdfYGj5+XPr
vURYjU4CVSVK9PUbbEWHNS7a7Ay/EFehCJ6/U/kXB7/oX6aJdx1OJnegcE/JO46P
j37o05MIfOYIKyCdQchPQg1nrAzM8ONj6lCalEl55VS+g53y25/gtYIKK1nxheWw
xAu3osOHDsq/FXkPmKA7EQNGRYLJcAS5ZI+Y6oj0Jhngn5GHhcQ1ysS/Q++UI/cO
ybBbLX57LxdYtpBZA9bRn4m9N5587bRKEmaKb6S9mvTsWIQmTTEH3f43SQiGlGBA
CKrtSYR/ET+AIhDR2wNOeHaLTkiP4YgT6R9cbno7ZS6OgixS7FFa+7ldqPxEyG1A
lA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:54:01 2026 by rpki-client