
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: 7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=
Subject key identifier: 3B:D8:DE:BD:5A:BB:8D:37:0B:B7:A2:D2:4E:E2:54:E1:29:19:A0:52
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 0E64A5831E492B98DF514644E3EFF8670B74B63C
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:09:55 +0000
ROA not before: Thu 25 Jun 2026 07:04:55 +0000
ROA not after: Thu 24 Jun 2027 07:09:55 +0000
asID: 151263
IP address blocks: 103.45.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:64:a5:83:1e:49:2b:98:df:51:46:44:e3:ef:f8:67:0b:74:b6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:04:55 2026 GMT
Not After : Jun 24 07:09:55 2027 GMT
Subject: CN=3BD8DEBD5ABB8D370BB7A2D24EE254E12919A052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:d1:a6:f9:0c:18:dd:d3:39:25:93:82:f1:
ac:35:ff:66:9c:aa:d9:82:a3:9b:64:cb:45:13:9a:
86:e9:ce:e0:aa:bb:e4:32:cb:16:9c:4c:8a:a3:68:
7f:e2:78:71:5e:c6:6d:4e:0b:66:16:f5:27:36:6f:
4b:53:a0:25:66:2a:76:79:91:a0:11:fe:c5:60:79:
44:ee:78:dc:5e:f7:b8:95:84:c5:aa:09:d2:7c:a6:
af:dd:48:33:bd:e7:be:82:e2:75:ee:15:86:c3:bc:
46:81:93:c2:e7:00:46:0d:71:59:5f:fe:a2:b8:a7:
85:e3:81:99:fc:64:ad:90:c5:7e:82:89:f2:62:83:
20:98:f9:11:37:7e:92:c8:b9:29:dd:8c:c0:0f:69:
79:7e:ba:d1:52:c6:87:db:10:2f:d9:ec:9d:11:b3:
a8:43:c8:e6:7b:19:b9:f3:ef:2c:5a:09:2f:e9:de:
2c:95:7e:0e:9a:9c:7d:c4:52:c8:12:aa:aa:d8:3a:
7a:45:04:f2:d1:3c:54:f6:29:cf:4a:c1:e4:8e:9d:
0a:eb:ba:50:d3:1f:8a:d7:08:41:f7:02:0b:c5:51:
05:8c:2f:7a:d9:e5:4a:b7:91:08:9f:6f:14:8d:27:
49:b5:fc:7b:60:eb:a7:f6:00:46:ed:4e:18:16:9c:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:DE:BD:5A:BB:8D:37:0B:B7:A2:D2:4E:E2:54:E1:29:19:A0:52
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.135.0/24
Signature Algorithm: sha256WithRSAEncryption
23:67:2f:28:62:d1:9c:7b:09:70:5a:06:f7:a4:13:29:ba:21:
8b:31:29:a4:c8:d3:58:1f:09:9a:b4:2d:b3:f4:f5:8a:b4:7f:
cf:ee:ab:bd:33:35:52:38:ec:79:1b:9e:f1:48:ad:6c:43:f1:
a8:a7:15:05:11:94:ed:a9:d7:79:c3:f6:e0:bb:26:bc:47:d1:
a1:b4:65:00:e8:15:7d:ab:c1:0f:61:04:d9:7e:ec:9f:13:84:
8b:35:e6:cd:dc:fb:2d:8c:1a:1d:69:9b:d0:ff:53:d4:ed:60:
9c:75:b1:59:2f:5e:74:a8:19:d8:f9:5b:63:e3:1f:39:f5:c7:
0d:79:87:79:2f:b7:2a:9f:ec:ed:dc:62:09:0a:b8:da:56:7e:
9c:52:87:17:53:a6:70:9b:5f:c1:7a:1e:ed:f9:f0:fc:b9:0c:
f2:83:33:75:fe:e8:eb:f5:53:e0:ec:88:fc:17:9e:78:7b:c3:
06:4b:12:3a:b8:59:a5:b4:15:ef:93:5b:3c:51:42:9f:9c:b2:
ef:49:61:83:71:c1:63:c1:b7:e7:2e:54:1e:ea:e4:cb:51:73:
1a:2f:9c:48:a3:97:16:93:d3:d9:8c:06:04:a9:ca:46:fc:40:
32:f5:f5:e5:7e:d6:89:0b:cd:99:9d:f7:58:f1:9b:68:c6:ca:
49:7e:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:31 2026 by rpki-client