
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: WaH2JzOr/ocBZdIuOPXcXhP0ygdYxklYnvJTi8T7tQk=
Subject key identifier: EE:E3:EB:3B:94:4D:1B:E7:AB:A7:35:9C:20:91:89:79:E3:7D:3E:88
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 77827889DAAF76D4FC5407020C997768EDA6A8B9
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:09:55 +0000
ROA not before: Thu 25 Jun 2026 07:04:55 +0000
ROA not after: Thu 24 Jun 2027 07:09:55 +0000
asID: 151263
IP address blocks: 103.45.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:82:78:89:da:af:76:d4:fc:54:07:02:0c:99:77:68:ed:a6:a8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:04:55 2026 GMT
Not After : Jun 24 07:09:55 2027 GMT
Subject: CN=EEE3EB3B944D1BE7ABA7359C20918979E37D3E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:bc:e6:ee:2f:de:4f:a3:3c:09:c0:3b:77:
42:55:d4:d1:f2:75:5b:1f:c9:d8:bf:dd:bf:2f:a1:
c8:46:f3:58:36:c8:07:b9:5c:90:92:b4:92:02:7e:
ac:2a:8c:18:24:29:db:61:90:25:ae:9b:c4:07:36:
6f:6e:b4:18:10:42:8a:9a:40:82:6e:d8:6e:02:b3:
c4:45:34:b5:de:ad:a2:5f:29:27:39:8b:24:63:21:
ed:bb:4a:ff:cc:6d:06:18:e5:6d:a0:c7:f8:49:c8:
d5:ee:38:79:e8:cd:1c:8f:5b:cc:52:43:44:a9:d4:
fa:d7:29:22:59:d5:19:ef:20:85:cd:c5:76:f4:15:
24:fc:c1:d2:56:14:1c:c6:02:55:d9:f0:0d:6f:24:
bb:a0:40:f3:1a:80:8c:54:45:26:cc:3a:05:2d:c3:
23:fc:eb:cb:dd:23:84:0b:9c:b0:03:cf:5b:04:5e:
8d:0e:df:7c:9b:e4:cf:f4:33:15:5d:b7:85:d7:05:
d9:7f:c1:ef:4a:f8:ab:99:b7:50:e2:a5:31:eb:77:
88:73:0c:9f:0f:a2:45:5a:af:19:55:86:be:6f:b4:
b1:2e:bd:ff:5d:d6:54:e0:07:b9:23:39:01:ad:d5:
73:3f:8b:d3:04:20:01:a7:55:e9:11:ec:31:6b:cf:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E3:EB:3B:94:4D:1B:E7:AB:A7:35:9C:20:91:89:79:E3:7D:3E:88
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.138.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2e:56:0e:d2:26:d8:6c:bc:af:43:d3:93:65:dd:c4:68:38:
ec:8e:e5:dd:44:8a:04:9e:97:d3:a4:ad:f1:1c:9d:55:38:d4:
c1:2d:b3:9c:f3:da:21:7b:75:e5:a0:f4:bb:84:7f:a9:d6:b2:
31:1f:69:68:73:54:38:24:a5:c4:36:14:a5:cd:f4:6c:40:d7:
9f:a8:e2:7f:e2:eb:5e:0d:23:78:ee:0d:d1:4e:b6:92:f7:3d:
04:e0:3f:c3:bc:b1:00:82:11:ff:9b:a2:e2:c3:ac:4d:14:80:
30:6a:31:a5:27:0a:e7:22:ea:fd:93:1a:4a:30:df:dd:17:2a:
dc:b5:48:24:d5:c9:47:ef:42:e7:47:9d:6a:44:bd:61:46:c7:
2a:6a:8b:35:a7:11:8b:8f:96:f6:a9:4d:66:57:ec:be:97:4f:
95:7e:c4:d6:97:c7:78:f2:37:07:f6:de:cf:67:9d:1b:86:f5:
5d:e0:31:b1:ac:38:53:c0:a8:d1:7f:94:42:28:b3:ce:27:6c:
ac:9b:a5:a6:e8:62:c3:3f:b7:ed:e4:1a:09:3a:ae:06:ea:66:
49:77:59:63:aa:d7:9c:71:64:64:32:ee:ae:bf:49:38:9f:57:
31:a3:04:01:72:bb:08:15:cb:39:42:e8:32:82:21:68:a7:81:
e7:15:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:20 2026 by rpki-client