
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=
Subject key identifier: 05:C6:AD:B4:F4:0C:9C:6B:74:D8:86:79:9C:CC:64:A6:28:40:A0:27
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 56943D317C5D1794FE21ED612DCD36AE2D9DFF3A
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:09:54 +0000
ROA not before: Thu 25 Jun 2026 07:04:54 +0000
ROA not after: Thu 24 Jun 2027 07:09:54 +0000
asID: 151263
IP address blocks: 103.45.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:94:3d:31:7c:5d:17:94:fe:21:ed:61:2d:cd:36:ae:2d:9d:ff:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:04:54 2026 GMT
Not After : Jun 24 07:09:54 2027 GMT
Subject: CN=05C6ADB4F40C9C6B74D886799CCC64A62840A027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:28:00:6a:43:11:22:25:4b:f9:8c:5d:42:
c3:a3:32:00:35:ce:b4:ff:87:09:ee:94:d0:a0:5f:
e3:1d:d5:5c:97:7f:4d:7f:e6:af:6d:8a:df:c8:e7:
17:d3:3a:7d:76:61:a3:b8:ab:4b:8c:b8:53:02:6e:
a9:7c:c5:36:04:d2:d0:6d:80:3d:bc:c1:e6:da:11:
dc:fb:22:88:7e:05:e6:5a:ca:26:90:10:6a:d1:0c:
cc:b0:d6:78:9b:be:85:17:87:7d:22:67:44:14:51:
4f:fa:8f:e0:7f:4e:a1:09:7f:da:f6:9c:4b:91:51:
09:14:f1:12:ef:17:a6:ce:69:73:ae:ce:df:b8:19:
b1:61:24:e1:7f:4c:64:bc:44:6b:09:4f:58:01:78:
6f:a9:70:c6:3d:35:95:01:2d:d1:b2:5e:6a:80:94:
26:8e:23:1f:27:91:90:62:fe:03:c3:7e:3a:9c:40:
b0:f2:8a:75:bd:30:9a:1f:25:07:77:92:16:d4:d9:
ce:d6:b2:56:a0:09:10:15:da:da:43:18:a9:0b:ea:
ec:5e:be:e2:18:5a:67:0c:3a:e8:9d:a4:56:bb:f1:
a6:19:b6:2d:7c:ab:cb:0e:5a:8d:51:5d:bd:07:62:
fa:4b:01:55:08:b9:29:d1:52:26:6a:7a:23:0e:1d:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C6:AD:B4:F4:0C:9C:6B:74:D8:86:79:9C:CC:64:A6:28:40:A0:27
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.141.0/24
Signature Algorithm: sha256WithRSAEncryption
31:72:ba:58:ad:07:80:14:ac:6a:24:25:9b:d5:de:e2:8a:16:
02:4f:78:37:c2:48:af:d0:0b:f8:46:10:05:6c:58:88:e8:b2:
5a:44:c9:af:53:18:94:d3:e6:df:b7:38:3d:ea:dc:cf:75:fc:
ad:65:5a:b5:f1:f8:38:10:80:c8:c8:25:7f:d5:cb:4e:05:a8:
b0:eb:c3:79:5f:d7:e3:ed:0d:bb:1f:e3:ad:7b:00:93:56:c1:
7f:0c:e6:81:6f:ba:a3:57:76:9c:1f:1c:b8:f5:c7:1b:03:a2:
8a:b1:bf:32:7b:4e:5e:43:b0:d8:7c:07:8a:05:1c:a5:12:ce:
11:45:25:d7:b7:92:0e:66:41:66:b7:c1:82:bb:8a:04:19:50:
3f:07:c2:94:b0:ea:e5:e7:a1:0a:bc:8a:24:26:bc:38:a9:2f:
79:f8:75:c2:03:f9:25:20:50:72:b2:bc:8a:1b:4c:89:b3:ba:
91:da:fa:d7:40:54:0f:07:53:47:71:e1:d7:9b:31:aa:4f:67:
bc:6f:c0:8f:73:b8:20:c8:42:2d:cc:87:57:5a:8d:f8:0e:bf:
93:6d:6e:f9:5d:9b:cf:fa:f4:00:28:05:40:f1:61:33:66:04:
df:4a:fd:59:34:e1:71:0e:f3:5a:3a:28:85:34:a0:06:bf:39:
7f:1c:f0:0b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUVpQ9MXxdF5T+Ie1hLc02ri2d/zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzA0NTRaFw0yNzA2MjQwNzA5NTRaMDMxMTAvBgNV
BAMTKDA1QzZBREI0RjQwQzlDNkI3NEQ4ODY3OTlDQ0M2NEE2Mjg0MEEwMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5igAakMRIiVL+YxdQsOjMgA1
zrT/hwnulNCgX+Md1VyXf01/5q9tit/I5xfTOn12YaO4q0uMuFMCbql8xTYE0tBt
gD28webaEdz7Ioh+BeZayiaQEGrRDMyw1nibvoUXh30iZ0QUUU/6j+B/TqEJf9r2
nEuRUQkU8RLvF6bOaXOuzt+4GbFhJOF/TGS8RGsJT1gBeG+pcMY9NZUBLdGyXmqA
lCaOIx8nkZBi/gPDfjqcQLDyinW9MJofJQd3khbU2c7WslagCRAV2tpDGKkL6uxe
vuIYWmcMOuidpFa78aYZti18q8sOWo1RXb0HYvpLAVUIuSnRUiZqeiMOHRDNAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUBcattPQMnGt02IZ5nMxkpihAoCcwHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0
MzUyZTMxMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGctjTANBgkqhkiG9w0BAQsFAAOCAQEAMXK6WK0HgBSsaiQlm9Xe
4ooWAk94N8JIr9AL+EYQBWxYiOiyWkTJr1MYlNPm37c4Percz3X8rWVatfH4OBCA
yMglf9XLTgWosOvDeV/X4+0Nux/jrXsAk1bBfwzmgW+6o1d2nB8cuPXHGwOiirG/
MntOXkOw2HwHigUcpRLOEUUl17eSDmZBZrfBgruKBBlQPwfClLDq5eehCryKJCa8
OKkvefh1wgP5JSBQcrK8ihtMibO6kdr610BUDwdTR3Hh15sxqk9nvG/Aj3O4IMhC
LcyHV1qN+A6/k21u+V2bz/r0ACgFQPFhM2YE30r9WTThcQ7zWjoohTSgBr85fxzw
Cw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:23 2026 by rpki-client