
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: ysdt6WCjPu86CKzZ4otbFmgUxo/AX8IdUB0ZJZmkbAs=
Subject key identifier: 51:22:5E:25:E7:0A:80:28:1A:33:FE:B5:5F:02:8A:B2:EE:5E:9C:D0
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 5CAB3B9B4C91A0D4724AB9E5E86BAB5A6C95D34F
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:09:54 +0000
ROA not before: Thu 25 Jun 2026 07:04:54 +0000
ROA not after: Thu 24 Jun 2027 07:09:54 +0000
asID: 151263
IP address blocks: 103.45.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ab:3b:9b:4c:91:a0:d4:72:4a:b9:e5:e8:6b:ab:5a:6c:95:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:04:54 2026 GMT
Not After : Jun 24 07:09:54 2027 GMT
Subject: CN=51225E25E70A80281A33FEB55F028AB2EE5E9CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:77:4e:e5:59:96:17:63:93:e7:a0:f7:c5:
20:ec:ee:2d:78:95:97:ad:68:cf:9d:f3:b6:5b:68:
f4:c0:06:d3:14:19:a9:ef:42:7b:eb:44:b2:9d:4c:
4f:15:ff:1e:5f:65:37:3a:8e:ba:2a:a8:4e:b8:ec:
75:a6:a8:39:d9:78:84:12:62:ce:7a:a8:53:36:33:
ff:25:bb:ee:88:67:54:e7:0b:1f:52:f8:75:15:ad:
a2:a6:e8:fb:97:23:27:a9:0b:0d:bc:0b:6a:b3:a1:
32:c1:4d:45:4d:cf:6c:7d:22:7a:92:cf:1f:c0:d9:
ac:bd:0f:78:be:56:ae:ec:36:8f:8a:a3:77:13:23:
7d:4e:92:55:29:68:d1:ee:3e:5f:ee:07:e5:c2:af:
de:a5:7d:50:5e:4b:43:b2:10:6b:f9:ff:9d:d2:26:
dc:bc:7d:2a:0a:e3:04:37:76:f3:dc:83:9b:e9:62:
d7:ac:86:a3:64:9b:ad:97:28:50:e2:99:39:e7:26:
70:85:ce:d0:c6:9d:6d:1a:df:25:b0:15:84:d4:a1:
91:60:28:ae:60:04:81:fe:8d:ad:e7:1d:66:02:d7:
48:f6:05:fb:8c:cd:52:47:a0:68:5f:55:3c:aa:b1:
3b:d5:1b:7c:6c:e2:61:20:56:c8:3c:21:ac:79:49:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:5E:25:E7:0A:80:28:1A:33:FE:B5:5F:02:8A:B2:EE:5E:9C:D0
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.142.0/24
Signature Algorithm: sha256WithRSAEncryption
33:15:50:b6:ea:96:bc:e8:c2:4e:90:43:97:2c:85:ee:cc:47:
94:18:20:93:0d:3b:c8:f7:c9:e8:4d:98:4f:0e:1d:3c:8e:9b:
11:4b:df:46:c2:cd:08:1e:4b:e7:8e:51:f2:69:d1:2d:4a:49:
c7:a7:f3:b1:be:8d:8d:07:b2:4b:b9:36:66:fd:cc:e3:2c:d9:
0f:23:30:d3:87:5a:e6:6d:c6:fe:54:52:cf:12:8e:f0:1f:56:
6d:49:1c:fa:54:eb:b3:5c:83:4d:43:9d:42:3a:04:1a:48:8d:
a0:80:f1:82:16:77:6d:7c:17:ba:84:05:0f:c5:68:a3:11:f1:
4a:26:55:bd:00:3c:8b:df:8a:62:1b:cb:d9:ea:1f:4e:5c:81:
aa:f8:56:7d:80:42:2e:f7:2f:b6:a6:f0:32:17:e2:51:fd:be:
3b:ce:a9:72:47:34:16:df:01:d1:e2:40:c6:55:9f:fa:b5:1f:
5d:c4:24:3c:5c:3c:03:4a:0a:5e:e3:82:7e:6d:0e:e8:c5:82:
fa:b2:11:f8:80:1a:70:6a:3f:54:7e:f3:c7:c4:06:a8:48:7e:
3c:de:c9:1c:15:47:63:97:31:98:42:bb:11:57:85:27:16:78:
f5:7a:65:8a:80:b1:3b:45:39:c8:a2:cc:cf:1c:b9:d4:be:05:
b1:e2:4b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:38 2026 by rpki-client