
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa
File: 3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier: hDDTb53HztLIH4r4Wn0H7aEqKyEipiofrQjGPbDb55c=
Subject key identifier: 64:EB:B1:62:DC:DA:C2:8C:7F:37:BB:E6:24:4E:93:68:CA:A1:37:89
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 6D84A5D29195321410491B9430316A6F6AF2E5E0
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa
Signing time: Thu 25 Jun 2026 07:11:05 +0000
ROA not before: Thu 25 Jun 2026 07:06:05 +0000
ROA not after: Thu 24 Jun 2027 07:11:05 +0000
asID: 151263
IP address blocks: 103.45.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:84:a5:d2:91:95:32:14:10:49:1b:94:30:31:6a:6f:6a:f2:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:06:05 2026 GMT
Not After : Jun 24 07:11:05 2027 GMT
Subject: CN=64EBB162DCDAC28C7F37BBE6244E9368CAA13789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:6f:bc:04:6b:55:e7:06:e3:db:3c:5f:85:
06:19:b0:f8:08:c8:d2:bb:56:63:32:c9:82:9b:c3:
76:00:93:50:96:cf:68:95:77:6e:c0:36:7e:ea:2c:
c9:f7:15:24:46:4f:f1:c5:68:83:a3:8c:83:1c:f8:
9d:2f:96:29:32:7e:95:7c:ac:c2:e7:11:98:88:86:
e8:11:aa:d0:3c:9b:16:df:33:4e:5a:c4:13:b2:fe:
d5:f6:66:ef:28:fa:90:b0:de:78:da:88:81:eb:87:
e2:19:19:9f:72:ee:a2:c7:6a:1c:52:3c:05:b3:f3:
82:c8:94:38:b0:eb:a4:15:0a:14:9c:39:80:60:1c:
01:a9:31:e9:5b:86:f0:0b:39:20:13:92:47:f1:e4:
13:7a:9c:0e:03:44:67:50:d7:12:68:a9:fb:89:cf:
a3:db:48:06:c4:cc:9c:9a:08:2b:9f:16:35:31:e0:
12:d7:71:02:db:26:0a:67:ef:7a:33:6c:06:2f:bc:
01:f0:68:a8:1f:33:61:7f:0d:d9:96:12:d2:c1:3c:
9d:a1:3e:d4:16:c9:92:76:06:ff:7f:26:55:4e:b7:
ff:b5:f0:c6:eb:f5:4e:68:00:3a:e4:95:55:ad:f0:
a8:a6:9c:bb:d8:c1:e4:68:7c:e3:fe:fc:c8:a0:1c:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:B1:62:DC:DA:C2:8C:7F:37:BB:E6:24:4E:93:68:CA:A1:37:89
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.143.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cb:60:e9:85:db:15:7f:f1:51:22:61:0f:fd:3a:4b:92:b2:
61:3d:96:17:cd:cf:5c:67:ce:37:9b:9a:ae:70:93:ad:8f:6c:
6a:52:52:e2:8e:4d:fe:48:82:c3:bf:cf:c4:22:2d:fd:07:e0:
b2:9c:28:a3:2f:db:1f:4e:3a:37:2c:99:32:77:a4:c0:96:c2:
1a:6c:40:fd:4b:8c:60:0c:32:37:b4:ea:68:0a:3e:fd:bd:ec:
90:f2:12:63:a5:44:af:1f:8b:b1:83:11:60:f6:b4:d4:26:fe:
df:22:ff:c8:77:d2:b2:89:12:3e:47:2f:d5:a9:4c:4e:e5:15:
2e:9b:f9:77:37:09:6b:d6:a2:68:0b:f8:c8:0b:ba:f2:e3:1a:
08:04:1b:93:ad:98:30:2b:fa:d4:64:31:76:e4:3b:4e:92:d2:
a9:19:88:15:52:58:f5:9e:32:37:69:dc:29:90:fb:13:de:e1:
16:52:54:fd:2d:dc:12:62:6f:68:59:c8:e5:70:10:09:ae:03:
d2:49:f9:1c:9c:7a:11:d8:3a:95:7e:43:95:6d:da:b0:18:4e:
e8:d5:03:c6:62:db:ad:69:4b:91:a2:e2:7e:27:f7:ba:6d:6f:
6f:40:25:e3:1e:a5:67:3b:b0:fd:2d:bd:16:b0:71:2d:b0:c9:
07:09:fa:71
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUbYSl0pGVMhQQSRuUMDFqb2ry5eAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzA2MDVaFw0yNzA2MjQwNzExMDVaMDMxMTAvBgNV
BAMTKDY0RUJCMTYyRENEQUMyOEM3RjM3QkJFNjI0NEU5MzY4Q0FBMTM3ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwB2+8BGtV5wbj2zxfhQYZsPgI
yNK7VmMyyYKbw3YAk1CWz2iVd27ANn7qLMn3FSRGT/HFaIOjjIMc+J0vlikyfpV8
rMLnEZiIhugRqtA8mxbfM05axBOy/tX2Zu8o+pCw3njaiIHrh+IZGZ9y7qLHahxS
PAWz84LIlDiw66QVChScOYBgHAGpMelbhvALOSATkkfx5BN6nA4DRGdQ1xJoqfuJ
z6PbSAbEzJyaCCufFjUx4BLXcQLbJgpn73ozbAYvvAHwaKgfM2F/DdmWEtLBPJ2h
PtQWyZJ2Bv9/JlVOt/+18Mbr9U5oADrklVWt8KimnLvYweRofOP+/MigHE8nAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUZOuxYtzawox/N7vmJE6TaMqhN4kwHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0
MzUyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGctjzANBgkqhkiG9w0BAQsFAAOCAQEAfctg6YXbFX/xUSJhD/06
S5KyYT2WF83PXGfON5uarnCTrY9salJS4o5N/kiCw7/PxCIt/Qfgspwooy/bH046
NyyZMnekwJbCGmxA/UuMYAwyN7TqaAo+/b3skPISY6VErx+LsYMRYPa01Cb+3yL/
yHfSsokSPkcv1alMTuUVLpv5dzcJa9aiaAv4yAu68uMaCAQbk62YMCv61GQxduQ7
TpLSqRmIFVJY9Z4yN2ncKZD7E97hFlJU/S3cEmJvaFnI5XAQCa4D0kn5HJx6Edg6
lX5DlW3asBhO6NUDxmLbrWlLkaLifif3um1vb0Al4x6lZzuw/S29FrBxLbDJBwn6
cQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:57 2026 by rpki-client