
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa
File: 3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa (raw, json)
Hash identifier: nyRsUIZAMGliMA9SM6UnzJp0udBw1RrqO4H4TZw1qRw=
Subject key identifier: 91:0E:56:3C:E9:59:7A:00:A4:8D:91:E3:3A:DE:A2:88:20:31:05:67
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 27D16BAF975964B122D8BAB48A231CAB705E6C80
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa
Signing time: Thu 25 Jun 2026 07:06:14 +0000
ROA not before: Thu 25 Jun 2026 07:01:14 +0000
ROA not after: Thu 24 Jun 2027 07:06:14 +0000
asID: 151232
IP address blocks: 103.45.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d1:6b:af:97:59:64:b1:22:d8:ba:b4:8a:23:1c:ab:70:5e:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:01:14 2026 GMT
Not After : Jun 24 07:06:14 2027 GMT
Subject: CN=910E563CE9597A00A48D91E33ADEA28820310567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:ec:d6:49:3b:dd:3c:e2:49:df:85:c4:db:
e6:0b:6c:7d:dd:54:99:b1:b8:28:df:38:4b:bb:26:
7e:4e:bc:e9:05:c3:56:5c:76:69:4b:45:32:01:6e:
90:a2:d1:62:76:a8:01:03:c1:32:5e:ae:93:a5:15:
94:06:f3:02:e4:b1:e7:b4:f9:44:18:7c:19:08:02:
28:f8:e3:ba:41:16:4d:b4:ae:6b:f2:68:3e:1f:5f:
b0:a9:ea:6f:99:db:a8:47:39:a0:d0:e6:4d:a4:1e:
e9:85:b3:db:ad:a1:4e:9d:11:a4:a7:d0:59:2f:05:
fc:33:ea:23:0f:7f:ab:c2:50:df:27:53:16:af:3b:
a6:15:47:58:55:77:31:1c:1b:ac:8c:5d:9e:c9:38:
0f:32:77:92:92:43:dd:46:ed:48:12:3f:ca:f6:a2:
07:b6:52:3c:ff:62:03:0b:fe:d0:dc:24:62:f6:80:
54:80:41:19:e1:65:81:65:3f:32:65:e8:8d:9d:19:
90:10:dc:5b:97:ff:39:4e:14:15:27:26:2b:8d:59:
af:10:4c:48:f7:82:98:00:a6:49:1e:33:62:be:11:
c5:8b:6f:7a:94:21:ee:fa:77:4c:6c:a8:9b:fd:17:
67:95:83:83:d1:d4:35:d5:0b:6f:ff:aa:5c:ca:fa:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:56:3C:E9:59:7A:00:A4:8D:91:E3:3A:DE:A2:88:20:31:05:67
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.144.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2b:e4:5d:51:16:e2:8a:46:27:9f:26:1d:90:97:c7:4e:e1:
45:b3:03:8f:35:0b:6c:35:15:98:19:15:af:6b:8c:d9:a5:b5:
59:96:d0:0c:6f:69:7b:75:12:40:33:1b:fe:b2:d5:d2:3f:46:
d4:97:30:9c:6b:cb:0e:27:b1:cd:b1:c1:97:8d:83:9a:31:ce:
b2:cc:6e:81:f6:3c:43:06:02:50:86:51:e4:45:b7:a1:25:35:
c7:24:ed:40:7c:6c:e3:d0:f6:16:8d:41:01:ae:95:22:c3:da:
64:1e:1f:fb:43:09:4b:e0:79:ea:8a:5d:77:80:cc:47:10:3c:
4b:de:ea:8b:6f:28:98:fe:91:74:8e:cb:80:f5:32:61:5e:5d:
1f:65:57:25:ae:5b:d6:f4:8f:fe:62:da:fa:68:34:f9:c2:31:
b9:3c:5c:c1:8c:41:82:77:1f:fe:12:91:3c:8b:43:66:0a:5a:
f2:c2:6c:2c:34:86:3b:29:c1:74:b1:77:e5:4a:29:91:8e:53:
2c:26:33:a6:c9:62:a7:b7:83:22:86:f7:37:dd:0a:6f:b0:7e:
cf:20:c9:d6:87:33:12:4f:2a:47:be:4d:6f:03:5d:23:ac:f9:
92:fb:69:61:06:d0:b3:63:52:c7:f8:4e:c7:70:98:56:96:c2:
5b:d8:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:54:04 2026 by rpki-client