
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37392e302f32342d3234203d3e203539303039.roa
File: 3130332e3235342e37392e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier: RU8rCpvDTOUN8aHCI6rbN3TTBH7hZij0BMfkPiGrNA4=
Subject key identifier: 68:0B:B5:62:9F:AA:8F:BD:1B:DF:B5:EA:2C:82:8F:C5:8C:E2:3B:8A
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 5DB798A0AC3A21A7F9AA8CDD00F3E5F147F74723
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37392e302f32342d3234203d3e203539303039.roa
Signing time: Wed 01 Jul 2026 09:27:44 +0000
ROA not before: Wed 01 Jul 2026 09:22:44 +0000
ROA not after: Wed 30 Jun 2027 09:27:44 +0000
asID: 59009
IP address blocks: 103.254.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b7:98:a0:ac:3a:21:a7:f9:aa:8c:dd:00:f3:e5:f1:47:f7:47:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jul 1 09:22:44 2026 GMT
Not After : Jun 30 09:27:44 2027 GMT
Subject: CN=680BB5629FAA8FBD1BDFB5EA2C828FC58CE23B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:ca:2d:d6:0f:c5:53:4e:b2:7b:a2:52:65:
6e:4a:7b:07:e3:f9:83:69:2b:74:6e:79:11:97:fd:
91:d0:53:44:fd:20:26:1f:bd:db:dd:63:b3:4e:2c:
76:ee:54:ec:50:57:86:14:1f:e9:f5:e0:db:87:31:
ce:94:4f:58:95:b6:ad:a1:46:84:12:6c:e3:82:d7:
d3:07:6d:f3:ac:0d:c6:e5:43:94:04:c8:09:96:75:
76:11:2f:48:f1:54:03:03:b6:47:64:bd:25:82:0e:
78:81:25:65:67:33:55:7f:e9:0e:c0:fc:c0:c9:85:
df:3a:31:21:00:78:06:db:d0:e7:06:13:39:ad:3c:
cf:38:c6:20:96:6c:dc:5c:db:dd:b0:44:8a:37:62:
6e:95:52:43:9f:e0:55:c4:3d:a2:fb:2d:48:b0:9a:
41:3f:da:7a:65:9a:36:37:0d:6f:64:26:44:5f:cb:
6e:54:d1:ba:dd:08:7d:74:0c:41:9f:b4:95:eb:f6:
d0:28:4e:a3:d6:d0:7f:62:12:e1:d4:47:95:95:67:
8b:e6:f0:a8:7c:1a:4e:fa:33:f6:73:3f:ae:54:2e:
df:65:f8:9f:c5:09:44:d8:ba:b3:f8:95:39:29:8a:
4f:79:19:9a:91:f9:c3:2d:af:34:4a:db:e9:94:70:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0B:B5:62:9F:AA:8F:BD:1B:DF:B5:EA:2C:82:8F:C5:8C:E2:3B:8A
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37392e302f32342d3234203d3e203539303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2e:8c:d3:6e:72:8e:f0:0d:98:84:27:01:10:c1:c2:db:bd:
1d:d2:06:e7:24:93:9b:9d:98:cb:ad:14:24:c7:fe:86:3b:5d:
43:a2:a8:96:f7:37:cf:e3:fa:be:7d:37:d2:61:0f:e1:df:a3:
b9:ee:f8:d0:f5:35:41:16:aa:14:98:69:91:f4:89:08:03:7a:
7b:a8:b1:97:52:96:2f:c5:c7:26:84:04:ca:9a:1a:79:30:5b:
38:41:84:a9:6c:0a:46:46:ea:d5:4e:d8:33:47:41:04:f8:72:
4e:2c:a8:6e:07:83:07:c9:52:b3:91:76:57:b9:d9:23:70:52:
9c:15:a3:80:e9:02:e6:9d:79:48:33:13:7d:56:52:0e:33:28:
42:41:5e:3c:b5:36:df:1f:78:c7:56:20:c5:6a:c8:3c:fb:ff:
d6:d8:19:c4:2d:d0:7b:c8:4b:84:dc:e6:62:1c:0f:f7:43:88:
af:3f:71:b8:f6:0a:f1:59:39:e5:4c:14:5c:f1:88:e4:20:7d:
fe:d6:90:33:e9:a7:03:cb:2e:1e:91:76:1b:d8:fa:c0:cf:6a:
15:30:17:49:5c:0a:67:7a:af:d3:75:cc:a9:57:d2:ee:28:d7:
dc:e0:7e:36:b3:d8:20:61:2f:4e:54:85:fe:b6:ca:86:53:71:
dd:41:26:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:44 2026 by rpki-client