
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134372e302f32342d3234203d3e203633373034.roa
File: 3130332e38352e3134372e302f32342d3234203d3e203633373034.roa (raw, json)
Hash identifier: zMEuyNgTgVcdgflFqG57R+f9o2g7k78+g4cQ0B5Qa1M=
Subject key identifier: D0:3F:ED:08:B6:86:FA:36:A1:28:07:D6:9C:02:51:61:B7:C1:30:19
Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
Certificate serial: 40CC64103C1C24F7176147C19B48B414A556B667
Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134372e302f32342d3234203d3e203633373034.roa
Signing time: Thu 04 Jun 2026 02:30:37 +0000
ROA not before: Thu 04 Jun 2026 02:25:37 +0000
ROA not after: Thu 03 Jun 2027 02:30:37 +0000
asID: 63704
IP address blocks: 103.85.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl
rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cc:64:10:3c:1c:24:f7:17:61:47:c1:9b:48:b4:14:a5:56:b6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
Validity
Not Before: Jun 4 02:25:37 2026 GMT
Not After : Jun 3 02:30:37 2027 GMT
Subject: CN=D03FED08B686FA36A12807D69C025161B7C13019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:2c:32:22:d4:3c:92:3a:65:c6:04:32:31:
fb:27:a3:07:d4:c3:4d:c6:ae:f2:6a:67:f5:ba:90:
df:c0:88:88:9b:54:f0:d4:16:74:ee:be:bc:d4:f8:
c1:24:2e:b6:ab:56:6a:c6:59:6c:1c:32:5d:30:a5:
29:9b:2b:43:89:95:33:de:10:c0:73:fc:20:52:5a:
05:bb:32:85:e0:cf:85:15:d7:20:e0:c2:2e:a4:a6:
8b:a6:be:a8:5c:4f:4a:0b:b3:b9:18:71:2a:cc:1d:
72:42:f1:ba:a2:72:5e:5f:b7:7b:86:26:2d:ef:94:
8d:78:d9:a5:41:a2:b6:70:78:97:08:3e:a9:9c:14:
51:7e:29:ce:24:ad:57:e1:64:d2:b2:d0:77:c5:3d:
dd:d4:c4:fa:98:3d:ea:3e:3c:3b:f5:43:69:a4:14:
eb:a0:9b:70:f2:33:51:12:75:f7:b9:d5:13:a5:ec:
49:3e:32:a0:8c:d4:26:b0:08:f9:e0:49:7d:08:17:
77:01:2c:64:73:e9:0b:70:80:dd:1a:f9:43:7c:28:
99:4a:83:ac:9d:2d:2d:52:93:28:11:49:43:b6:de:
99:89:0a:d1:1f:50:17:52:3c:e3:d1:e6:d8:d2:ef:
63:b2:6a:44:7d:93:44:56:a2:d6:1d:41:a4:73:ba:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:ED:08:B6:86:FA:36:A1:28:07:D6:9C:02:51:61:B7:C1:30:19
X509v3 Authority Key Identifier:
keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134372e302f32342d3234203d3e203633373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.147.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ee:36:4d:97:ed:d5:60:de:3f:95:d4:e1:e5:4c:78:97:2c:
11:25:b2:b5:fd:ac:1d:61:0a:f9:9b:3b:04:ad:08:a7:ed:45:
dc:da:cb:1a:6c:fa:61:90:b3:d3:fa:41:a0:7e:0e:50:9f:98:
fb:16:b2:ec:1e:34:98:56:76:e4:bc:0d:f3:73:a1:7d:7b:24:
f7:1c:a3:96:9b:0f:85:a4:1b:0d:e1:60:3e:07:09:bd:cb:35:
84:53:5d:b6:9f:f8:f2:4e:6c:9b:e2:d9:c0:14:cb:fa:72:55:
07:6e:66:a1:89:38:c1:fd:20:24:54:7b:4b:a2:82:ba:bc:ed:
e6:de:02:8b:b7:4b:50:9c:f4:57:7d:73:82:fa:27:3c:a8:5e:
5e:47:2e:a4:cd:ef:ea:11:7b:17:65:94:c6:af:ed:63:a0:fb:
4c:0a:5a:76:e2:75:f6:d8:fe:a9:51:18:5b:74:64:8e:b5:e0:
bc:fc:c2:e0:fe:30:a9:37:98:cf:e3:01:18:56:a6:9a:63:fe:
ee:8c:56:5b:f1:1a:32:4d:c1:ec:18:41:5f:3d:5c:e1:02:a9:
74:3f:aa:3e:20:b7:3d:81:d8:f3:75:78:ff:50:67:29:07:17:
28:ce:0a:94:d4:a8:b8:47:09:94:6d:c9:94:3f:97:c0:67:40:
f1:15:eb:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:07 2026 by rpki-client