
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: 77OGndP6/t8f1eKL6x11zzQrLdxFa6zgVu9BmpkrrbA=
Subject key identifier: A3:C1:B2:D6:FC:45:8B:90:4B:30:8F:A5:46:60:BD:63:CE:C5:9F:26
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 35AE91DAEECACB8C7C8B6F0C3E48A34CC92C0960
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa
Signing time: Thu 11 Jun 2026 15:58:30 +0000
ROA not before: Thu 11 Jun 2026 15:53:30 +0000
ROA not after: Thu 10 Jun 2027 15:58:30 +0000
asID: 4811
IP address blocks: 103.202.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ae:91:da:ee:ca:cb:8c:7c:8b:6f:0c:3e:48:a3:4c:c9:2c:09:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:53:30 2026 GMT
Not After : Jun 10 15:58:30 2027 GMT
Subject: CN=A3C1B2D6FC458B904B308FA54660BD63CEC59F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:d8:07:6c:c5:35:d7:79:38:98:ca:64:ac:
9f:43:9f:26:65:11:57:cc:09:6e:8e:50:bc:b8:e0:
8e:d2:8d:05:5f:39:66:fa:9e:f3:3d:6f:fa:5d:2f:
95:06:bc:8c:50:a5:7c:20:c8:ae:e3:5d:62:ba:3d:
c4:2c:ee:c0:f5:5a:90:d6:a7:11:ff:ed:8b:b1:2a:
e7:08:54:b9:6b:70:79:2f:da:33:1e:92:ce:84:9c:
4b:59:3e:76:bc:e8:37:24:f6:7c:9f:f8:cc:0f:f9:
02:2b:ee:6b:77:db:cf:2a:e6:f7:f0:5d:e9:46:0d:
cb:94:d4:c3:e7:19:d7:9d:98:5a:dd:f5:17:7c:f0:
b0:d0:d7:8e:fd:06:49:3d:50:5c:dc:82:56:98:f0:
29:1a:0e:e0:dd:9b:c1:de:fa:a4:4c:75:4b:8a:04:
91:27:f1:f3:6a:64:7f:f9:4c:06:1a:68:ff:5e:f9:
3c:f6:a0:eb:63:16:5d:0f:b3:8e:66:62:f6:5b:0e:
b5:38:fb:b2:a3:43:5e:7a:24:b0:61:1e:ce:95:fd:
c1:21:bc:23:8b:51:0b:d3:4c:61:7c:70:d9:b3:d7:
5c:b9:88:45:e3:4e:21:8a:09:49:84:39:9c:69:7e:
8e:a6:0d:8e:06:f1:cf:83:84:18:58:f3:3c:96:1c:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:B2:D6:FC:45:8B:90:4B:30:8F:A5:46:60:BD:63:CE:C5:9F:26
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
96:e7:68:1d:6e:21:f5:a7:d2:9c:6c:03:ce:05:19:48:24:87:
87:80:b9:b9:4f:03:ff:35:13:06:ea:9f:e2:0d:f1:84:54:de:
82:10:4d:64:61:d4:5b:da:7e:1e:8d:02:59:2a:b6:74:82:5f:
35:a7:52:d0:05:16:bd:20:57:ee:73:3b:a8:d0:72:30:0f:5f:
62:db:d1:2f:2c:28:d5:61:a4:2c:f1:7c:3a:aa:9d:2e:6d:f1:
f7:ad:c0:be:ed:d1:10:ad:86:2a:f6:d5:92:f0:b4:ad:05:b4:
51:0b:e3:a7:f1:e3:7d:24:36:f1:6b:97:d7:40:d0:66:58:c3:
b3:55:2f:62:9b:d6:49:41:27:a3:03:da:08:2b:32:5e:09:a3:
8b:14:e0:26:34:7d:89:37:b1:19:ab:fe:fa:a2:c6:0e:95:a4:
9d:82:e8:b9:8e:9b:c2:b7:fb:11:06:cc:23:15:c1:32:8e:33:
c2:26:64:ca:6e:a7:3a:f3:10:74:7c:cd:37:ec:02:21:a3:eb:
5f:12:2c:17:a1:b5:93:45:25:d2:1e:b6:ae:6f:96:f6:b6:fc:
9a:1b:26:69:cc:18:8e:17:9e:48:2d:8b:ea:ce:2c:7d:ca:84:
b1:f4:80:ae:e1:b5:95:11:f6:e4:b3:01:4f:51:dc:b7:72:4b:
ee:dc:94:5a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUNa6R2u7Ky4x8i28MPkijTMksCWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTUzMzBaFw0yNzA2MTAxNTU4MzBaMDMxMTAvBgNV
BAMTKEEzQzFCMkQ2RkM0NThCOTA0QjMwOEZBNTQ2NjBCRDYzQ0VDNTlGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbdgHbMU113k4mMpkrJ9DnyZl
EVfMCW6OULy44I7SjQVfOWb6nvM9b/pdL5UGvIxQpXwgyK7jXWK6PcQs7sD1WpDW
pxH/7YuxKucIVLlrcHkv2jMeks6EnEtZPna86Dck9nyf+MwP+QIr7mt3288q5vfw
XelGDcuU1MPnGdedmFrd9Rd88LDQ1479Bkk9UFzcglaY8CkaDuDdm8He+qRMdUuK
BJEn8fNqZH/5TAYaaP9e+Tz2oOtjFl0Ps45mYvZbDrU4+7KjQ156JLBhHs6V/cEh
vCOLUQvTTGF8cNmz11y5iEXjTiGKCUmEOZxpfo6mDY4G8c+DhBhY8zyWHLD1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUo8Gy1vxFi5BLMI+lRmC9Y87FnyYwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKZDANBgkqhkiG9w0BAQsFAAOCAQEAludoHW4h9afSnGwDzgUZSCSH
h4C5uU8D/zUTBuqf4g3xhFTeghBNZGHUW9p+Ho0CWSq2dIJfNadS0AUWvSBX7nM7
qNByMA9fYtvRLywo1WGkLPF8OqqdLm3x963Avu3REK2GKvbVkvC0rQW0UQvjp/Hj
fSQ28WuX10DQZljDs1UvYpvWSUEnowPaCCsyXgmjixTgJjR9iTexGav++qLGDpWk
nYLouY6bwrf7EQbMIxXBMo4zwiZkym6nOvMQdHzNN+wCIaPrXxIsF6G1k0Ul0h62
rm+W9rb8mhsmacwYjheeSC2L6s4sfcqEsfSAruG1lRH25LMBT1Hct3JL7tyUWg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:09 2026 by rpki-client