
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa
File: 3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier: aIKSsSTNCuPzeZ/P9HSOXWD9ZPEE2TG8j0sGce95ioY=
Subject key identifier: 89:6D:01:CD:5C:D7:2F:C8:EC:9C:C2:74:D6:33:73:83:66:3D:64:49
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 259236F8AEDC9258E426B91F3847BAF003D92439
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa
Signing time: Thu 11 Jun 2026 15:58:29 +0000
ROA not before: Thu 11 Jun 2026 15:53:29 +0000
ROA not after: Thu 10 Jun 2027 15:58:29 +0000
asID: 63619
IP address blocks: 103.202.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:92:36:f8:ae:dc:92:58:e4:26:b9:1f:38:47:ba:f0:03:d9:24:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:53:29 2026 GMT
Not After : Jun 10 15:58:29 2027 GMT
Subject: CN=896D01CD5CD72FC8EC9CC274D6337383663D6449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:68:e3:39:1d:8b:41:bc:74:5b:8b:8e:65:
47:85:e3:88:a1:65:bd:d3:42:d1:56:b3:84:8e:0c:
69:ab:f9:a2:d5:41:ab:61:99:de:9c:95:ba:a5:2c:
18:da:fc:be:e0:62:4e:6b:66:46:fa:02:b5:13:f4:
c3:db:24:63:ac:de:33:45:43:4b:b0:53:86:c2:25:
5b:94:7a:0b:0d:e9:5f:75:71:c1:1b:12:e3:57:59:
6d:05:40:b1:2d:61:a7:b5:08:4a:67:4a:21:b0:61:
8b:38:79:94:bf:9d:f2:45:f0:2e:d3:13:42:ef:f2:
74:9b:0c:59:82:1d:f1:6d:77:13:25:1d:1d:76:85:
4a:e8:17:9a:51:37:21:32:17:46:21:54:ad:0e:65:
4c:22:1f:5e:29:d5:2d:0f:f3:05:29:59:4f:b2:53:
fa:51:ed:b7:dc:45:85:de:25:82:12:57:fa:d8:9d:
cc:0e:ea:60:a8:73:41:56:60:df:51:b3:d4:b6:e2:
27:c2:a6:66:38:89:0a:00:7e:e2:8a:ea:10:3d:bc:
12:f6:85:58:91:3a:86:e8:7b:74:39:73:44:9c:58:
42:63:91:e7:72:2f:27:db:12:f1:f3:9f:76:4e:b8:
63:de:58:45:26:10:30:50:7e:84:2e:e2:a5:8e:8e:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:01:CD:5C:D7:2F:C8:EC:9C:C2:74:D6:33:73:83:66:3D:64:49
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
64:f3:a7:2f:86:a9:00:f4:7a:91:6a:56:61:88:b9:f0:48:48:
cd:f9:41:01:f6:8d:71:6e:ab:dc:60:eb:e4:23:43:22:81:46:
a9:ec:0f:f6:dd:27:d8:28:ea:74:e6:9c:da:06:fa:ed:32:e2:
8a:f6:e8:15:74:a6:0e:62:2d:f8:2c:f5:86:86:a3:6c:00:1c:
5d:38:4d:f1:de:5f:77:c9:af:1b:59:85:a1:cc:7e:50:a1:5c:
9a:29:8e:c1:e8:83:a7:53:0a:d6:ac:5f:5c:92:6e:85:83:10:
d5:2c:12:e1:53:cc:6d:7c:e3:0e:88:6a:d8:5e:a9:d4:75:23:
cd:b8:20:70:d5:86:bb:f8:c8:f9:ac:d7:b8:37:48:5c:9b:08:
8c:9d:02:25:fd:ea:fd:4a:e9:dc:35:37:db:d1:64:9f:e8:8d:
71:5c:89:6e:96:cc:28:76:bb:3b:37:fa:40:ae:9b:ea:d7:c2:
98:95:bf:3b:bd:08:63:0d:6d:40:f5:fc:fe:92:73:d8:ea:53:
e9:27:7d:00:e0:f4:f3:55:ce:52:98:d8:cb:ca:ce:e6:e3:c1:
85:9b:96:cb:52:e1:d2:e0:b4:38:8b:86:32:c1:23:78:bf:16:
d1:e3:ed:46:03:30:e6:41:26:aa:57:54:93:c0:e6:4c:a5:8c:
b7:e4:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:32:15 2026 by rpki-client