
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3130382e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: 7oIWNA5nR1YbCFZDdNXBPbnJE24DsjgV8+2x8HVNju0=
Subject key identifier: CB:1E:49:D5:A3:D7:A0:AB:37:99:BC:8C:0A:C4:00:79:4E:04:29:47
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 11574582E7ECBE66AD00450480A4BE3085F74546
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e2034383131.roa
Signing time: Thu 11 Jun 2026 15:59:31 +0000
ROA not before: Thu 11 Jun 2026 15:54:31 +0000
ROA not after: Thu 10 Jun 2027 15:59:31 +0000
asID: 4811
IP address blocks: 103.202.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:57:45:82:e7:ec:be:66:ad:00:45:04:80:a4:be:30:85:f7:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:54:31 2026 GMT
Not After : Jun 10 15:59:31 2027 GMT
Subject: CN=CB1E49D5A3D7A0AB3799BC8C0AC400794E042947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b4:a9:44:d9:9f:9f:ba:00:1e:e5:f9:62:e7:
e6:40:5c:da:fe:65:dd:d3:41:6c:32:1b:a9:5a:4d:
f2:ac:29:6f:77:80:f7:eb:69:6f:87:e5:86:f3:c4:
88:04:1e:8d:1d:b9:6c:09:96:9c:b8:e5:fa:6f:93:
1b:1d:37:14:f5:0f:50:e6:25:0d:01:9e:67:f0:1f:
11:ab:12:9f:5c:03:a0:79:66:dd:01:fe:64:ba:16:
67:ac:3f:dd:f6:e6:dd:a2:30:e7:b9:b9:94:c8:1b:
f7:8f:2f:80:5d:95:21:4a:5a:d3:28:a7:74:98:03:
11:d2:35:64:13:5a:b4:f9:23:b9:15:5a:d6:97:9a:
87:11:29:3f:90:68:18:9d:a8:f1:e1:03:cb:1f:84:
1d:d9:41:a1:c7:b6:d6:5e:54:1e:8e:62:8e:3e:1e:
ca:ad:b9:fb:4c:0f:e4:19:0a:a1:88:a9:c6:4f:8d:
eb:92:6e:6a:ed:c2:11:d0:b9:49:30:6e:f8:be:ef:
69:14:9e:3f:ef:c2:dc:ad:cd:aa:72:34:1c:ae:e5:
9d:ae:0e:e0:08:d0:1b:59:ab:1c:d0:2a:d2:72:04:
09:18:82:81:84:d0:77:78:22:53:9b:83:80:a0:31:
3d:71:7a:c3:7a:24:ad:07:05:01:6e:e6:61:24:ef:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:49:D5:A3:D7:A0:AB:37:99:BC:8C:0A:C4:00:79:4E:04:29:47
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f2:86:b8:7f:4a:6b:25:bf:8a:89:00:6d:68:49:1f:36:5b:
b0:bc:d8:42:d8:45:a5:56:42:e6:24:81:9d:65:2e:4f:6b:c8:
32:7a:d3:d6:05:d5:a3:76:b9:af:be:d2:9e:6a:21:e9:6f:dd:
4b:b0:8d:37:c6:36:77:9a:36:6d:81:62:31:71:e8:75:53:cd:
72:1b:5c:5a:c8:66:37:01:04:a9:f9:ee:e6:27:1a:52:0e:4c:
7d:a8:d0:00:ce:2e:6b:77:33:8a:1e:7a:e5:b1:76:ef:64:6b:
d9:9e:50:ad:e6:c4:a5:48:30:cd:d8:88:50:21:d1:c4:25:4a:
18:db:42:5a:ef:90:d1:5e:5f:d0:f9:98:c0:7e:f8:f4:22:e8:
94:83:5a:03:10:06:e6:96:ed:9a:b0:46:e0:d5:a0:be:53:22:
51:c3:15:2b:69:bc:64:ed:1d:04:7d:94:71:68:a9:2f:c5:8f:
68:5f:c8:e8:92:af:56:a0:04:09:73:f2:a0:06:d8:db:73:4c:
6d:5f:3f:a3:bc:c4:bb:e4:46:4c:7c:99:08:c0:36:86:ad:b6:
d9:33:f0:92:9f:df:67:ed:ed:53:67:c6:1b:4b:4a:05:fe:80:
d8:b2:c7:be:10:28:7e:6b:49:be:06:df:14:a0:48:41:bc:3b:
87:9c:98:6e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUEVdFgufsvmatAEUEgKS+MIX3RUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU0MzFaFw0yNzA2MTAxNTU5MzFaMDMxMTAvBgNV
BAMTKENCMUU0OUQ1QTNEN0EwQUIzNzk5QkM4QzBBQzQwMDc5NEUwNDI5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tKlE2Z+fugAe5fli5+ZAXNr+
Zd3TQWwyG6laTfKsKW93gPfraW+H5YbzxIgEHo0duWwJlpy45fpvkxsdNxT1D1Dm
JQ0BnmfwHxGrEp9cA6B5Zt0B/mS6FmesP9325t2iMOe5uZTIG/ePL4BdlSFKWtMo
p3SYAxHSNWQTWrT5I7kVWtaXmocRKT+QaBidqPHhA8sfhB3ZQaHHttZeVB6OYo4+
HsqtuftMD+QZCqGIqcZPjeuSbmrtwhHQuUkwbvi+72kUnj/vwtytzapyNByu5Z2u
DuAI0BtZqxzQKtJyBAkYgoGE0Hd4IlObg4CgMT1xesN6JK0HBQFu5mEk7zjnAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUyx5J1aPXoKs3mbyMCsQAeU4EKUcwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKbDANBgkqhkiG9w0BAQsFAAOCAQEApvKGuH9KayW/iokAbWhJHzZb
sLzYQthFpVZC5iSBnWUuT2vIMnrT1gXVo3a5r77Snmoh6W/dS7CNN8Y2d5o2bYFi
MXHodVPNchtcWshmNwEEqfnu5icaUg5MfajQAM4ua3czih565bF272Rr2Z5QrebE
pUgwzdiIUCHRxCVKGNtCWu+Q0V5f0PmYwH749CLolINaAxAG5pbtmrBG4NWgvlMi
UcMVK2m8ZO0dBH2UcWipL8WPaF/I6JKvVqAECXPyoAbY23NMbV8/o7zEu+RGTHyZ
CMA2hq222TPwkp/fZ+3tU2fGG0tKBf6A2LLHvhAofmtJvgbfFKBIQbw7h5yYbg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:07:25 2026 by rpki-client