
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: hrnDB0H9vXDZrUkJluYFSyqNXQRUMoSXHQYB+vAQPNU=
Subject key identifier: 23:2D:CC:F8:9D:91:11:39:3E:36:ED:DA:4C:E6:C9:F7:02:0F:77:ED
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 3DF168D17286883DA424DAC9199920A03016AA12
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa
Signing time: Thu 11 Jun 2026 16:00:27 +0000
ROA not before: Thu 11 Jun 2026 15:55:27 +0000
ROA not after: Thu 10 Jun 2027 16:00:27 +0000
asID: 4811
IP address blocks: 103.202.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f1:68:d1:72:86:88:3d:a4:24:da:c9:19:99:20:a0:30:16:aa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:55:27 2026 GMT
Not After : Jun 10 16:00:27 2027 GMT
Subject: CN=232DCCF89D9111393E36EDDA4CE6C9F7020F77ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:a9:91:55:f3:5d:4e:06:73:dd:39:8d:74:
27:36:36:58:6b:42:0f:aa:9b:1b:8e:05:c7:e6:30:
94:2a:19:db:a8:c2:91:45:a3:50:65:a2:ce:4a:fd:
c7:c1:03:7b:f4:7c:1d:bb:7b:1a:a9:d1:eb:9b:97:
fe:b9:9b:32:3e:cf:11:53:ab:16:9c:95:cd:59:34:
5e:d5:1a:35:6c:43:03:00:0f:b3:1e:b6:6b:d0:42:
3f:6f:da:4a:3e:0c:ab:36:d8:e6:f1:80:a7:55:4e:
46:e4:08:52:35:ed:9a:73:18:7e:99:30:42:87:a1:
0a:c4:5e:6d:fd:7b:92:28:30:60:49:23:fc:d1:5a:
df:17:69:21:2d:b2:9e:48:06:46:71:89:e6:d2:fe:
bc:b1:f6:66:19:bf:60:c5:76:a3:b0:da:99:67:07:
8b:a4:89:4d:c4:83:5d:a1:4e:51:63:1f:9e:45:f5:
e9:4e:c0:f0:b9:f8:61:31:d2:68:c5:77:ad:b2:67:
aa:25:18:f0:ff:2f:8c:83:ab:04:ca:46:f4:cb:e8:
e6:eb:b4:a7:1f:05:a2:69:f3:4a:b2:91:f7:af:1a:
a2:89:32:9e:2b:ba:04:4b:66:7f:22:24:3d:22:e2:
a0:be:e4:0f:86:85:ac:62:0f:5d:ec:e4:fb:7c:ba:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:CC:F8:9D:91:11:39:3E:36:ED:DA:4C:E6:C9:F7:02:0F:77:ED
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.120.0/22
Signature Algorithm: sha256WithRSAEncryption
05:47:78:6e:0f:9b:34:3b:e1:2f:09:1c:aa:3d:0d:05:11:6e:
a0:62:ff:74:cc:86:2c:ec:84:6a:da:f9:5f:33:fa:b2:e7:f2:
8b:61:48:f9:27:96:ad:55:f9:b3:d1:7e:9d:cc:e0:72:f9:da:
84:20:b3:32:a1:42:ec:64:90:ce:25:40:01:7b:11:a4:d7:ab:
13:58:27:8a:1d:92:ef:79:f7:ce:3e:4d:55:7a:1c:03:18:f7:
d9:a3:43:54:7d:d4:9b:e0:f2:72:d5:28:d0:93:ae:14:97:c8:
f5:2e:66:2f:a1:22:0e:a6:48:3f:17:ce:d7:ba:b7:aa:e3:a7:
c9:7a:33:b8:09:2b:60:60:2a:6d:2d:46:d6:fc:ba:73:6d:05:
70:77:9a:27:a8:55:b9:db:f4:95:db:57:3d:44:e1:c8:52:28:
13:d5:8d:34:24:12:88:1b:3f:ac:73:4f:9e:af:1f:09:d4:30:
39:33:31:70:02:43:a4:5d:80:d4:d9:ed:01:a9:35:36:bf:6c:
28:36:37:72:73:79:3f:1d:e8:d7:f3:9f:ea:fc:f4:ba:fb:c4:
1f:6d:29:a4:c6:4c:60:01:3b:30:c9:7f:ac:d4:d7:ba:3f:e1:
e9:a9:ca:bf:c9:1f:8a:05:b2:e2:1a:02:08:2b:fe:64:dd:ec:
15:15:de:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:40 2026 by rpki-client