
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa
File: 3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier: wh0gWQWT0zLqUg0t8c2yBb/Ia+DD+M0DKWb6hjBwuS4=
Subject key identifier: BE:40:73:65:3D:3E:E3:67:BB:EE:7D:B5:5E:7E:A6:CD:24:99:1A:03
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 29354C8B2F442AF3213A547FC3E95DC0BD594671
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa
Signing time: Thu 11 Jun 2026 16:00:26 +0000
ROA not before: Thu 11 Jun 2026 15:55:26 +0000
ROA not after: Thu 10 Jun 2027 16:00:26 +0000
asID: 63619
IP address blocks: 103.202.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:35:4c:8b:2f:44:2a:f3:21:3a:54:7f:c3:e9:5d:c0:bd:59:46:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:55:26 2026 GMT
Not After : Jun 10 16:00:26 2027 GMT
Subject: CN=BE4073653D3EE367BBEE7DB55E7EA6CD24991A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:68:45:fd:8b:ad:a3:b8:07:0f:9a:52:51:
ea:b3:d4:51:6f:f6:f9:24:77:19:74:53:a3:61:da:
35:5c:fb:3e:0c:70:94:d5:a4:79:32:1e:e6:50:97:
11:c0:1c:bc:01:97:76:a1:bb:de:89:b5:5a:de:d2:
e7:ee:1f:34:60:62:5a:d5:f9:5b:89:5f:d3:e9:e7:
2a:a7:c2:a5:01:56:4a:70:32:b7:02:0b:27:96:c2:
cf:06:56:90:4b:26:00:af:a4:16:e2:8e:0e:1d:0c:
67:58:a3:55:53:d2:55:27:1c:82:ce:f2:d5:b7:61:
91:76:f0:b0:e7:50:2e:cd:42:1a:f7:b3:29:de:1f:
de:86:5b:30:16:ec:b1:df:1e:4b:7e:b9:83:ba:e2:
44:78:13:fc:1c:07:c0:db:98:14:36:88:c7:9d:7c:
62:f4:35:6c:bd:24:f5:37:e8:b6:81:32:5a:91:43:
2a:40:cc:cf:1d:31:18:c6:08:c8:a6:c7:db:ed:46:
d1:a8:32:58:78:e7:0d:20:22:d4:09:19:fa:e4:04:
df:3f:51:27:ef:4b:3f:ca:33:4c:fa:b7:b9:af:fe:
d5:77:52:91:34:55:28:30:8a:c6:c8:f5:5f:80:eb:
49:12:38:13:d0:ba:00:04:ba:3d:85:d6:86:54:54:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:40:73:65:3D:3E:E3:67:BB:EE:7D:B5:5E:7E:A6:CD:24:99:1A:03
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.120.0/22
Signature Algorithm: sha256WithRSAEncryption
74:b4:6d:43:ae:ef:9b:1e:0a:4b:24:e0:e4:5f:0c:10:af:ca:
c2:59:2d:49:39:ed:51:9a:02:04:4d:93:3e:31:61:58:80:b2:
74:23:d5:f5:1b:7a:0f:77:ab:13:f6:95:fc:e3:b3:ae:57:b6:
5f:54:8c:47:7e:b2:00:ac:c8:ea:66:78:4a:f9:ca:33:24:ff:
93:25:d6:a9:1c:b7:9a:b7:25:51:11:66:08:86:67:55:1d:11:
86:90:6e:54:1c:00:bc:07:96:9c:f8:1e:3d:0f:1a:65:da:a0:
90:ed:73:97:eb:ca:cb:20:f9:d3:04:0f:f1:b1:2c:7b:ec:75:
e3:08:26:3b:62:a2:ad:60:90:7b:ca:11:9c:54:41:4e:35:3e:
fa:28:ab:a9:7c:05:0f:08:7d:d0:af:e3:82:2f:a6:10:97:d2:
d1:be:d1:96:59:40:7a:09:27:09:08:1d:26:d9:a1:a4:22:2f:
ba:09:6d:b1:bf:c4:4a:6f:1f:90:61:37:b9:73:59:a8:8b:40:
d1:60:ea:88:3c:a0:62:be:06:06:79:56:f2:42:0e:cc:14:04:
a4:0e:93:67:a1:d7:f7:33:d3:2b:26:aa:f5:96:ec:7d:6a:ae:
1a:97:46:2c:9f:84:02:39:4f:5f:5a:a2:41:58:bb:73:60:bb:
30:68:51:ea
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUKTVMiy9EKvMhOlR/w+ldwL1ZRnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU1MjZaFw0yNzA2MTAxNjAwMjZaMDMxMTAvBgNV
BAMTKEJFNDA3MzY1M0QzRUUzNjdCQkVFN0RCNTVFN0VBNkNEMjQ5OTFBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEWhF/Yuto7gHD5pSUeqz1FFv
9vkkdxl0U6Nh2jVc+z4McJTVpHkyHuZQlxHAHLwBl3ahu96JtVre0ufuHzRgYlrV
+VuJX9Pp5yqnwqUBVkpwMrcCCyeWws8GVpBLJgCvpBbijg4dDGdYo1VT0lUnHILO
8tW3YZF28LDnUC7NQhr3syneH96GWzAW7LHfHkt+uYO64kR4E/wcB8DbmBQ2iMed
fGL0NWy9JPU36LaBMlqRQypAzM8dMRjGCMimx9vtRtGoMlh45w0gItQJGfrkBN8/
USfvSz/KM0z6t7mv/tV3UpE0VSgwisbI9V+A60kSOBPQugAEuj2F1oZUVCHPAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUvkBzZT0+42e77n21Xn6mzSSZGgMwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy
MzAzMjJlMzEzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfKeDANBgkqhkiG9w0BAQsFAAOCAQEAdLRtQ67vmx4KSyTg5F8M
EK/KwlktSTntUZoCBE2TPjFhWICydCPV9Rt6D3erE/aV/OOzrle2X1SMR36yAKzI
6mZ4SvnKMyT/kyXWqRy3mrclURFmCIZnVR0RhpBuVBwAvAeWnPgePQ8aZdqgkO1z
l+vKyyD50wQP8bEse+x14wgmO2KirWCQe8oRnFRBTjU++iirqXwFDwh90K/jgi+m
EJfS0b7RlllAegknCQgdJtmhpCIvugltsb/ESm8fkGE3uXNZqItA0WDqiDygYr4G
BnlW8kIOzBQEpA6TZ6HX9zPTKyaq9ZbsfWquGpdGLJ+EAjlPX1qiQVi7c2C7MGhR
6g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:31:53 2026 by rpki-client