
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: M2XdKbxL0ENSMvazRgeFxypW89vJDNh3On2yjrYWJ0U=
Subject key identifier: 74:59:D5:B8:BA:65:89:49:EC:08:94:60:4A:06:36:E8:6F:06:F8:86
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 1B3F57259479EEBE5C4ED0A24C28A271D7DA747A
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
Signing time: Thu 11 Jun 2026 16:00:53 +0000
ROA not before: Thu 11 Jun 2026 15:55:53 +0000
ROA not after: Thu 10 Jun 2027 16:00:53 +0000
asID: 4811
IP address blocks: 103.202.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 04:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3f:57:25:94:79:ee:be:5c:4e:d0:a2:4c:28:a2:71:d7:da:74:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:55:53 2026 GMT
Not After : Jun 10 16:00:53 2027 GMT
Subject: CN=7459D5B8BA658949EC0894604A0636E86F06F886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:aa:bc:ef:48:57:33:b4:7b:80:8a:8e:16:ef:
cc:90:01:f0:4d:8a:79:46:b1:8d:85:b7:c1:65:6a:
e7:e1:c9:62:ca:ea:88:de:f2:e2:ae:d0:c0:85:9c:
e0:23:05:e8:8b:2b:e4:ba:6c:6a:28:2f:d3:62:19:
e7:4e:c0:16:4f:89:00:57:fc:1e:27:db:79:91:5d:
26:46:1d:3a:5f:85:b2:2c:f7:4c:11:23:83:78:a1:
0f:bb:75:3d:5d:78:6f:54:42:da:6e:fc:e3:de:d8:
69:0e:84:dc:f6:e1:3e:14:f6:1f:ad:9d:fa:41:4e:
f8:7a:a4:a4:ea:7f:09:57:45:96:df:e7:fa:33:2a:
0e:02:a3:26:71:b9:2e:38:d5:97:6d:b5:b5:a5:0a:
be:36:bc:02:38:49:fe:59:20:cc:b0:a0:1b:b7:18:
bf:56:e1:04:35:c1:cb:b2:b9:4e:a8:b6:18:a8:71:
bc:78:28:38:91:5d:85:aa:ea:1b:07:99:9b:4e:9d:
1d:cd:db:1c:2e:f0:24:ee:d0:aa:8b:2d:c4:7c:ec:
23:db:c1:43:db:94:10:de:aa:2a:70:37:ec:de:3b:
08:4a:00:2a:3b:5c:20:6e:6e:a8:b7:66:65:25:7f:
03:db:83:47:43:12:a9:a0:79:36:a3:1a:3b:02:2a:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:59:D5:B8:BA:65:89:49:EC:08:94:60:4A:06:36:E8:6F:06:F8:86
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.124.0/22
Signature Algorithm: sha256WithRSAEncryption
72:47:3b:1d:f9:98:ca:47:2c:04:fa:79:57:d4:64:e9:be:cc:
7c:98:01:ed:2f:ec:02:55:43:78:27:23:d8:8b:06:3d:d8:99:
4b:e6:8c:cf:cf:ae:32:39:54:6d:03:57:98:f3:ce:db:92:a7:
64:6d:b1:49:ae:2d:b8:58:13:42:56:24:5d:d8:da:4c:64:a1:
2e:e7:d4:39:8c:29:ad:69:60:9f:7a:50:d4:49:b6:1b:fe:f0:
7c:d3:27:6b:dc:cb:2d:11:e2:9d:04:cc:3e:e6:aa:6e:ca:24:
d2:64:60:f8:00:df:45:6d:7b:5c:3a:19:c1:38:c5:fb:64:a8:
13:2e:0d:d5:ad:9c:9d:16:6c:05:bf:3a:5d:9a:3e:cd:d4:43:
52:1c:c0:9d:b6:76:32:12:a9:90:48:9f:05:5f:94:a5:3e:99:
c0:3e:8c:19:66:6a:5a:d9:ff:5f:3f:01:aa:a6:ed:94:9a:a6:
a7:7a:64:d2:8b:3b:da:74:80:79:2c:5e:a5:29:a0:46:d8:74:
6b:6f:72:39:d4:64:46:8c:5a:11:db:80:02:72:73:5b:d1:67:
55:67:56:b1:1d:96:79:3d:9d:55:5d:8f:8c:87:fe:e5:3a:7c:
f9:e3:15:ed:73:2a:79:17:18:62:1c:e1:9e:d8:ac:4b:dd:b5:
be:d0:81:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:20:41 2026 by rpki-client