
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203633363139.roa
File: 3130332e3230322e3132342e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier: 9pDnN0BKdbi8+hGzDyQEx+XZxnl99Lb7wp+NSskq/mw=
Subject key identifier: 64:30:C8:B6:86:A1:3F:BD:58:1A:0F:33:07:60:0F:63:00:B7:2D:7C
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 5AAEA74C42C389362AB80ECBC2C7083C3C001E42
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203633363139.roa
Signing time: Thu 11 Jun 2026 16:00:53 +0000
ROA not before: Thu 11 Jun 2026 15:55:53 +0000
ROA not after: Thu 10 Jun 2027 16:00:53 +0000
asID: 63619
IP address blocks: 103.202.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ae:a7:4c:42:c3:89:36:2a:b8:0e:cb:c2:c7:08:3c:3c:00:1e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:55:53 2026 GMT
Not After : Jun 10 16:00:53 2027 GMT
Subject: CN=6430C8B686A13FBD581A0F3307600F6300B72D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:47:53:7b:91:f4:05:03:b4:74:07:7b:f4:
80:83:a2:b7:07:c3:30:21:f0:6b:f7:a9:0f:8b:84:
23:31:8a:ca:d9:0a:84:01:95:60:7c:78:19:6a:84:
f2:ae:7a:d1:9a:d4:7c:4f:9f:01:17:21:d6:d0:eb:
27:22:eb:93:ab:a3:55:7a:2d:eb:f5:c5:c5:c6:63:
69:39:bd:ce:65:0a:de:ad:2c:41:5a:31:cd:eb:c7:
94:08:f3:de:47:4d:83:ee:86:d8:ef:21:27:e1:78:
a2:7b:0e:b9:f9:21:a1:bf:ff:d9:95:b2:55:7d:40:
0d:0d:4c:bf:52:47:04:22:54:9c:6c:1a:a3:68:14:
b6:f5:41:1b:b8:27:1d:88:89:05:12:4d:e4:e6:cc:
f4:47:9c:89:96:a7:d7:9b:ae:4e:26:7d:92:14:3c:
fc:b7:1b:fb:51:07:fb:0f:b9:39:ab:bd:59:43:1b:
7c:e5:35:19:e1:39:22:1b:26:20:a1:8e:06:8e:4d:
92:7e:61:3e:ae:1d:cb:fa:37:44:68:7b:ad:d3:5a:
c0:1f:8d:76:88:8e:43:28:f7:57:ee:d6:2e:c2:aa:
a2:06:cc:e3:2f:8d:fc:05:92:e2:9b:5f:1a:3d:24:
4e:bf:dc:26:fd:b4:05:9a:d5:ce:c8:8e:1f:ab:df:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:C8:B6:86:A1:3F:BD:58:1A:0F:33:07:60:0F:63:00:B7:2D:7C
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203633363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:5a:67:74:2a:c4:aa:03:76:8b:fd:54:38:17:60:b0:8f:e4:
05:26:71:c5:41:07:10:dd:1b:43:f9:4a:95:f7:d2:4f:e0:31:
60:37:29:69:f1:44:e9:ba:6f:7b:1e:7c:72:b3:77:93:45:2a:
e2:00:a0:79:4d:4b:b8:d1:8e:43:4e:16:1e:ad:65:1a:55:bf:
73:72:cb:de:91:8b:12:57:b8:91:00:d7:c6:b8:67:61:1f:48:
2a:2f:ea:13:2a:1c:91:a2:52:20:5a:1b:de:a1:0e:30:87:66:
8a:4b:09:3c:5d:ad:34:03:b0:4c:d4:f7:7c:04:b2:e4:0a:e0:
44:a4:d4:67:12:c3:ae:d6:0e:49:2a:70:2d:f5:f9:12:62:9d:
af:bf:7c:7c:8d:7f:04:56:3b:75:87:b9:a7:82:6d:35:9e:c3:
2d:59:2b:0f:0e:62:40:47:c3:4b:36:f7:dd:c3:3e:30:3a:67:
1b:4a:e2:0e:ca:d4:91:31:c2:da:43:52:8c:43:02:81:43:24:
6b:f7:84:78:95:ef:0e:64:67:54:5f:8d:54:46:0a:58:63:66:
aa:01:17:29:ef:83:ba:a4:4c:85:69:a1:fa:96:c3:9d:60:91:
5d:ab:23:2d:1d:4d:e0:ce:19:7e:65:a6:b3:2b:6e:13:e4:0b:
c1:f1:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:45:39 2026 by rpki-client