
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: fkBA9oWFB1HbYzo4zGniqwe1Tb237okghoAUAH/IvnY=
Subject key identifier: 8D:9B:D8:B6:0A:4B:75:2D:73:2E:19:D6:AC:D9:C4:E2:0A:CB:30:79
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 753557140BF6A29610A2EB3FD051F63FC3119EEC
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa
Signing time: Thu 11 Jun 2026 16:01:24 +0000
ROA not before: Thu 11 Jun 2026 15:56:24 +0000
ROA not after: Thu 10 Jun 2027 16:01:24 +0000
asID: 4811
IP address blocks: 103.202.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:35:57:14:0b:f6:a2:96:10:a2:eb:3f:d0:51:f6:3f:c3:11:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:56:24 2026 GMT
Not After : Jun 10 16:01:24 2027 GMT
Subject: CN=8D9BD8B60A4B752D732E19D6ACD9C4E20ACB3079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:47:4d:97:19:c4:b8:51:45:ad:29:13:c0:
12:88:bc:0d:df:bc:3c:f6:d7:a1:5b:89:10:97:ca:
26:c8:15:6a:52:93:2a:e1:8b:52:4d:a1:ad:f2:35:
96:dc:17:06:7e:0d:ec:d9:42:5c:61:cf:c9:e3:1b:
c5:d0:80:a5:69:45:19:8e:e2:d7:0a:90:b7:26:51:
f0:04:fc:e4:f7:bf:17:f9:a2:77:37:c0:fe:77:46:
63:d2:41:c8:2a:35:7b:00:e9:fc:47:5e:1c:81:67:
75:64:51:67:3d:96:77:b9:f7:22:3b:6a:26:90:bc:
cc:7b:f3:8d:75:da:db:40:a0:7c:c6:e8:da:9c:72:
14:92:8e:11:fd:ad:b7:a0:d0:23:5a:ef:3a:ab:fb:
fd:d9:e4:d3:f3:63:8c:31:46:7d:b9:4c:67:ec:42:
ac:2e:e2:61:0a:e5:24:49:65:d3:fa:b9:35:a0:fe:
da:27:cc:32:4d:bb:78:b7:9e:c6:d7:61:d1:da:43:
9e:85:49:07:71:f1:69:78:ce:65:e8:44:49:d1:47:
2f:79:3a:76:28:c0:16:e6:bb:b9:3d:0a:ea:9c:87:
6c:4c:d9:6a:bb:a1:c6:83:a9:69:3c:7c:cc:ae:05:
79:55:9f:c9:a2:81:89:4f:5f:09:42:d4:d9:44:d6:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:D8:B6:0A:4B:75:2D:73:2E:19:D6:AC:D9:C4:E2:0A:CB:30:79
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.128.0/22
Signature Algorithm: sha256WithRSAEncryption
81:e6:7f:55:fe:40:53:83:af:d3:19:1d:32:2e:b2:80:c4:47:
e7:3b:e3:11:b0:54:22:24:d8:26:f2:a4:9a:81:35:e1:3e:3e:
ec:58:05:ab:90:b7:87:2a:36:9b:c3:cd:6e:86:a9:bb:a1:da:
5c:f6:81:9a:9e:ba:9e:60:80:e2:05:92:fd:f9:33:fe:ff:b1:
ce:9a:ae:d9:fe:11:64:09:92:0a:f8:d0:ff:33:c2:0b:1b:6a:
85:97:04:cc:18:47:74:86:d9:ec:59:c1:7b:5c:e5:96:93:79:
de:68:7e:16:70:e7:61:64:69:fc:3b:8c:a0:92:4d:e4:4a:55:
58:32:19:ac:da:28:f0:52:fb:85:bd:7a:74:46:e6:10:47:77:
c3:e6:32:a0:35:83:10:f3:cc:a9:ef:25:a9:fa:af:00:cf:b4:
ab:56:04:42:da:7a:b3:a9:25:d2:f8:7f:35:92:a8:83:11:82:
3e:16:84:0f:83:6a:64:69:03:71:91:91:fb:e4:23:16:24:2a:
65:71:47:d0:b4:3d:5e:46:14:9d:3c:ed:50:4d:1f:49:89:39:
06:ba:1a:d8:1f:6f:5c:59:fd:19:de:71:3a:2a:2b:87:af:fc:
fd:9b:f4:32:52:89:8b:65:44:33:a8:5c:cc:a0:fc:b3:91:c7:
a9:ae:e6:49
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdTVXFAv2opYQous/0FH2P8MRnuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU2MjRaFw0yNzA2MTAxNjAxMjRaMDMxMTAvBgNV
BAMTKDhEOUJEOEI2MEE0Qjc1MkQ3MzJFMTlENkFDRDlDNEUyMEFDQjMwNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbUdNlxnEuFFFrSkTwBKIvA3f
vDz216FbiRCXyibIFWpSkyrhi1JNoa3yNZbcFwZ+DezZQlxhz8njG8XQgKVpRRmO
4tcKkLcmUfAE/OT3vxf5onc3wP53RmPSQcgqNXsA6fxHXhyBZ3VkUWc9lne59yI7
aiaQvMx784112ttAoHzG6NqcchSSjhH9rbeg0CNa7zqr+/3Z5NPzY4wxRn25TGfs
Qqwu4mEK5SRJZdP6uTWg/tonzDJNu3i3nsbXYdHaQ56FSQdx8Wl4zmXoREnRRy95
OnYowBbmu7k9Cuqch2xM2Wq7ocaDqWk8fMyuBXlVn8migYlPXwlC1NlE1lBhAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUjZvYtgpLdS1zLhnWrNnE4grLMHkwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKgDANBgkqhkiG9w0BAQsFAAOCAQEAgeZ/Vf5AU4Ov0xkdMi6ygMRH
5zvjEbBUIiTYJvKkmoE14T4+7FgFq5C3hyo2m8PNboapu6HaXPaBmp66nmCA4gWS
/fkz/v+xzpqu2f4RZAmSCvjQ/zPCCxtqhZcEzBhHdIbZ7FnBe1zllpN53mh+FnDn
YWRp/DuMoJJN5EpVWDIZrNoo8FL7hb16dEbmEEd3w+YyoDWDEPPMqe8lqfqvAM+0
q1YEQtp6s6kl0vh/NZKogxGCPhaED4NqZGkDcZGR++QjFiQqZXFH0LQ9XkYUnTzt
UE0fSYk5Broa2B9vXFn9Gd5xOiorh6/8/Zv0MlKJi2VEM6hczKD8s5HHqa7mSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:06:57 2026 by rpki-client