
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa
File: 3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier: spIhrQXlTvgUztHhO8J58xUakXuZm6kbx1yUF4zjdR0=
Subject key identifier: 46:D7:A6:D0:6F:01:97:1D:9B:0C:9F:B7:E5:DD:41:37:A6:E4:3C:53
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 1365BDFE5BE6C7A051BCE6F8D35719363F2A77A9
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa
Signing time: Thu 11 Jun 2026 16:01:51 +0000
ROA not before: Thu 11 Jun 2026 15:56:51 +0000
ROA not after: Thu 10 Jun 2027 16:01:51 +0000
asID: 63619
IP address blocks: 103.202.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:65:bd:fe:5b:e6:c7:a0:51:bc:e6:f8:d3:57:19:36:3f:2a:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:56:51 2026 GMT
Not After : Jun 10 16:01:51 2027 GMT
Subject: CN=46D7A6D06F01971D9B0C9FB7E5DD4137A6E43C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:c0:8a:a4:18:e1:14:25:15:14:19:0b:e0:
2c:1d:b0:6c:ae:93:12:14:7c:11:e0:6b:a4:d7:51:
6d:80:d9:f8:89:e6:53:83:aa:12:44:a0:77:e7:74:
62:24:13:28:44:c0:ef:e5:5f:84:fc:05:2c:fb:e0:
0b:da:af:7e:be:d2:fa:ee:b4:fa:4a:48:2d:8e:87:
97:61:00:ed:a4:23:39:c8:d8:39:de:6b:dc:85:da:
54:41:73:32:42:2d:56:05:16:78:dd:26:61:ad:3d:
21:0f:22:5e:16:f4:9d:7b:f4:84:25:22:35:9a:a4:
ba:c9:48:e1:df:db:26:b0:1b:46:0d:a7:c7:bc:12:
01:ae:a8:22:1c:43:fc:2b:6a:61:e0:f0:b5:32:d5:
d7:f2:7e:f6:22:c2:79:4b:2c:8e:6a:7e:fa:df:f2:
1b:ce:42:53:10:46:94:ab:95:4b:2c:71:3b:89:50:
30:4f:97:14:92:e3:a3:69:32:7d:c4:ef:3a:61:f0:
0a:a6:c8:51:7b:53:ee:8c:c3:e7:a5:7b:7c:1e:78:
1c:04:23:9c:26:51:c9:a8:f7:d9:5f:2f:df:11:f9:
08:6f:e3:74:e8:db:ac:c9:0c:03:df:15:69:bf:a2:
6b:7b:d4:84:15:04:d5:dd:bd:87:8e:a0:56:a6:7a:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:A6:D0:6F:01:97:1D:9B:0C:9F:B7:E5:DD:41:37:A6:E4:3C:53
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:fb:66:56:75:73:ed:32:4e:18:b0:20:1a:30:68:7d:25:de:
9d:fd:4a:2b:13:4a:b3:f5:e0:db:48:44:5e:87:31:23:46:bf:
80:3e:97:9a:0c:95:5f:c9:51:f1:5f:42:cc:8a:2e:e6:53:70:
56:b1:97:2c:b2:ec:f6:a4:57:b2:19:9c:9a:b4:1b:70:88:31:
d8:6c:7b:e9:c8:e0:be:64:50:d3:e0:11:c4:63:ce:e9:b4:1b:
02:bd:4c:d3:5a:d7:c2:d1:67:f7:1e:bc:68:1c:16:66:9f:75:
99:af:4d:72:1b:a5:49:67:ea:2e:6d:a7:87:3d:35:f4:ec:1e:
21:79:ee:5e:a8:53:9b:a0:d6:e1:51:e4:80:be:12:4c:c9:93:
b6:85:d8:14:55:4b:b8:65:54:c1:89:a2:f5:20:c9:9f:fb:2d:
f5:59:bd:a1:98:d5:43:1a:cb:9d:75:9b:9b:53:35:01:ea:0a:
a4:ee:40:f0:74:14:57:ca:3b:23:8b:f5:c1:c5:bc:c0:f3:e4:
29:56:98:77:86:da:7c:0b:6e:8d:fe:c2:16:2c:93:79:78:26:
59:02:00:7e:31:12:f9:df:5e:74:9c:2e:dd:3a:32:2d:75:d7:
70:a7:c9:0d:a1:f6:fc:58:fd:2c:11:77:35:72:aa:04:c6:9e:
06:e2:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:04 2026 by rpki-client