
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: oMqBqSp12AUyZpyt7hIYyu2EP5RgdeJou+3zv+A2bMA=
Subject key identifier: 4A:E3:2F:49:91:8E:15:9B:61:94:B5:AA:5B:E1:16:81:E5:5B:6E:1C
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 22122171C46B54A3FED87DE55FCAC37092F9C628
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa
Signing time: Thu 11 Jun 2026 16:02:10 +0000
ROA not before: Thu 11 Jun 2026 15:57:10 +0000
ROA not after: Thu 10 Jun 2027 16:02:10 +0000
asID: 4811
IP address blocks: 103.202.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:12:21:71:c4:6b:54:a3:fe:d8:7d:e5:5f:ca:c3:70:92:f9:c6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:57:10 2026 GMT
Not After : Jun 10 16:02:10 2027 GMT
Subject: CN=4AE32F49918E159B6194B5AA5BE11681E55B6E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:ed:de:bf:e4:94:74:b7:d5:34:ff:44:6a:
16:72:b3:ea:b5:03:25:5d:08:73:74:9a:ea:48:bd:
96:38:54:da:2c:32:a6:85:82:1b:13:13:71:51:47:
0f:2a:60:e0:15:69:87:c2:9e:68:64:27:06:6c:46:
b9:de:fe:df:63:8c:94:88:ba:e3:88:91:25:f0:55:
5a:a3:4b:1e:e7:b0:a4:bb:56:2c:19:99:6d:3b:04:
3d:54:fc:f8:44:0a:9a:68:b6:b3:6a:a9:a4:10:37:
54:ef:b9:36:3f:b1:07:c7:16:39:60:96:d5:ca:f1:
f5:50:30:19:de:28:02:b9:03:89:ae:f9:fd:c5:a9:
99:d6:48:2c:38:95:7c:55:a1:dc:1b:28:f6:0c:ed:
24:ec:b4:cf:b3:f7:a8:e4:c9:76:18:30:b6:68:bf:
10:c0:60:19:24:06:64:a9:2e:47:95:8d:2a:6f:be:
2a:13:52:f1:6d:62:01:73:ec:3e:61:09:0b:7c:72:
22:e7:01:e0:ea:77:56:f7:47:1a:6d:1e:aa:0e:7f:
6e:92:e2:68:c9:02:c5:ea:8b:f4:cd:a0:06:2f:fa:
fa:48:cf:2a:f7:f7:53:b7:78:e3:b8:14:1f:65:86:
e2:c5:46:a9:e7:f6:f7:38:08:4d:04:40:f6:4d:a7:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E3:2F:49:91:8E:15:9B:61:94:B5:AA:5B:E1:16:81:E5:5B:6E:1C
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.136.0/22
Signature Algorithm: sha256WithRSAEncryption
78:70:dc:ff:12:68:8d:50:63:0f:6e:72:97:3f:7c:6f:a2:65:
e6:a5:4f:6e:8b:33:5f:33:08:ba:23:a2:6c:8c:db:c6:6a:5c:
c2:4b:73:06:d3:98:2d:94:2c:c7:ab:15:8e:e3:7c:fe:33:56:
23:07:c8:cf:cd:a5:93:11:da:f6:d3:85:f4:1c:9f:19:d4:09:
63:1d:9a:4b:2a:48:b0:54:15:e5:f5:9b:7f:5e:8e:b3:88:d8:
1f:fc:2e:d9:4b:62:97:5b:0e:47:a3:0f:44:ef:36:41:ba:47:
e8:94:5f:7f:23:5c:45:dd:ea:35:31:cc:dc:37:de:5b:ae:63:
52:a6:e8:ea:c2:dc:c0:f4:d4:74:f3:cb:26:40:e1:81:e7:70:
d2:91:85:2a:9b:ad:19:ee:5d:a1:64:a0:1f:42:a1:1e:b6:1a:
9c:79:5a:59:f3:d3:51:22:80:f7:58:26:3d:8d:34:9a:1c:f4:
d3:74:d4:12:26:80:26:85:6e:12:09:6d:f2:b8:ef:ac:b4:99:
b7:47:fc:ef:4e:13:26:8b:a6:90:fa:52:88:18:1c:e2:6f:10:
af:77:26:1b:ea:df:33:22:2d:2f:1f:7b:03:46:35:90:b2:7e:
26:23:8e:02:25:80:be:37:fc:bc:26:bb:d0:ef:1c:e0:96:70:
5f:b2:ec:39
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUIhIhccRrVKP+2H3lX8rDcJL5xigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU3MTBaFw0yNzA2MTAxNjAyMTBaMDMxMTAvBgNV
BAMTKDRBRTMyRjQ5OTE4RTE1OUI2MTk0QjVBQTVCRTExNjgxRTU1QjZFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxe3ev+SUdLfVNP9EahZys+q1
AyVdCHN0mupIvZY4VNosMqaFghsTE3FRRw8qYOAVaYfCnmhkJwZsRrne/t9jjJSI
uuOIkSXwVVqjSx7nsKS7ViwZmW07BD1U/PhECppotrNqqaQQN1TvuTY/sQfHFjlg
ltXK8fVQMBneKAK5A4mu+f3FqZnWSCw4lXxVodwbKPYM7STstM+z96jkyXYYMLZo
vxDAYBkkBmSpLkeVjSpvvioTUvFtYgFz7D5hCQt8ciLnAeDqd1b3RxptHqoOf26S
4mjJAsXqi/TNoAYv+vpIzyr391O3eOO4FB9lhuLFRqnn9vc4CE0EQPZNp0hJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUSuMvSZGOFZthlLWqW+EWgeVbbhwwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKiDANBgkqhkiG9w0BAQsFAAOCAQEAeHDc/xJojVBjD25ylz98b6Jl
5qVPboszXzMIuiOibIzbxmpcwktzBtOYLZQsx6sVjuN8/jNWIwfIz82lkxHa9tOF
9ByfGdQJYx2aSypIsFQV5fWbf16Os4jYH/wu2Util1sOR6MPRO82QbpH6JRffyNc
Rd3qNTHM3DfeW65jUqbo6sLcwPTUdPPLJkDhgedw0pGFKputGe5doWSgH0KhHrYa
nHlaWfPTUSKA91gmPY00mhz003TUEiaAJoVuEglt8rjvrLSZt0f8704TJoumkPpS
iBgc4m8Qr3cmG+rfMyItLx97A0Y1kLJ+JiOOAiWAvjf8vCa70O8c4JZwX7LsOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:03 2026 by rpki-client