
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3230352e3138382e302f32322d3234203d3e2034383038.roa
File: 3130332e3230352e3138382e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier: hl83SrS6WtloL5ezM1msuVuhsOXd+x9CR4V5Bf9zV5k=
Subject key identifier: EB:90:2E:A0:A5:65:DD:E2:FF:DD:5E:26:40:DA:01:09:2C:71:39:12
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 1AE8F5597D2B77E0708FC5D7B878463156E5CA10
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3230352e3138382e302f32322d3234203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 08:41:48 +0000
ROA not before: Thu 04 Jun 2026 08:36:48 +0000
ROA not after: Thu 03 Jun 2027 08:41:48 +0000
asID: 4808
IP address blocks: 103.205.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e8:f5:59:7d:2b:77:e0:70:8f:c5:d7:b8:78:46:31:56:e5:ca:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:36:48 2026 GMT
Not After : Jun 3 08:41:48 2027 GMT
Subject: CN=EB902EA0A565DDE2FFDD5E2640DA01092C713912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:4b:9b:a7:0f:f3:42:42:92:9a:12:d2:ab:
01:96:58:d4:cc:e8:ee:f1:e2:84:fa:23:ec:bc:42:
ad:62:23:f0:58:20:c8:89:6e:f7:d9:76:42:3f:d2:
64:b1:cc:d6:bc:b0:89:3d:d7:39:42:4f:07:41:99:
a6:ad:bb:26:70:55:0b:f7:24:33:b5:c6:de:6d:94:
1d:06:7c:7a:90:fa:c3:04:91:74:d1:70:44:41:5f:
f4:d6:e7:2f:21:39:bb:4e:37:c9:fa:a8:57:21:05:
be:a6:25:06:08:2e:a8:5c:88:82:87:b7:24:79:9c:
17:35:6d:0e:d8:bb:68:77:82:04:06:8a:61:67:5d:
2e:63:f7:5d:73:76:b2:b0:ff:71:0f:f9:a5:7a:10:
34:5c:66:49:5b:9c:5d:54:19:98:25:a2:8c:7b:bb:
6d:99:b1:73:ec:dd:c7:bd:cd:24:6e:0d:41:49:a5:
e6:f6:12:f9:a1:47:75:99:9f:b0:1d:9e:91:06:6c:
4f:08:28:85:82:0e:82:f7:c8:23:75:d4:c3:eb:bf:
6b:77:17:64:99:27:3e:86:17:84:dd:40:d1:c3:a5:
9e:b4:87:10:49:69:40:c9:2d:78:81:38:71:01:6f:
ba:fe:6a:4e:71:e7:3c:33:23:a5:2a:40:96:75:fd:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:2E:A0:A5:65:DD:E2:FF:DD:5E:26:40:DA:01:09:2C:71:39:12
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3230352e3138382e302f32322d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.205.188.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f1:7f:6d:20:ad:20:f7:79:f0:bf:de:f8:28:71:a6:fe:2d:
8f:ad:49:b2:dc:a8:f0:5f:97:1d:bb:3c:fc:d6:b6:7b:18:bf:
a3:46:d8:66:1a:35:ce:e9:ec:f8:20:40:79:13:67:99:bb:22:
ba:f7:ba:e3:1e:a2:66:9b:93:d8:dd:03:c3:f5:4c:04:50:8b:
4f:6f:56:26:68:72:25:8f:47:4c:58:e1:eb:41:6f:19:3b:d9:
7c:ed:b5:e7:9b:41:f2:57:d8:75:99:44:25:cd:fe:06:13:b9:
e6:b9:a3:99:46:81:cc:0a:ed:f7:76:01:a6:bc:19:9c:27:5a:
1b:7c:09:2a:d6:aa:47:8f:97:e3:20:79:e7:9d:8f:cf:1d:0b:
a0:e6:60:95:04:2e:e6:f6:8f:47:d4:da:cd:af:dd:07:ba:33:
0e:8b:22:ca:5a:31:b5:39:ba:7e:e4:e4:99:e2:72:cf:94:74:
7d:fd:2a:6a:53:42:85:5e:5c:93:09:21:ec:7a:64:89:29:48:
1c:57:c8:a2:4b:51:87:5d:55:c3:46:fa:98:3d:97:eb:3c:10:
af:27:47:35:e9:1b:78:40:73:c0:dd:4f:25:a0:5f:77:0d:f4:
ce:ba:4e:d9:d0:cc:ec:d9:e5:60:a7:f4:c2:81:7b:b7:ab:cf:
fe:e0:99:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:06:56 2026 by rpki-client