
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa
File: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (raw, json)
Hash identifier: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=
Subject key identifier: DE:5C:C8:64:8A:64:4A:12:75:2D:37:BD:4D:B7:94:FC:FE:BC:B5:4F
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 5DD88E2738DCC25039625342FBA5FBA65270696E
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa
Signing time: Sat 06 Jun 2026 14:52:51 +0000
ROA not before: Sat 06 Jun 2026 14:47:51 +0000
ROA not after: Sat 05 Jun 2027 14:52:51 +0000
asID: 134543
IP address blocks: 103.218.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d8:8e:27:38:dc:c2:50:39:62:53:42:fb:a5:fb:a6:52:70:69:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 14:47:51 2026 GMT
Not After : Jun 5 14:52:51 2027 GMT
Subject: CN=DE5CC8648A644A12752D37BD4DB794FCFEBCB54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:e5:96:ea:cd:8f:47:a8:d0:cd:f1:d1:b8:
2b:e6:f0:df:ae:05:c6:79:f0:c2:52:68:1e:b9:30:
77:81:b6:3b:f2:e4:38:6f:2a:67:b8:07:5b:29:36:
d5:7c:7d:7e:42:52:0d:0a:af:b6:ce:cd:08:74:fb:
02:cf:32:9c:d0:d9:da:ca:c8:6c:29:66:ab:9d:dc:
9a:47:08:4a:5f:98:cb:07:73:cb:2c:97:e4:64:5b:
6d:14:b5:d1:55:b8:90:6f:68:3c:6b:66:6a:1f:3d:
e7:66:6c:3d:18:f2:d3:0e:40:1e:3b:ae:80:d9:9e:
1e:8d:92:2b:37:00:fd:3b:16:bb:9a:36:46:7d:01:
ea:6e:79:ab:7c:ba:3d:50:ed:1d:59:ae:40:3e:22:
78:31:63:51:a6:aa:91:10:0a:4c:f3:93:8a:4c:ed:
c7:62:92:fe:29:99:36:72:fe:02:16:d2:b8:c2:4a:
64:6f:c7:bf:d5:1a:6b:ca:46:c5:d8:b7:60:a2:36:
07:eb:e3:54:d3:a6:a8:21:3b:de:8e:a8:ad:e4:b0:
56:7c:5c:3e:dc:3c:a5:26:94:0c:e3:bc:16:61:bb:
94:67:04:d4:ad:e1:b6:9e:e5:07:d6:e1:58:ea:8f:
78:6e:27:64:24:f7:04:38:91:22:c2:c9:98:fd:10:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:C8:64:8A:64:4A:12:75:2D:37:BD:4D:B7:94:FC:FE:BC:B5:4F
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:cd:d1:8f:12:04:76:f9:20:39:0b:8d:ae:71:97:65:c1:1b:
8c:d6:fc:1a:8b:16:6e:31:1c:d5:5f:46:05:05:bd:ad:a2:94:
f8:a0:23:03:74:8a:d9:4b:cd:6a:80:f1:b8:43:c4:e5:e7:cc:
98:25:27:f4:2a:d0:b4:b9:c1:26:23:1d:e7:af:f1:ca:46:ca:
6a:61:67:eb:1c:f0:a3:28:10:71:b5:cf:5c:2a:39:fb:de:aa:
26:a9:bc:20:fc:f2:80:08:51:6a:16:f5:7b:2a:73:34:70:70:
3c:ee:e2:2c:e0:78:36:b2:e3:eb:98:69:31:6a:34:8a:42:ad:
38:24:cb:36:b4:22:11:23:26:d6:78:36:22:42:36:c5:97:47:
75:2d:42:73:25:cd:8e:3b:0b:f4:76:94:84:24:53:cb:ba:ef:
8a:8f:ad:14:39:5d:c7:f7:3c:85:f6:72:8f:c7:b5:9e:5f:d1:
24:e6:e7:26:b8:0a:d2:0f:3d:77:79:c1:84:4f:24:ad:dd:1e:
21:dd:78:4f:77:24:f0:8e:da:ba:ef:1b:77:01:0b:68:c4:b7:
e0:23:70:c6:fa:00:c5:9e:3f:c4:74:1c:48:f1:3d:ce:b6:23:
c7:70:c8:98:d7:de:c9:9a:4e:a2:f4:bd:6e:c6:9a:54:e1:af:
1a:a9:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:06:32 2026 by rpki-client