
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa
File: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=
Subject key identifier: EB:15:C2:D7:EC:E8:F8:C2:6A:75:67:F0:67:39:9C:EA:1C:56:E7:7B
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 59F4BDA4492EAD32BCCC041795D6D01E1A9C6D81
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa
Signing time: Sat 06 Jun 2026 14:52:51 +0000
ROA not before: Sat 06 Jun 2026 14:47:51 +0000
ROA not after: Sat 05 Jun 2027 14:52:51 +0000
asID: 134543
IP address blocks: 103.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f4:bd:a4:49:2e:ad:32:bc:cc:04:17:95:d6:d0:1e:1a:9c:6d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 14:47:51 2026 GMT
Not After : Jun 5 14:52:51 2027 GMT
Subject: CN=EB15C2D7ECE8F8C26A7567F067399CEA1C56E77B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:42:fa:7c:d6:19:33:cb:85:09:51:36:d4:
94:83:e2:9a:6a:c1:41:35:6e:54:22:1a:6f:e0:eb:
90:89:4d:73:b6:26:cd:b2:c3:51:e9:59:ba:30:02:
28:ef:ea:df:ef:4f:4c:71:e9:ce:14:2e:64:49:f8:
81:6b:e7:66:40:2c:27:ac:14:6c:77:3d:38:1f:51:
ac:94:63:cb:ac:2e:3b:24:44:09:04:f0:63:e0:d2:
16:24:cc:05:4c:69:9b:84:9b:4c:2d:38:43:17:cc:
db:af:a5:61:e5:4c:f8:56:c8:13:51:ae:67:ca:5b:
9b:06:86:f5:15:3a:c1:a5:6d:12:08:21:b2:11:5e:
7c:5d:22:08:84:e7:2e:29:08:54:a5:9d:d3:48:91:
cb:53:28:70:e3:8b:a0:28:b1:8b:b6:dc:5d:ac:37:
25:32:c3:78:a0:55:0d:65:73:0f:63:ec:ff:a1:52:
6e:58:d1:37:28:ac:85:da:f8:62:87:c8:d7:53:e3:
27:a5:93:33:bd:ab:56:58:fa:90:df:a5:ee:00:93:
c7:1c:d4:04:b8:01:23:67:d0:85:b6:b7:73:4c:f2:
15:25:1b:8d:35:88:78:d4:c9:69:12:f9:3c:46:99:
b5:74:be:14:2d:83:97:c0:af:5c:01:1d:63:0a:ff:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:C2:D7:EC:E8:F8:C2:6A:75:67:F0:67:39:9C:EA:1C:56:E7:7B
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
56:00:3b:be:a4:10:15:89:07:f6:66:5e:16:e1:66:10:36:10:
f9:c7:d3:68:18:64:45:48:69:7f:1a:88:a3:8f:53:f9:7c:a1:
6c:44:08:85:db:98:e3:3d:17:ff:9e:54:6e:1d:f8:dc:14:fc:
b7:12:21:7b:30:1d:d2:e3:1b:8a:8c:7c:af:f4:9f:16:fa:8c:
32:45:bf:ca:73:37:b8:77:ca:f7:4d:83:47:a6:62:5b:b1:32:
2c:2c:9f:5f:d2:22:e9:7c:91:c2:c8:34:55:aa:76:67:27:e1:
ee:ad:e2:79:48:0c:9e:8a:ff:7a:48:7e:7f:e0:c0:f1:1a:8f:
a7:6d:ac:55:90:52:5d:52:9f:ff:8a:c9:da:18:58:6c:e1:25:
48:79:81:3e:51:ec:0e:06:54:0a:18:bf:1d:03:42:c1:d3:c2:
86:d0:de:d4:5a:d7:01:63:08:d8:c7:37:8b:36:bb:81:90:82:
45:c9:98:0e:d1:65:c9:df:47:6c:bb:08:99:7a:cd:8b:93:b5:
0d:49:06:e0:d7:19:72:3d:8a:ba:6d:b4:1e:83:c1:b4:57:61:
37:a9:ee:46:b6:6d:4e:56:6e:28:10:d1:6a:e9:df:b3:3d:23:
9b:cf:00:51:b4:3e:33:16:9e:66:15:89:13:7b:73:e6:aa:86:
e2:6d:54:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:47:59 2026 by rpki-client