
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa
File: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=
Subject key identifier: DC:A5:D8:32:99:90:B1:12:45:5A:95:79:08:63:46:AA:95:90:C2:80
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 543FFE62056C8F29A075FFD44F242FFE72D670D3
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa
Signing time: Sat 06 Jun 2026 14:52:51 +0000
ROA not before: Sat 06 Jun 2026 14:47:51 +0000
ROA not after: Sat 05 Jun 2027 14:52:51 +0000
asID: 134543
IP address blocks: 103.218.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:3f:fe:62:05:6c:8f:29:a0:75:ff:d4:4f:24:2f:fe:72:d6:70:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 14:47:51 2026 GMT
Not After : Jun 5 14:52:51 2027 GMT
Subject: CN=DCA5D8329990B112455A9579086346AA9590C280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:36:16:e6:70:a6:a0:c8:b3:c7:47:ad:e5:
6f:be:ea:2a:9d:cf:2d:4b:ba:26:ed:50:3f:58:47:
eb:d1:66:b2:e1:e2:24:ad:1e:7d:98:74:12:19:0c:
42:8c:23:4a:48:90:de:f4:f2:cc:84:80:92:45:d9:
b9:73:31:e8:52:56:a0:dd:5b:31:d5:88:36:c8:cf:
91:01:20:fb:03:7a:57:20:6c:62:4c:dd:81:17:4c:
3f:2f:a3:a9:ac:6b:98:b5:7e:dd:7a:ea:b2:85:bd:
e0:86:ba:87:d1:0c:3f:ff:d8:ac:f8:ea:a8:5b:d5:
df:a2:04:59:9e:79:c3:ba:4d:31:5f:6d:55:99:4c:
94:24:02:a4:16:67:80:2c:c9:4b:27:72:20:4a:9f:
c5:82:05:e5:0a:8b:6d:59:bd:a3:44:62:0a:d4:6c:
5c:3d:a8:39:e3:7d:0c:04:85:3a:00:a2:4a:9d:32:
45:e6:06:dd:ad:8b:8f:fa:08:c3:c8:10:e2:2b:18:
e5:32:c8:de:31:53:8c:9b:2e:be:9e:3e:51:db:34:
dc:79:91:86:f0:08:82:9c:aa:ae:a6:d9:47:e1:0d:
ec:12:a1:2a:7f:83:2c:f8:30:35:a0:0e:cd:12:ad:
20:39:e7:f4:fb:c9:cc:dc:39:c9:c4:08:b4:12:ee:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:D8:32:99:90:B1:12:45:5A:95:79:08:63:46:AA:95:90:C2:80
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.218.217.0/24
Signature Algorithm: sha256WithRSAEncryption
25:52:8d:d9:d4:c0:7a:4e:80:0c:6b:f0:ae:28:a8:c7:45:e2:
4d:4c:fb:c6:4e:83:9f:bd:64:5c:7e:00:07:21:13:c8:35:e1:
94:ea:e0:87:eb:e2:c1:ad:d8:7f:75:0d:5f:38:a4:c4:4b:b1:
de:3b:c7:98:88:7e:8b:19:23:42:54:cb:ac:79:f9:57:27:38:
9c:5a:53:31:ad:b2:25:b1:5d:c1:1d:b7:d0:67:c5:6c:b8:5c:
80:1c:ba:36:0e:b5:8d:55:45:5b:5b:81:fb:61:79:d0:26:fd:
17:b6:0b:8f:0f:a2:c1:03:fc:20:30:8d:cc:e8:7e:4f:96:dc:
0f:13:57:ce:49:fa:74:67:ef:2b:21:77:c6:61:e8:03:89:f5:
b3:0d:76:39:25:7a:ee:76:5e:0e:af:82:02:ad:94:4b:03:cd:
1f:b7:c4:29:dc:eb:63:07:8e:24:c1:90:50:fe:a6:c2:65:88:
66:81:0a:68:64:1e:79:69:e6:ac:09:df:fc:82:9b:70:f7:62:
59:e6:bb:82:7e:ad:e1:6c:9b:54:85:eb:e6:1b:af:0d:4a:1e:
67:29:f9:23:7b:15:0a:8c:71:e2:18:dd:87:69:89:c2:12:52:
24:c7:a5:35:04:ac:31:5b:1a:a8:b4:0f:78:a3:06:df:87:6a:
19:a7:e8:18
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUVD/+YgVsjymgdf/UTyQv/nLWcNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2
NDU5RjlGNjAeFw0yNjA2MDYxNDQ3NTFaFw0yNzA2MDUxNDUyNTFaMDMxMTAvBgNV
BAMTKERDQTVEODMyOTk5MEIxMTI0NTVBOTU3OTA4NjM0NkFBOTU5MEMyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoDYW5nCmoMizx0et5W++6iqd
zy1LuibtUD9YR+vRZrLh4iStHn2YdBIZDEKMI0pIkN708syEgJJF2blzMehSVqDd
WzHViDbIz5EBIPsDelcgbGJM3YEXTD8vo6msa5i1ft166rKFveCGuofRDD//2Kz4
6qhb1d+iBFmeecO6TTFfbVWZTJQkAqQWZ4AsyUsnciBKn8WCBeUKi21ZvaNEYgrU
bFw9qDnjfQwEhToAokqdMkXmBt2ti4/6CMPIEOIrGOUyyN4xU4ybLr6ePlHbNNx5
kYbwCIKcqq6m2UfhDewSoSp/gyz4MDWgDs0SrSA55/T7yczcOcnECLQS7lQ/AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU3KXYMpmQsRJFWpV5CGNGqpWQwoAwHwYDVR0j
BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy
NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTE0MTEzMDQ5OTYwMTIwMzM5LzAvMzEzMDMzMmUz
MjMxMzgyZTMyMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfa2TANBgkqhkiG9w0BAQsFAAOCAQEAJVKN2dTAek6ADGvw
riiox0XiTUz7xk6Dn71kXH4AByETyDXhlOrgh+viwa3Yf3UNXzikxEux3jvHmIh+
ixkjQlTLrHn5Vyc4nFpTMa2yJbFdwR230GfFbLhcgBy6Ng61jVVFW1uB+2F50Cb9
F7YLjw+iwQP8IDCNzOh+T5bcDxNXzkn6dGfvKyF3xmHoA4n1sw12OSV67nZeDq+C
Aq2USwPNH7fEKdzrYweOJMGQUP6mwmWIZoEKaGQeeWnmrAnf/IKbcPdiWea7gn6t
4WybVIXr5huvDUoeZyn5I3sVCoxx4hjdh2mJwhJSJMelNQSsMVsaqLQPeKMG34dq
GafoGA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:01:00 2026 by rpki-client