
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa
File: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=
Subject key identifier: B4:5D:5B:AB:75:00:0A:58:9A:A8:A9:DD:4A:F7:42:61:FC:B3:35:D6
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 68DC774C9D77A6F336903752AE131C06F01A4BF8
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa
Signing time: Sat 06 Jun 2026 14:52:51 +0000
ROA not before: Sat 06 Jun 2026 14:47:51 +0000
ROA not after: Sat 05 Jun 2027 14:52:51 +0000
asID: 63655
IP address blocks: 103.218.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:dc:77:4c:9d:77:a6:f3:36:90:37:52:ae:13:1c:06:f0:1a:4b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 14:47:51 2026 GMT
Not After : Jun 5 14:52:51 2027 GMT
Subject: CN=B45D5BAB75000A589AA8A9DD4AF74261FCB335D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:06:fe:e4:19:c0:be:44:0b:10:a6:56:51:
4c:24:33:ef:8f:23:77:ab:c8:d4:3e:58:a5:71:8e:
df:73:a2:77:f3:a6:6b:aa:66:ee:14:e4:d4:c9:95:
5f:23:7c:f6:4a:de:ce:88:1f:6c:1d:e7:85:2e:09:
e5:37:ae:0b:c7:62:40:94:a8:0e:17:26:58:77:e8:
1c:c9:1c:35:f8:66:64:1e:76:f0:9b:e4:07:08:6e:
3b:48:43:68:85:b4:aa:2f:44:12:4d:60:1b:a5:79:
78:a5:66:75:37:35:71:2b:58:fa:d8:7d:d3:c9:87:
45:ad:14:f1:ed:02:bc:11:28:54:dd:8d:e5:0f:18:
62:29:fe:07:91:95:17:12:89:71:c6:79:d8:14:e0:
b3:80:65:65:54:25:7c:90:ac:ba:7d:bc:cb:9c:dd:
f6:cd:b9:9a:6c:0b:ab:d7:5e:a7:92:d6:cc:69:d1:
e7:9e:a0:b7:1e:14:3f:c6:18:5a:3e:7c:4c:81:c8:
72:ff:fe:85:86:f8:70:35:3e:ae:3f:7c:42:a1:ef:
03:48:c5:d0:67:e8:5d:99:89:fd:c6:cd:60:61:a3:
0d:ec:ad:38:6f:ba:22:d6:76:39:4f:25:97:b2:14:
be:34:83:b3:89:03:30:d7:97:54:94:75:4a:e7:f7:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5D:5B:AB:75:00:0A:58:9A:A8:A9:DD:4A:F7:42:61:FC:B3:35:D6
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.218.217.0/24
Signature Algorithm: sha256WithRSAEncryption
25:24:ac:9b:0c:3d:26:f2:5a:52:79:99:32:c2:c4:2d:92:48:
5f:7a:a1:39:e2:03:b1:60:78:4a:72:7a:9c:58:54:41:09:7a:
09:3e:e0:36:48:e1:56:84:55:ad:90:58:38:5a:b2:b5:b6:09:
6a:6a:d3:59:9e:14:8c:d3:94:86:5e:c6:3f:84:61:79:c9:33:
b9:3e:69:2b:a7:ca:1f:4e:f2:98:8d:34:28:eb:c5:96:86:08:
54:28:78:f9:ab:52:56:cd:cc:9f:c9:1c:66:2c:62:20:91:8c:
90:49:92:75:58:41:cd:cc:b5:d7:9d:9c:7e:6a:91:db:1e:4a:
c3:b7:50:2a:46:e7:32:e4:65:07:ed:6f:2e:81:43:44:fc:c4:
d4:60:95:a6:4a:b8:fc:f1:fe:62:6b:53:37:2f:07:b8:0f:8d:
1c:6c:3c:3f:a1:55:36:b8:df:ae:4c:31:0d:a9:41:2f:f7:34:
ba:20:34:2a:82:67:93:39:09:80:21:00:96:08:7c:8c:80:d2:
86:69:2d:29:3b:19:67:63:08:74:f8:81:76:ef:7c:57:3d:6f:
ca:76:e4:0f:ff:df:8b:7e:3d:36:9a:02:0e:e7:fa:6f:50:df:
7e:1d:35:fc:1e:46:cf:50:e4:4b:6c:70:14:17:2c:67:ca:37:
79:c6:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:48 2026 by rpki-client