
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa
File: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=
Subject key identifier: 64:2E:DC:E0:30:2C:38:5D:A4:26:B3:2B:22:9E:9B:48:1B:F4:2A:31
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 272D903C9D46CAA2F5A550176AB188AAF1EDA9C9
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa
Signing time: Sat 06 Jun 2026 14:52:51 +0000
ROA not before: Sat 06 Jun 2026 14:47:51 +0000
ROA not after: Sat 05 Jun 2027 14:52:51 +0000
asID: 134543
IP address blocks: 103.218.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2d:90:3c:9d:46:ca:a2:f5:a5:50:17:6a:b1:88:aa:f1:ed:a9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 14:47:51 2026 GMT
Not After : Jun 5 14:52:51 2027 GMT
Subject: CN=642EDCE0302C385DA426B32B229E9B481BF42A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:64:06:09:55:db:43:2d:d7:3a:a6:a2:21:
81:90:f0:5d:bc:cf:3b:ee:f3:8a:35:14:6f:a0:03:
dd:85:f5:6c:c5:51:df:cc:98:d1:53:44:96:20:dc:
43:67:db:e0:8f:a8:2d:16:04:dc:df:a7:ce:0c:25:
3d:b5:80:11:f0:6b:d5:7b:d8:24:a0:a0:62:d7:f1:
13:7a:90:c7:de:cb:bf:fd:78:11:4f:a5:c2:b3:3b:
44:ac:91:e9:18:2d:52:ac:47:56:ca:af:e7:05:a8:
85:3b:2d:f2:26:43:db:fe:de:d2:b8:9c:6b:30:91:
46:83:60:ca:cc:5a:a8:0e:49:3c:08:54:77:ba:ab:
97:a1:c7:0e:4f:15:36:40:60:e6:e9:73:81:19:10:
45:60:51:c9:ff:e9:2e:7e:a1:a2:0a:02:41:0f:50:
ac:b0:3e:6e:b2:64:62:0c:8c:62:6c:cb:83:5f:f7:
73:5a:77:b7:68:34:90:ed:8d:55:d8:7d:ed:40:0d:
5a:32:59:27:f7:a9:88:38:7c:25:ff:8e:0b:31:94:
7c:e7:00:1a:7f:02:e8:f0:20:2f:e3:98:fd:00:61:
cb:e8:7a:18:e9:b0:e4:8f:fd:97:f5:2f:12:bf:66:
7c:f5:fd:40:60:d9:2c:9e:fc:2f:41:7e:4d:f7:67:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:DC:E0:30:2C:38:5D:A4:26:B3:2B:22:9E:9B:48:1B:F4:2A:31
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.218.219.0/24
Signature Algorithm: sha256WithRSAEncryption
74:91:8e:b2:04:2d:84:a1:36:6b:e1:d1:b5:1f:dc:d6:a3:49:
0a:bd:fe:3c:05:ae:aa:71:b4:57:38:4a:7e:f3:20:cb:7b:43:
33:e0:c9:eb:39:0d:a6:6e:d7:4b:5e:de:0c:c9:a2:b3:67:15:
0d:f2:c4:9c:bc:ff:fc:0e:ba:13:5c:7c:b5:b2:30:d5:bc:60:
90:3a:45:75:77:95:31:0d:16:09:a9:4e:59:b2:05:f7:18:2a:
3f:de:a4:bb:ae:98:3e:20:05:68:bd:a3:31:0b:da:7c:12:a9:
29:0f:44:cf:2e:35:d6:32:88:c6:5c:f1:8c:6d:59:51:84:6f:
99:76:b7:f2:a5:e6:19:8f:4b:58:04:da:5f:f6:1d:29:8d:36:
a7:2a:dc:0e:68:3d:bb:ed:df:31:a5:51:50:c0:84:41:0f:09:
05:6c:11:8e:d6:9c:aa:6f:c4:31:f4:40:c7:29:0a:8c:89:49:
4c:34:6c:42:bd:05:74:04:08:21:32:e1:7a:8a:f1:7b:fc:74:
ec:b4:e2:84:bf:61:de:43:24:3f:61:53:93:7c:7a:43:62:01:
60:6f:d6:db:72:f4:ca:8f:6a:a8:57:47:93:e3:ce:87:f6:5f:
e8:b5:55:7b:e5:dd:4e:eb:22:1b:62:f6:73:be:ac:d6:25:9e:
0d:18:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:07:31 2026 by rpki-client