
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/3130332e34332e3130302e302f32322d3232203d3e2030.roa
File: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=
Subject key identifier: F3:3F:D6:63:B8:EA:B3:32:A8:39:BF:8F:69:19:9D:6B:F3:2F:82:F6
Certificate issuer: /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
Certificate serial: 3BF99A2BAE08872CBF3C1BFA2E5D0CDAC062190A
Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/3130332e34332e3130302e302f32322d3232203d3e2030.roa
Signing time: Thu 04 Jun 2026 10:19:36 +0000
ROA not before: Thu 04 Jun 2026 10:14:36 +0000
ROA not after: Thu 03 Jun 2027 10:19:36 +0000
asID: 0
IP address blocks: 103.43.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl
rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f9:9a:2b:ae:08:87:2c:bf:3c:1b:fa:2e:5d:0c:da:c0:62:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
Validity
Not Before: Jun 4 10:14:36 2026 GMT
Not After : Jun 3 10:19:36 2027 GMT
Subject: CN=F33FD663B8EAB332A839BF8F69199D6BF32F82F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:a2:00:02:ad:88:cc:10:84:7c:75:96:37:
a5:99:93:b4:de:3d:2b:a2:d0:a4:e5:53:14:d7:38:
39:60:7b:2c:38:84:8e:f4:d0:3a:40:c2:13:71:1f:
e7:80:c0:ed:07:a3:64:a9:ec:81:46:af:c3:37:66:
07:c5:da:ac:75:4e:44:c9:48:a7:5e:2c:84:b9:a8:
d2:7f:58:d5:a0:e1:95:fa:cc:c4:d1:cd:7e:c2:91:
0f:e7:57:e2:a7:07:21:88:68:99:f9:04:bd:5c:ed:
96:11:b4:cc:2b:c7:09:bd:03:81:5e:f1:95:02:6f:
59:20:c0:a9:0c:d9:c3:48:78:37:3c:2f:9b:2f:13:
09:29:18:1b:77:06:4e:af:a8:c2:f4:07:d0:a5:c0:
f2:aa:04:8a:ac:81:60:c4:cd:35:95:a7:ea:42:55:
bf:a7:79:9f:f4:9e:d3:6d:74:b8:96:7a:46:44:3b:
46:ac:05:06:c7:d4:b8:da:d0:dc:05:7b:c9:98:af:
c4:30:30:72:14:65:34:36:35:50:d7:78:47:6b:3c:
3f:1f:d8:f2:c9:6c:07:25:96:d0:8c:3a:df:73:6f:
c0:70:17:45:23:12:41:7e:f2:f3:ad:8c:3b:70:75:
eb:91:19:e9:e5:97:3b:fd:97:af:0a:2b:42:51:29:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3F:D6:63:B8:EA:B3:32:A8:39:BF:8F:69:19:9D:6B:F3:2F:82:F6
X509v3 Authority Key Identifier:
keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/3130332e34332e3130302e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:df:ed:76:46:a4:9f:83:3e:2a:0b:6f:5d:6a:4b:c0:50:3e:
5b:cd:24:74:0c:db:d7:d1:48:1b:52:8d:a4:f1:58:8e:47:b5:
d0:95:f1:b5:a8:fe:14:2f:33:50:b0:ca:2a:1c:6c:18:6a:94:
f0:97:27:76:e3:de:0e:97:7f:54:ba:5a:ea:b5:c5:0e:31:4d:
dd:88:5c:29:d1:fa:62:c2:9e:e5:ae:cf:2b:c9:52:f3:a5:9c:
a0:ba:95:20:1e:49:0a:6c:12:18:27:6e:38:6a:a8:6d:3c:9c:
d1:8f:1e:28:9e:13:39:b2:66:2e:e9:99:26:27:90:ec:64:58:
3b:c0:5f:fe:52:c1:5a:17:59:9a:10:c2:df:ea:bf:42:e2:14:
1a:6b:77:49:0e:91:97:a3:af:3a:0e:02:61:33:75:0b:80:22:
40:5e:99:1c:ef:d9:1e:30:de:eb:d2:81:d9:4b:52:51:23:91:
b7:9c:7e:8e:5a:00:03:a6:07:94:13:ed:9b:b9:52:79:6c:3c:
29:b2:e7:b8:05:13:5d:38:d8:f2:70:6a:8f:7c:76:0e:ed:6a:
e9:7a:3c:eb:09:0f:73:e6:77:99:65:97:86:c9:bc:61:e4:12:
8c:70:d2:57:91:ca:d9:e1:d5:75:1b:e7:52:9c:90:d0:e9:ea:
a7:be:12:e0
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUO/maK64Ihyy/PBv6Ll0M2sBiGQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZB
MTlBODE4QzAeFw0yNjA2MDQxMDE0MzZaFw0yNzA2MDMxMDE5MzZaMDMxMTAvBgNV
BAMTKEYzM0ZENjYzQjhFQUIzMzJBODM5QkY4RjY5MTk5RDZCRjMyRjgyRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWKIAAq2IzBCEfHWWN6WZk7Te
PSui0KTlUxTXODlgeyw4hI700DpAwhNxH+eAwO0Ho2Sp7IFGr8M3ZgfF2qx1TkTJ
SKdeLIS5qNJ/WNWg4ZX6zMTRzX7CkQ/nV+KnByGIaJn5BL1c7ZYRtMwrxwm9A4Fe
8ZUCb1kgwKkM2cNIeDc8L5svEwkpGBt3Bk6vqML0B9ClwPKqBIqsgWDEzTWVp+pC
Vb+neZ/0ntNtdLiWekZEO0asBQbH1Lja0NwFe8mYr8QwMHIUZTQ2NVDXeEdrPD8f
2PLJbAclltCMOt9zb8BwF0UjEkF+8vOtjDtwdeuRGenllzv9l68KK0JRKfC1AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU8z/WY7jqszKoOb+PaRmda/MvgvYwHwYDVR0j
BBgwFoAUoMmYv8yuiUY1Pqc5EstxVqGagYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDg1OTMxMDkwODc2ODI4MS8wL0EwQzk5OEJGQ0NBRTg5NDYzNTNFQTczOTEyQ0I3
MTU2QTE5QTgxOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZBMTlBODE4Qy5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE0ODU5MzEwOTA4NzY4MjgxLzAvMzEzMDMzMmUzNDMz
MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcr
ZDANBgkqhkiG9w0BAQsFAAOCAQEAnN/tdkakn4M+KgtvXWpLwFA+W80kdAzb19FI
G1KNpPFYjke10JXxtaj+FC8zULDKKhxsGGqU8JcnduPeDpd/VLpa6rXFDjFN3Yhc
KdH6YsKe5a7PK8lS86WcoLqVIB5JCmwSGCduOGqobTyc0Y8eKJ4TObJmLumZJieQ
7GRYO8Bf/lLBWhdZmhDC3+q/QuIUGmt3SQ6Rl6OvOg4CYTN1C4AiQF6ZHO/ZHjDe
69KB2UtSUSORt5x+jloAA6YHlBPtm7lSeWw8KbLnuAUTXTjY8nBqj3x2Du1q6Xo8
6wkPc+Z3mWWXhsm8YeQSjHDSV5HK2eHVdRvnUpyQ0Onqp74S4A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:59 2026 by rpki-client