
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa
File: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (raw, json)
Hash identifier: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=
Subject key identifier: 41:47:10:6A:48:46:78:82:5B:DA:B3:70:27:AB:4E:F1:98:3D:62:E6
Certificate issuer: /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71
Certificate serial: 35DE0F0564F988CA4C6DE61E0985020D9468A98A
Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa
Signing time: Thu 11 Jun 2026 05:40:14 +0000
ROA not before: Thu 11 Jun 2026 05:35:14 +0000
ROA not after: Thu 10 Jun 2027 05:40:14 +0000
asID: 38357
IP address blocks: 117.103.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl
rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:de:0f:05:64:f9:88:ca:4c:6d:e6:1e:09:85:02:0d:94:68:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71
Validity
Not Before: Jun 11 05:35:14 2026 GMT
Not After : Jun 10 05:40:14 2027 GMT
Subject: CN=4147106A484678825BDAB37027AB4EF1983D62E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:b0:be:68:88:c8:7c:86:9a:87:30:ca:48:
62:43:9a:74:10:8f:4c:ab:43:06:88:02:68:7a:3f:
8b:6f:eb:84:14:7e:f6:aa:13:1d:bc:6f:2e:96:7d:
ee:cb:6c:d2:88:97:cc:b2:81:f1:4b:4e:0f:0d:4d:
52:06:cb:49:e1:01:59:75:0f:5c:6f:61:d4:ab:6b:
7a:bf:98:02:25:e2:b8:6c:39:22:f7:e4:5f:66:13:
8d:14:a6:d3:75:56:8b:8e:38:c2:11:73:92:4c:16:
83:ec:d8:7e:63:ea:f0:41:13:0a:64:df:57:52:ba:
01:45:e7:38:c6:95:48:79:d3:68:31:3b:ec:94:1a:
e6:59:0f:f3:67:b4:01:dd:44:cf:27:09:e2:16:a0:
5a:5a:8d:9e:d0:e9:f5:98:bf:5f:a7:d0:8d:1b:db:
54:e6:3f:3f:51:e8:eb:67:b6:2b:d5:08:84:c7:a3:
43:50:5f:f8:48:4b:01:d2:87:89:c2:8a:76:aa:fa:
97:06:25:d4:4d:a5:8f:65:b7:9d:22:63:43:9c:5e:
b8:dc:62:12:5a:04:e3:9b:2c:d0:1c:83:d1:ee:c6:
51:74:de:4a:31:b0:39:c2:9f:96:fb:dd:bd:79:d3:
7c:01:5b:c0:88:e7:94:33:e6:06:ac:c0:d1:05:06:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:10:6A:48:46:78:82:5B:DA:B3:70:27:AB:4E:F1:98:3D:62:E6
X509v3 Authority Key Identifier:
keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:ec:03:fb:de:34:a5:3d:fb:86:d3:eb:2e:7a:cd:6c:09:ae:
5f:9b:03:08:9f:00:97:ea:c4:c0:fe:32:38:a8:e4:46:58:3f:
83:58:11:72:43:5f:6c:95:3b:07:3a:6d:91:b3:3f:6a:8c:bb:
13:3e:f9:eb:eb:5c:7c:16:ee:bf:8c:2d:be:0d:a5:9a:66:4f:
bd:55:05:75:4e:86:ce:6e:bd:81:86:c0:17:42:57:e8:11:ff:
ed:fa:9e:ff:12:b5:05:5a:f6:17:2f:79:d7:79:ab:4a:a6:29:
5e:30:de:e1:96:c3:f7:5c:df:3b:5d:e2:7c:63:b6:80:92:0d:
f6:14:db:3d:5a:9e:22:8c:51:3f:a1:62:36:2c:7d:56:77:38:
b1:5f:44:d3:4c:80:b0:68:2b:4a:c0:b7:bb:87:39:17:43:f8:
17:a1:8c:43:8d:2e:b2:61:00:45:c1:3d:d6:d6:4e:95:dc:1e:
ce:75:6d:ee:7a:e1:95:d8:5e:d9:d1:04:72:c5:e3:cf:8d:92:
d0:c5:9c:ad:d0:16:c9:c8:07:80:8f:80:4f:e5:a7:15:9f:96:
5c:ca:d1:0b:6b:49:c1:8a:56:92:de:4a:cf:8f:8c:01:c2:58:
0a:fa:f8:07:1a:a9:77:8c:81:b1:1c:f0:e8:2e:e5:b4:35:63:
c0:94:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:31:54 2026 by rpki-client