
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232342e302f32322d3332203d3e203633353930.roa
File: 3130332e38392e3232342e302f32322d3332203d3e203633353930.roa (raw, json)
Hash identifier: xPqLH3vSxBWwkwgM44juU0NpuNPWTKiO7rqIBeWBn9w=
Subject key identifier: FB:BA:03:B5:6D:DE:13:C9:0C:8B:68:17:3D:68:9A:02:F0:05:2A:08
Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial: 450860FE302E6361CDB2C0F4F66E29745EE6FB34
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232342e302f32322d3332203d3e203633353930.roa
Signing time: Thu 23 Apr 2026 07:28:06 +0000
ROA not before: Thu 23 Apr 2026 07:23:06 +0000
ROA not after: Thu 22 Apr 2027 07:28:06 +0000
asID: 63590
IP address blocks: 103.89.224.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:08:60:fe:30:2e:63:61:cd:b2:c0:f4:f6:6e:29:74:5e:e6:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Validity
Not Before: Apr 23 07:23:06 2026 GMT
Not After : Apr 22 07:28:06 2027 GMT
Subject: CN=FBBA03B56DDE13C90C8B68173D689A02F0052A08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:d6:90:2f:8f:ef:34:cd:6f:38:2e:0e:1c:
ea:ad:fa:af:f5:30:49:03:f1:ad:d1:89:3f:cf:73:
c4:c0:dd:08:6e:51:92:4d:fe:5f:54:b2:6c:81:a6:
0d:21:12:93:9d:e0:20:fe:65:dc:bc:81:93:ff:31:
f6:5e:c2:e8:34:9d:ef:a6:c0:cb:45:8f:34:dc:ac:
cc:f3:f2:cf:47:06:b1:f4:76:60:ee:b4:a6:85:3d:
2a:5b:9d:25:e9:34:6e:5c:5e:ad:46:e6:0d:18:75:
f2:cd:f9:e6:3a:05:54:51:d2:4b:bf:3c:5d:dd:b0:
28:aa:04:6e:64:2a:d3:9a:0c:bd:34:08:0b:7c:64:
4f:5c:89:28:5a:30:98:32:ac:f2:c4:c3:ad:f1:f0:
2a:1b:89:79:c8:f7:4f:7b:1e:ba:9a:f0:c3:14:e8:
b7:d1:51:51:31:d8:82:31:28:20:40:2d:51:7c:5f:
06:6a:54:cf:03:f1:7a:0d:73:1c:18:1c:14:92:5c:
ae:18:c7:9e:f5:61:2e:9e:75:e1:91:e6:0c:d7:d5:
c5:81:fa:cb:34:4c:38:1c:ac:eb:3f:37:b9:ed:d8:
7e:96:ff:2c:ef:cf:dd:e6:1c:0d:d7:31:95:2b:f6:
9f:34:3e:20:eb:21:cd:44:7e:53:9d:06:d9:8a:64:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:03:B5:6D:DE:13:C9:0C:8B:68:17:3D:68:9A:02:F0:05:2A:08
X509v3 Authority Key Identifier:
keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232342e302f32322d3332203d3e203633353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.224.0/22
Signature Algorithm: sha256WithRSAEncryption
41:aa:ce:df:42:42:47:35:43:19:a2:41:6f:c3:4d:ad:63:f2:
de:96:30:11:69:9f:3b:d9:ee:32:0f:44:b0:f3:4c:55:4f:c6:
81:1b:34:7d:76:8c:03:6f:b4:37:15:ba:63:4c:9a:b5:3b:74:
10:2d:6a:05:89:64:b2:82:02:4a:d3:15:d9:65:85:9d:82:9c:
1d:da:ed:60:49:2f:bc:2e:0c:06:8d:ad:50:e1:fb:2e:14:1a:
05:81:df:fd:de:31:a1:03:6c:cc:23:c9:c8:26:8e:bc:4f:ed:
18:ff:08:0b:6d:51:01:f1:33:eb:c6:7a:79:6b:64:69:9f:8f:
81:6e:f4:7f:a2:bc:de:ba:67:69:a0:23:60:53:e0:a5:af:dc:
c1:b7:1e:19:a6:6c:22:4a:95:94:69:5d:ff:4f:5d:6c:a7:ac:
2c:c8:99:db:b3:d6:0b:aa:2e:96:54:5b:1a:aa:61:1e:35:2b:
0d:5d:34:6d:9a:bc:3e:1c:fb:21:0d:f0:7b:c9:d5:ad:32:27:
43:3c:c5:80:0c:01:6c:42:ed:18:c0:2a:21:1f:b8:88:fe:af:
5e:69:82:27:09:2b:36:86:8b:67:15:3b:f9:9e:55:14:7c:bb:
8f:7d:0b:61:44:ca:d7:d0:8c:c2:fd:96:dd:1f:5d:07:d3:08:
a5:27:10:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:33 2026 by rpki-client