
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232382e302f32322d3332203d3e203633353930.roa
File: 3130332e38392e3232382e302f32322d3332203d3e203633353930.roa (raw, json)
Hash identifier: oPAoPSWuubFEtWOCP2vBpoWSw8R6tL93wROObbKldQs=
Subject key identifier: AA:38:44:BA:99:13:37:53:F2:8B:6A:C8:84:F2:20:3C:9C:10:62:86
Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial: 495B77170906B676A6B49868B8CAC8298B9971AB
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232382e302f32322d3332203d3e203633353930.roa
Signing time: Thu 23 Apr 2026 07:28:06 +0000
ROA not before: Thu 23 Apr 2026 07:23:06 +0000
ROA not after: Thu 22 Apr 2027 07:28:06 +0000
asID: 63590
IP address blocks: 103.89.228.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5b:77:17:09:06:b6:76:a6:b4:98:68:b8:ca:c8:29:8b:99:71:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Validity
Not Before: Apr 23 07:23:06 2026 GMT
Not After : Apr 22 07:28:06 2027 GMT
Subject: CN=AA3844BA99133753F28B6AC884F2203C9C106286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:c8:1e:03:4d:71:0e:65:28:fd:43:24:65:
fa:05:f8:29:a1:84:76:f0:01:4b:19:29:e3:b7:de:
57:c1:c4:84:0f:c9:9e:42:0e:3d:88:ae:cb:67:eb:
54:38:f6:20:cb:16:ff:a8:51:0b:f1:56:0e:fd:40:
81:43:e1:a2:0a:68:2d:ff:fb:a4:f3:56:f6:ef:d2:
05:61:8d:e3:04:b6:06:79:7c:75:69:f8:03:2c:6f:
22:7a:4b:35:f3:61:ce:17:5c:35:94:0b:cf:30:1c:
c4:ac:4b:12:62:fe:a3:ad:c1:4e:85:fd:77:3a:2f:
0f:22:14:89:fa:d8:29:55:bd:8f:95:a2:2b:c2:38:
14:ee:8a:d5:46:71:fb:e7:eb:52:12:10:e4:33:00:
27:1d:83:e3:f4:17:83:f1:a7:0c:f4:d0:a8:42:10:
6b:08:fe:d9:e6:bd:12:c6:d2:37:2e:b8:39:65:96:
c4:af:8c:f3:80:df:5c:6c:f3:37:4f:90:f3:d4:20:
95:e5:c1:81:1b:7e:8c:94:c5:f8:a5:0d:a0:4e:92:
f8:18:18:80:a6:b9:8a:14:fd:4b:8e:d4:6d:e9:a1:
3e:a2:62:5e:8b:da:42:a1:6c:3d:0c:03:77:dd:0d:
b2:bd:1a:26:f1:d5:4d:8b:24:db:60:d2:08:c1:3b:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:44:BA:99:13:37:53:F2:8B:6A:C8:84:F2:20:3C:9C:10:62:86
X509v3 Authority Key Identifier:
keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232382e302f32322d3332203d3e203633353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.228.0/22
Signature Algorithm: sha256WithRSAEncryption
26:36:0e:5d:32:b2:13:82:64:9b:43:56:0d:8a:05:42:69:e6:
b3:e9:43:57:54:11:07:95:c8:b5:76:75:65:0d:65:f7:26:6e:
89:8d:07:e4:14:fc:1c:e5:21:34:c8:82:8c:1d:d2:6c:1d:93:
31:4c:0c:66:08:59:07:ac:7f:9c:2f:96:2c:4f:a2:d6:da:21:
9f:5c:c7:bf:41:6e:2e:58:5b:f8:c2:91:77:a4:48:ef:63:ca:
18:c1:b5:b3:ea:5b:a1:a8:2f:d6:9f:b6:e3:7b:02:89:d7:fe:
f6:9f:a9:ce:50:9f:0d:e1:ed:13:50:b6:aa:18:d3:6f:56:69:
8c:88:be:58:a2:8c:ee:69:36:29:ae:9b:a1:15:11:a5:56:ed:
7f:a0:65:5c:44:c0:06:52:37:ef:0f:7f:f8:2f:99:4e:27:42:
8f:70:0f:36:4a:b4:39:a2:fd:9c:0a:ba:ae:d8:ae:e6:a9:e4:
35:80:03:66:2d:d8:37:98:e6:17:04:fa:29:2b:d7:1e:26:bf:
b5:fe:38:19:6e:a4:73:3e:52:c3:d0:64:9f:f8:93:8f:51:24:
b1:de:11:27:fb:c4:40:09:d4:f0:8e:0b:35:5b:cc:bf:ba:0b:
31:b7:20:fa:e4:73:88:bf:7e:bc:5e:58:60:f7:aa:25:40:78:
92:ad:af:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:28 2026 by rpki-client