
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3139322e3231322e302f32322d3234203d3e2034383131.roa
File: 3130332e3139322e3231322e302f32322d3234203d3e2034383131.roa (raw, json)
Hash identifier: PX17tSuWmZ3f5x4sjBC8wE8a5ZBv4Ny/3FgAecIakQ8=
Subject key identifier: BE:A8:1A:EA:38:9C:17:73:0D:68:98:6A:F0:BD:41:C3:5D:22:50:80
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 298AE30225C838D909FB7FDDF6B9E4BA07D7E46C
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3139322e3231322e302f32322d3234203d3e2034383131.roa
Signing time: Mon 11 May 2026 07:00:48 +0000
ROA not before: Mon 11 May 2026 06:55:48 +0000
ROA not after: Mon 10 May 2027 07:00:48 +0000
asID: 4811
IP address blocks: 103.192.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8a:e3:02:25:c8:38:d9:09:fb:7f:dd:f6:b9:e4:ba:07:d7:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: May 11 06:55:48 2026 GMT
Not After : May 10 07:00:48 2027 GMT
Subject: CN=BEA81AEA389C17730D68986AF0BD41C35D225080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:e0:19:de:c6:a1:6d:dc:b3:be:8d:f5:bd:
0e:f7:4c:c5:bd:0a:27:3a:6c:73:7f:8f:9a:67:87:
d5:c5:2a:ce:36:b3:5b:d6:f1:30:81:93:57:19:04:
3f:d2:40:bc:62:cc:14:8d:07:08:59:b1:53:b3:91:
92:60:bf:16:8e:8f:fc:aa:d6:10:0e:aa:4c:f6:da:
19:cc:46:60:2a:79:66:c5:8b:f1:63:62:67:59:4b:
ca:8b:d5:06:5f:35:56:e0:ba:3b:a5:f4:76:01:02:
7f:fc:ff:08:91:87:dc:d6:d8:0a:99:0e:c1:44:87:
5f:83:bf:42:cb:62:5b:77:c1:27:ff:1d:eb:70:af:
94:ae:99:32:c0:77:eb:a7:c4:aa:38:fa:a4:cb:b4:
de:32:84:43:df:1a:15:9e:ea:75:57:8e:e5:1d:1a:
ac:db:60:d4:6b:be:dd:06:cf:4e:7a:41:4e:29:40:
e9:bb:12:fd:78:8f:1c:88:bb:19:df:8d:ee:6c:ea:
9c:d2:5a:b2:c3:35:72:05:6d:4a:e9:8e:4e:f4:56:
56:d6:84:dc:a1:80:0b:ee:5b:5c:30:ae:9e:6f:69:
3c:52:b0:7e:18:87:19:a3:82:c0:b8:8c:3a:41:91:
52:24:a3:af:59:e9:2d:d5:25:c7:6d:77:15:e9:e8:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:1A:EA:38:9C:17:73:0D:68:98:6A:F0:BD:41:C3:5D:22:50:80
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3139322e3231322e302f32322d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.192.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:7a:a2:90:74:3e:d7:21:a9:f8:49:20:62:94:7f:73:7f:46:
c5:4f:9e:74:ff:a9:a1:fc:fb:bd:26:bb:cf:3f:49:35:11:31:
fb:8a:2c:48:f0:90:d2:0b:ae:13:83:b0:f1:aa:f3:75:d5:3c:
b2:30:9e:9d:bb:b5:8a:a4:db:26:54:5d:fa:5a:ad:e3:c2:b9:
a1:04:1d:04:7e:e8:60:3d:28:de:23:d1:54:c8:b5:e1:9a:db:
fe:57:83:0d:69:e9:41:4f:1e:34:12:f2:58:61:2a:31:ce:11:
ba:f2:5f:e9:d5:f9:69:99:6d:c8:6a:4d:c0:e0:76:99:40:ec:
62:7c:e9:9a:d2:c7:4e:42:fb:d5:a6:0e:7a:52:74:c5:ee:1a:
33:b1:9a:10:69:46:b8:8f:0b:10:68:65:ac:37:8d:e0:64:ff:
bc:e0:31:93:05:a7:52:61:90:33:7e:8a:87:82:b0:33:1c:1b:
7e:63:2a:81:e6:40:e0:bb:92:a7:bb:33:43:5b:87:ba:26:72:
8e:0b:ec:b4:e2:41:03:b3:ba:42:b6:6a:8b:07:cd:2f:3d:d0:
12:c0:e8:f1:0e:06:9c:d5:ec:8f:07:d1:0e:eb:58:cc:06:18:
86:53:71:0c:f3:ea:19:fe:38:c7:3e:b4:ea:cd:90:9f:bf:2a:
2e:6c:be:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:34:15 2026 by rpki-client