
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232332e3138382e302f32322d3234203d3e203539303438.roa
File: 3130332e3232332e3138382e302f32322d3234203d3e203539303438.roa (raw, json)
Hash identifier: JpAYBeicZzbvSnLzUh/N8QvBOs1WyaPIsrgu9ePOwWA=
Subject key identifier: D3:4D:44:FC:06:0A:E1:62:AA:50:88:F5:3B:BB:65:25:55:C8:FE:BA
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 65481664D5015FE6150BC6AC9F9462AE9112D12F
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232332e3138382e302f32322d3234203d3e203539303438.roa
Signing time: Mon 11 May 2026 07:01:36 +0000
ROA not before: Mon 11 May 2026 06:56:36 +0000
ROA not after: Mon 10 May 2027 07:01:36 +0000
asID: 59048
IP address blocks: 103.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:48:16:64:d5:01:5f:e6:15:0b:c6:ac:9f:94:62:ae:91:12:d1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: May 11 06:56:36 2026 GMT
Not After : May 10 07:01:36 2027 GMT
Subject: CN=D34D44FC060AE162AA5088F53BBB652555C8FEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:fa:c6:a8:63:86:ed:85:aa:62:6c:2e:14:
56:99:49:fa:ed:5b:52:ed:ce:04:59:b7:0f:3a:be:
21:c0:47:a5:ee:e2:7b:f1:05:f8:51:92:69:8e:70:
19:46:3d:0d:b3:ea:31:4c:db:57:e4:d5:5f:8c:be:
bc:05:4f:bf:11:c8:6f:ad:6b:30:88:ee:78:5e:f4:
58:5a:61:39:0a:18:04:31:d2:8e:2b:83:83:c4:2b:
2c:7e:e5:97:76:cd:42:c3:d7:65:64:01:14:94:ea:
54:7c:97:07:cd:5a:e6:aa:08:f4:8f:6a:c1:23:a4:
fa:96:2a:ee:6c:2e:a6:6c:af:88:5c:e6:08:26:80:
65:55:d3:40:58:c9:41:29:a4:f3:af:7f:bd:22:c2:
53:ed:05:f9:3c:9d:40:41:2d:bc:55:a0:74:42:c3:
2b:96:af:75:b3:90:d5:1c:72:5c:e0:74:a8:7e:a4:
75:0b:3a:e7:31:82:6a:d8:d7:46:f3:e4:7c:9e:ea:
60:98:6d:62:54:32:4d:b5:3c:30:3a:56:83:6b:ca:
56:fa:54:89:22:70:20:8f:7e:04:9b:d0:0a:6b:07:
45:c8:e5:4f:84:62:ca:f7:e7:cc:a7:c0:75:30:ca:
e2:22:0f:f9:a5:c7:06:01:92:fb:a8:62:a3:46:40:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:44:FC:06:0A:E1:62:AA:50:88:F5:3B:BB:65:25:55:C8:FE:BA
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232332e3138382e302f32322d3234203d3e203539303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
04:e9:65:a8:ba:93:6f:dc:37:43:9a:b4:45:a8:cd:c6:9d:52:
be:2c:ca:c7:4f:9c:c1:ee:f8:57:86:21:fa:98:12:42:0d:86:
fe:70:2e:07:82:b0:e6:98:9e:98:29:8f:12:83:7c:c3:0e:ec:
ca:49:c5:2d:b9:67:d8:3c:59:ed:ea:bb:22:53:e8:2e:73:9e:
af:72:2e:77:b3:32:a2:49:3f:a5:25:a4:53:c8:3d:36:4d:7a:
cc:01:ba:b1:1a:bd:50:1c:97:5f:43:f0:0b:b1:30:29:6b:aa:
3d:8f:4b:e2:fd:e2:11:4f:22:88:17:90:7d:4c:e6:37:8c:63:
4f:c6:c0:ca:06:ca:f2:6c:ab:10:4d:6e:9f:f1:7f:96:fa:6a:
22:e7:8b:a5:f2:dc:94:65:53:44:42:ff:e1:0b:49:b8:61:fe:
ad:6d:63:81:ad:99:8b:c8:80:22:ad:fd:67:06:96:16:f0:94:
dd:04:8f:7b:c0:62:c1:2e:ec:04:b8:f0:a3:77:99:ec:88:75:
47:fd:9c:d8:bd:6b:62:18:72:aa:66:4b:01:ea:35:9e:8d:10:
58:bc:26:12:96:77:5c:f3:43:e4:04:7d:9e:1e:6f:a0:1b:b9:
ad:42:15:d7:33:da:82:00:9a:29:a8:45:ef:6e:26:cd:af:bc:
e1:34:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:20 2026 by rpki-client