
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383038.roa
File: 3130332e3231332e38382e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier: XypyFSQ1iPzCQ6Jc6zsHMC6GtKzeVB2U8Nuy/SGIFOY=
Subject key identifier: 75:4A:A0:00:C9:30:93:90:20:51:D2:C0:84:34:12:83:ED:4B:85:DC
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 4C8802BAC87E60557EEF4D45953F1C9FE85A51CA
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383038.roa
Signing time: Tue 12 May 2026 08:20:41 +0000
ROA not before: Tue 12 May 2026 08:15:41 +0000
ROA not after: Tue 11 May 2027 08:20:41 +0000
asID: 4808
IP address blocks: 103.213.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:88:02:ba:c8:7e:60:55:7e:ef:4d:45:95:3f:1c:9f:e8:5a:51:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: May 12 08:15:41 2026 GMT
Not After : May 11 08:20:41 2027 GMT
Subject: CN=754AA000C93093902051D2C084341283ED4B85DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:54:8d:ee:b1:3f:59:72:8b:d6:4d:55:e6:
4b:22:84:4d:fd:1c:52:c1:5a:71:84:ef:fa:70:d2:
35:35:29:d0:ba:bb:43:4d:55:d3:f8:a5:a5:83:6b:
49:72:61:4c:37:ea:fc:e1:72:64:0b:b2:cf:52:55:
2d:a7:36:ab:36:12:09:67:bf:aa:4d:8d:38:29:a8:
d6:d1:33:c1:77:63:d6:24:3e:e1:ec:21:3e:e2:43:
3c:ca:84:e1:02:55:04:6d:ec:c3:f9:2b:fe:c0:c5:
69:23:bf:8f:20:ca:96:92:db:f3:65:12:2b:1e:30:
16:ae:0e:6d:c1:63:19:95:c7:31:28:d6:ed:f4:be:
de:7d:dd:30:57:9f:53:17:69:fd:0e:8d:4c:e5:d4:
ea:f5:6d:08:39:58:d4:94:a2:b5:94:dd:f7:13:fd:
10:62:38:33:35:76:37:e6:11:a3:13:38:bb:fe:e3:
b4:00:4e:41:50:0b:61:f4:7e:3d:64:36:58:d2:9e:
de:ae:d1:d0:9d:67:06:d9:e4:50:b3:78:a9:07:7f:
c2:d5:98:c9:4c:70:da:d5:64:d7:38:a0:e7:f1:24:
e9:4f:91:df:f9:67:26:ba:25:07:86:f5:3c:6e:6a:
82:26:a7:f9:66:f2:44:97:1c:d7:19:7a:c4:cf:a0:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:A0:00:C9:30:93:90:20:51:D2:C0:84:34:12:83:ED:4B:85:DC
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.88.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:c4:cf:6d:70:9e:2c:dd:eb:f2:8b:35:76:6a:a5:39:ea:9f:
86:80:92:a2:88:08:04:d9:89:06:ee:41:a3:1f:ad:0f:8c:63:
bd:32:ff:61:fe:48:9e:e5:03:fb:d7:42:4e:5c:48:8c:34:a8:
c6:49:a0:c3:02:b7:1f:ba:68:0e:f3:bb:d6:45:9a:58:5d:ad:
df:d4:1e:b2:c8:a0:6a:18:4e:0a:7e:a7:46:17:7b:6d:76:10:
68:58:fd:33:d3:52:6d:1d:37:4b:f8:ff:92:4e:c7:5d:aa:60:
16:ef:1e:c6:a3:75:33:ca:64:19:17:eb:92:ba:6d:be:4c:eb:
e2:5e:e0:02:5c:a3:57:75:78:d7:19:41:26:d7:f1:30:62:46:
01:23:17:c1:70:4a:7d:c3:d7:ab:20:c1:78:ad:8a:d2:71:65:
c6:1e:36:7e:f9:bd:20:4a:d5:e3:3c:1d:8f:fa:e5:3b:bc:a2:
e5:2c:19:9d:67:14:ca:c2:99:4e:79:34:38:fc:1e:2b:b8:b0:
5e:d8:54:e7:95:55:f5:f0:40:89:be:c4:0c:b4:a4:77:7c:f6:
58:5b:83:71:83:3b:74:00:05:78:f2:d4:38:b9:3c:e4:64:f1:
f6:37:bf:cf:a4:25:8b:40:3d:3d:49:43:02:c6:fe:7b:67:7e:
4c:eb:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:32 2026 by rpki-client