
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa
File: 3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier: jlPD6Syj2WUMk0/GKQtzo96jxAOhRno6yJr248gVRTs=
Subject key identifier: 61:38:DE:D2:01:E6:B4:2A:6E:28:9A:2F:F8:1C:4E:7F:50:71:C7:3C
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 7ACFC667EF08BB829D23DA10BCE900FBD9C693DA
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa
Signing time: Mon 11 May 2026 02:50:34 +0000
ROA not before: Mon 11 May 2026 02:45:34 +0000
ROA not after: Mon 10 May 2027 02:50:34 +0000
asID: 4808
IP address blocks: 103.237.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:cf:c6:67:ef:08:bb:82:9d:23:da:10:bc:e9:00:fb:d9:c6:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: May 11 02:45:34 2026 GMT
Not After : May 10 02:50:34 2027 GMT
Subject: CN=6138DED201E6B42A6E289A2FF81C4E7F5071C73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:78:45:2a:bd:c9:c0:72:ee:6a:c3:67:04:
d2:0e:8e:b0:89:65:81:0a:93:96:33:0a:fa:53:14:
20:29:af:c6:42:6d:82:7a:94:b9:e5:0a:26:6a:a4:
c4:f6:1a:90:3a:ab:75:9b:b7:cb:d8:d7:67:1d:5b:
8c:41:dd:cf:50:2e:2b:76:18:a8:63:b7:5a:b5:e8:
4a:e9:e1:23:1a:77:8f:fa:be:6a:84:09:ff:b2:b6:
da:da:b5:66:b2:d3:88:d5:ee:86:38:2d:f4:6f:69:
0d:a7:4b:fa:2b:d7:c2:d8:b0:94:f5:31:a7:be:8a:
1d:31:fe:f5:72:84:cd:8f:5b:dd:55:c6:6c:e5:88:
d2:2c:6a:9d:72:61:2e:14:9a:7c:68:90:45:9f:af:
d2:d2:46:fd:3c:c1:fb:cf:79:c1:d5:a1:60:87:fb:
37:1e:99:50:7a:a0:b4:7b:60:33:55:29:b3:4a:8a:
c4:c4:cc:52:ba:e5:d4:29:99:bc:0a:c1:a5:ea:ab:
b2:c4:bf:88:c2:37:61:3b:eb:d8:d5:70:ef:dd:7c:
75:8a:9c:44:72:a1:a3:bb:a4:cd:1e:8b:93:1a:10:
28:2e:57:93:f5:60:22:a7:11:b1:8a:19:60:fb:e7:
b5:aa:bc:57:69:76:25:f1:53:e2:ca:78:e5:5a:23:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:DE:D2:01:E6:B4:2A:6E:28:9A:2F:F8:1C:4E:7F:50:71:C7:3C
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.248.0/22
Signature Algorithm: sha256WithRSAEncryption
41:46:26:e3:8a:9f:a4:ab:b3:10:1f:59:f9:e5:a1:51:d0:71:
31:7f:bc:b2:ea:d4:c3:46:5d:9f:9f:d0:9d:a8:87:5f:fc:61:
9f:34:b4:a1:90:da:b9:1e:c1:5b:3a:55:8b:1a:de:6f:62:8e:
08:f8:b8:fb:a5:32:f8:ed:5b:a1:30:e6:31:9b:16:25:c9:d9:
26:1d:bc:1f:71:69:10:f8:1a:4f:b8:f0:ea:81:b8:49:d0:07:
9e:9f:35:2d:e9:a4:1b:a7:1b:e3:03:fc:a2:f6:29:c2:63:21:
d1:17:f0:25:95:e1:a9:10:8f:a1:d2:12:70:43:aa:59:be:3f:
dc:c6:0b:de:f0:e2:8f:ef:91:23:99:f2:f9:64:c6:0f:ce:1e:
ea:aa:26:39:aa:b2:64:98:f8:e1:8e:c9:af:1c:91:9a:37:8d:
14:c9:92:8b:31:b5:16:6e:89:c8:bb:87:18:05:d3:ce:98:b1:
e8:d2:78:fe:3d:1c:bf:18:81:b8:c6:9b:fd:05:36:22:48:c5:
ae:29:8c:77:03:53:2f:a6:03:76:49:50:11:8e:29:ea:93:fe:
a7:7e:18:b0:4a:51:54:49:eb:5d:e4:fa:96:ce:0a:de:29:70:
0d:f9:49:b6:02:18:b3:ce:95:0f:5f:e8:11:0a:ec:16:74:eb:
bc:0e:55:86
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUes/GZ+8Iu4KdI9oQvOkA+9nGk9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA1MTEwMjQ1MzRaFw0yNzA1MTAwMjUwMzRaMDMxMTAvBgNV
BAMTKDYxMzhERUQyMDFFNkI0MkE2RTI4OUEyRkY4MUM0RTdGNTA3MUM3M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1nhFKr3JwHLuasNnBNIOjrCJ
ZYEKk5YzCvpTFCApr8ZCbYJ6lLnlCiZqpMT2GpA6q3Wbt8vY12cdW4xB3c9QLit2
GKhjt1q16Erp4SMad4/6vmqECf+yttratWay04jV7oY4LfRvaQ2nS/or18LYsJT1
Mae+ih0x/vVyhM2PW91VxmzliNIsap1yYS4UmnxokEWfr9LSRv08wfvPecHVoWCH
+zcemVB6oLR7YDNVKbNKisTEzFK65dQpmbwKwaXqq7LEv4jCN2E769jVcO/dfHWK
nERyoaO7pM0ei5MaECguV5P1YCKnEbGKGWD757WqvFdpdiXxU+LKeOVaI0gHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUYTje0gHmtCpuKJov+BxOf1BxxzwwHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzMxMzAzMzJlMzIz
MzM3MmUzMjM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmft+DANBgkqhkiG9w0BAQsFAAOCAQEAQUYm44qfpKuzEB9Z+eWhUdBx
MX+8surUw0Zdn5/QnaiHX/xhnzS0oZDauR7BWzpVixreb2KOCPi4+6Uy+O1boTDm
MZsWJcnZJh28H3FpEPgaT7jw6oG4SdAHnp81LemkG6cb4wP8ovYpwmMh0RfwJZXh
qRCPodIScEOqWb4/3MYL3vDij++RI5ny+WTGD84e6qomOaqyZJj44Y7JrxyRmjeN
FMmSizG1Fm6JyLuHGAXTzpix6NJ4/j0cvxiBuMab/QU2IkjFrimMdwNTL6YDdklQ
EY4p6pP+p34YsEpRVEnrXeT6ls4K3ilwDflJtgIYs86VD1/oEQrsFnTrvA5Vhg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:43:48 2026 by rpki-client