
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32332d3332203d3e2034383337.roa
File: 3130332e3233382e3136302e302f32332d3332203d3e2034383337.roa (raw, json)
Hash identifier: /fsA4C9t9e2ZgCcRFHxITfOAiCAuv4YAWr5CI2QBlwo=
Subject key identifier: E6:40:6A:B9:B9:4F:D6:62:BA:C6:55:1B:6F:FC:58:D7:C1:F0:AF:FA
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 7238E3C799B216303EA06BDB8CAA0611FE362BEE
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32332d3332203d3e2034383337.roa
Signing time: Mon 11 May 2026 02:33:05 +0000
ROA not before: Mon 11 May 2026 02:28:05 +0000
ROA not after: Mon 10 May 2027 02:33:05 +0000
asID: 4837
IP address blocks: 103.238.160.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:38:e3:c7:99:b2:16:30:3e:a0:6b:db:8c:aa:06:11:fe:36:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: May 11 02:28:05 2026 GMT
Not After : May 10 02:33:05 2027 GMT
Subject: CN=E6406AB9B94FD662BAC6551B6FFC58D7C1F0AFFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:f0:72:83:88:96:fc:c3:3f:13:92:4e:4b:
6a:92:bb:46:d1:9a:99:b5:b4:49:3c:f4:42:44:59:
13:4b:90:79:28:f9:3c:2f:51:32:93:cc:35:0b:1c:
a1:d6:7f:32:78:61:cf:ec:96:3e:7d:55:66:ff:51:
14:cb:76:e4:53:bd:16:10:75:91:ca:80:ab:69:0b:
d2:6f:6d:67:31:89:a3:98:4d:af:dd:2e:d8:65:c5:
ab:78:b7:96:41:ed:05:ab:bb:dc:5a:bb:1c:95:52:
c3:96:50:ef:fc:14:eb:53:39:bf:57:05:e7:63:00:
d8:86:d0:57:0a:6d:c6:b6:6e:a3:00:3c:f4:88:fc:
1e:53:00:0f:ec:6f:3b:3a:5e:e4:3d:16:e5:5a:45:
54:79:3b:53:a7:e2:07:96:96:8b:90:ee:f7:d0:80:
9d:67:ed:28:75:5f:10:c6:04:c6:d9:50:c8:ff:e0:
40:72:88:94:08:d3:c5:f8:c6:8c:7c:b1:69:49:2b:
56:52:05:30:15:21:0c:ea:cf:a8:dd:ac:a6:ba:c5:
87:ec:19:c0:58:f7:20:97:e9:a9:a8:f5:10:86:52:
be:19:d8:f2:c0:a9:c6:14:94:43:4a:43:43:fd:52:
8b:e3:c2:72:12:06:d3:6e:70:b6:fb:22:6a:b1:5e:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:40:6A:B9:B9:4F:D6:62:BA:C6:55:1B:6F:FC:58:D7:C1:F0:AF:FA
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32332d3332203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:ed:45:ec:36:66:13:a5:e0:e7:4c:97:61:29:a9:17:ec:db:
18:2e:18:46:32:68:c7:87:8a:08:0e:79:7c:c9:8f:1f:5a:70:
7a:30:bc:ca:7c:28:eb:5d:e9:30:6b:79:07:0f:b1:70:0c:5b:
4c:ce:34:82:af:0a:62:2d:77:c0:5a:cf:31:a0:32:91:ae:7f:
72:1a:cd:60:ab:d9:ed:b2:b7:ec:a1:64:e4:7c:e4:d2:cf:11:
27:e1:3c:38:c8:a8:93:a7:6e:e6:b2:df:a5:26:03:ca:1e:8a:
86:13:ad:f1:d2:ce:6f:ff:da:e9:23:0d:fb:4b:0a:1c:ac:b8:
62:e7:c6:36:69:84:aa:af:9d:75:41:7b:dc:20:28:3f:aa:c4:
8e:c2:08:89:d8:ac:47:fd:aa:96:aa:f4:4e:4e:01:b9:8f:d9:
2c:8a:89:04:7e:79:c2:f5:16:36:61:9c:e8:65:1d:5a:0a:0c:
a7:50:40:54:ca:a4:3f:1e:45:9a:61:a5:32:bc:7f:94:9b:66:
75:2a:00:37:3a:da:2e:fc:61:f0:dd:c1:5b:5b:cc:de:d3:b9:
2b:80:ab:6b:be:3f:51:bb:56:a8:f2:57:e9:5f:c0:fa:df:45:
7c:0c:74:66:91:c3:c2:b7:3c:04:b1:fe:78:53:e3:dc:60:1b:
d3:64:a8:98
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUcjjjx5myFjA+oGvbjKoGEf42K+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA1MTEwMjI4MDVaFw0yNzA1MTAwMjMzMDVaMDMxMTAvBgNV
BAMTKEU2NDA2QUI5Qjk0RkQ2NjJCQUM2NTUxQjZGRkM1OEQ3QzFGMEFGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19PByg4iW/MM/E5JOS2qSu0bR
mpm1tEk89EJEWRNLkHko+TwvUTKTzDULHKHWfzJ4Yc/slj59VWb/URTLduRTvRYQ
dZHKgKtpC9JvbWcxiaOYTa/dLthlxat4t5ZB7QWru9xauxyVUsOWUO/8FOtTOb9X
BedjANiG0FcKbca2bqMAPPSI/B5TAA/sbzs6XuQ9FuVaRVR5O1On4geWlouQ7vfQ
gJ1n7Sh1XxDGBMbZUMj/4EByiJQI08X4xox8sWlJK1ZSBTAVIQzqz6jdrKa6xYfs
GcBY9yCX6amo9RCGUr4Z2PLAqcYUlENKQ0P9UovjwnISBtNucLb7ImqxXiF1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU5kBqublP1mK6xlUbb/xY18Hwr/owHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzMxMzAzMzJlMzIz
MzM4MmUzMTM2MzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNDM4MzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWfuoDANBgkqhkiG9w0BAQsFAAOCAQEAoe1F7DZmE6Xg50yXYSmpF+zb
GC4YRjJox4eKCA55fMmPH1pwejC8ynwo613pMGt5Bw+xcAxbTM40gq8KYi13wFrP
MaAyka5/chrNYKvZ7bK37KFk5Hzk0s8RJ+E8OMiok6du5rLfpSYDyh6KhhOt8dLO
b//a6SMN+0sKHKy4YufGNmmEqq+ddUF73CAoP6rEjsIIidisR/2qlqr0Tk4BuY/Z
LIqJBH55wvUWNmGc6GUdWgoMp1BAVMqkPx5FmmGlMrx/lJtmdSoANzraLvxh8N3B
W1vM3tO5K4Cra74/UbtWqPJX6V/A+t9FfAx0ZpHDwrc8BLH+eFPj3GAb02SomA==
-----END CERTIFICATE-----
Generated at Wed May 13 16:25:21 2026 by rpki-client