
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/3130332e33302e3134382e302f32342d3234203d3e2034383038.roa
File: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=
Subject key identifier: C3:68:11:3C:76:F5:87:82:B9:1D:C1:3C:E5:CD:AF:12:BB:34:8A:55
Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671
Certificate serial: 5AC1B95FAE803CE4B0577BA9480E1048D78172CA
Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/3130332e33302e3134382e302f32342d3234203d3e2034383038.roa
Signing time: Thu 07 May 2026 02:38:07 +0000
ROA not before: Thu 07 May 2026 02:33:07 +0000
ROA not after: Thu 06 May 2027 02:38:07 +0000
asID: 4808
IP address blocks: 103.30.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl
rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c1:b9:5f:ae:80:3c:e4:b0:57:7b:a9:48:0e:10:48:d7:81:72:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671
Validity
Not Before: May 7 02:33:07 2026 GMT
Not After : May 6 02:38:07 2027 GMT
Subject: CN=C368113C76F58782B91DC13CE5CDAF12BB348A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:10:c1:eb:61:cb:a9:60:f8:33:94:e5:09:
58:36:60:9a:19:f3:69:7e:a3:14:61:88:be:3a:e3:
3b:8f:66:df:06:67:43:e5:e0:25:d3:ef:b5:a4:0a:
9b:46:84:21:0b:4d:f9:33:36:cb:31:61:9e:e3:b0:
31:5f:8e:f9:0a:cd:00:19:79:a3:cb:9d:49:08:dd:
ec:4d:bf:6d:89:df:5c:d1:4a:0e:ef:e6:85:8e:f5:
14:c9:49:dc:29:7b:16:e0:db:96:62:63:51:bf:bc:
a0:88:44:d5:9b:cb:ae:92:f3:90:34:4d:03:b0:f7:
28:b9:aa:81:64:a1:31:5f:ad:44:79:27:39:84:fd:
23:b9:43:dc:2f:60:d7:d7:f1:4d:47:75:78:40:c4:
b8:03:e5:9a:89:f0:41:9f:a7:c9:c9:c1:0a:2a:b2:
0f:1a:63:8d:e5:74:7f:2b:65:02:08:73:df:e4:cf:
e4:38:18:5b:f7:31:28:33:f6:1e:0b:fb:d2:71:36:
6d:08:c6:ce:22:ad:28:ce:1b:50:24:3b:57:64:80:
6d:1f:ab:9d:8e:30:5a:f1:c3:b1:33:bd:fd:45:5a:
41:24:5e:60:5b:2a:c6:be:7a:3d:d5:e6:73:27:f2:
5e:5e:49:1e:ea:d8:86:4b:f3:f8:7b:94:c5:0e:75:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:68:11:3C:76:F5:87:82:B9:1D:C1:3C:E5:CD:AF:12:BB:34:8A:55
X509v3 Authority Key Identifier:
keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/3130332e33302e3134382e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.148.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:8e:d1:3b:5b:26:db:86:9f:3e:dd:7b:a8:41:a9:6f:04:9d:
e9:43:88:cc:ff:5c:78:bf:bb:ff:4d:40:c4:1a:a9:52:3c:f6:
c3:ef:c8:4e:ce:20:ff:58:8f:a0:ce:4a:7d:7b:15:95:13:ab:
6c:6d:ea:3e:a8:48:a8:53:e0:e2:63:47:48:82:72:f6:45:c5:
8f:19:6a:10:d3:db:5d:97:f0:16:16:5d:37:98:ae:a0:1a:7b:
83:3a:62:d6:f6:03:ea:15:81:4d:86:e3:38:03:55:da:31:f0:
a2:da:4c:83:d3:81:1f:35:00:cd:1a:98:09:29:82:7f:ae:72:
5e:d7:1e:38:b0:6a:43:18:e9:9a:99:c2:94:20:b9:da:91:0c:
14:2d:c7:1b:b3:74:7d:d1:b2:00:f3:ef:1a:1c:83:0d:a8:70:
af:0c:7f:c8:fe:31:94:75:94:d9:b4:c1:bd:a2:55:6f:36:9f:
4c:d6:13:47:ba:34:f1:a2:7c:07:61:83:4e:b5:e4:04:7a:9e:
1f:ec:f0:78:7f:dd:c8:2e:48:b1:ec:65:88:0e:f5:49:39:05:
d6:65:b9:30:67:15:ea:5c:0a:16:5a:39:6f:b4:c1:76:39:80:
26:d0:40:ce:56:0a:55:a0:89:0f:c7:e3:b1:fe:a9:8e:c8:9e:
f6:10:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:59 2026 by rpki-client