
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3131302e3137332e3131322e302f32302d3230203d3e2030.roa
File: 3131302e3137332e3131322e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: VSAubi4/9XTq3krwNM7HxqX4xJGHbOSHysUhyMD+jN4=
Subject key identifier: 10:FD:B1:43:8F:29:8A:72:AE:C4:09:B9:F0:A6:50:EE:E4:64:94:43
Certificate issuer: /CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF
Certificate serial: 114C3EF8FD97F67C0AFD274A05202BD9D0301C4A
Authority key identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3131302e3137332e3131322e302f32302d3230203d3e2030.roa
Signing time: Tue 28 Apr 2026 01:05:10 +0000
ROA not before: Tue 28 Apr 2026 01:00:10 +0000
ROA not after: Tue 27 Apr 2027 01:05:10 +0000
asID: 0
IP address blocks: 110.173.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:4c:3e:f8:fd:97:f6:7c:0a:fd:27:4a:05:20:2b:d9:d0:30:1c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF
Validity
Not Before: Apr 28 01:00:10 2026 GMT
Not After : Apr 27 01:05:10 2027 GMT
Subject: CN=10FDB1438F298A72AEC409B9F0A650EEE4649443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:48:bd:6a:22:ff:f9:15:61:8b:3b:28:df:
00:43:44:8d:0d:77:4b:1f:78:fb:8a:0b:b5:1e:77:
cd:a3:31:4f:83:55:0e:50:09:75:d3:cb:8c:c1:1a:
39:e4:db:58:ff:7b:40:77:2e:23:b6:7e:4e:72:1c:
c9:fc:78:eb:41:fa:ef:48:1a:4c:13:10:1f:a1:f7:
cf:86:51:a7:65:b5:8f:d4:82:7b:3c:5f:16:32:73:
eb:23:3b:3e:43:05:70:29:d9:c6:8e:f8:a9:96:23:
9c:8a:61:9d:4d:8d:db:e9:b3:93:c9:f7:93:3b:c9:
0f:44:8c:04:4e:fd:7c:d6:b1:bf:e8:2d:28:18:44:
37:a7:c7:92:a4:12:af:b6:b4:a9:52:e9:cf:25:74:
12:ef:51:e4:81:55:ab:42:e8:57:18:fb:e7:5f:a9:
4d:e0:ed:5b:d0:cf:ce:3f:74:0b:79:35:76:60:60:
46:84:3a:1e:c2:9b:63:53:53:bb:ff:60:84:6b:38:
2a:83:19:d1:75:04:8d:be:88:de:f6:b5:85:6d:27:
22:ae:37:bb:55:0c:de:32:8b:04:64:89:83:b4:12:
cf:6e:17:14:5b:77:6a:80:28:88:40:31:37:8f:a1:
af:72:0f:67:f1:10:c4:5c:3b:24:7c:f5:3c:2f:d7:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:B1:43:8F:29:8A:72:AE:C4:09:B9:F0:A6:50:EE:E4:64:94:43
X509v3 Authority Key Identifier:
keyid:36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3131302e3137332e3131322e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.173.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:8a:2e:63:49:e8:f3:c5:e7:5d:75:42:4f:ff:3d:7d:82:8d:
ab:d8:29:9f:6d:62:03:d2:50:68:55:5f:db:65:bd:c0:a2:a2:
ed:a4:5b:7f:ce:05:06:7d:ea:b3:e0:23:cc:37:ef:ee:d2:98:
c2:b2:c2:a9:86:e0:6d:35:e9:0c:f2:a1:23:a2:89:82:c7:84:
1b:04:4e:7a:ac:cb:d4:7c:a2:13:64:30:71:c5:6a:87:9d:c1:
99:7c:de:21:60:f8:e1:d7:4b:d8:4e:58:4f:0c:c2:7c:ac:34:
64:97:0f:d8:ac:ac:30:83:ea:9f:a4:a3:f5:d9:0b:2b:2d:66:
bd:ad:b7:7e:d7:b7:2c:14:a3:3d:3e:f3:38:7b:a1:b5:b1:8b:
a0:ef:4d:f2:25:10:fb:39:12:3d:b0:cd:b5:d8:ae:a4:ca:05:
d1:2c:7f:2b:48:0b:d5:f6:b7:c8:9a:fd:c6:58:7e:25:22:cb:
fd:50:23:8d:47:d9:80:39:95:b8:3b:7a:4f:e6:29:a6:76:24:
aa:1f:49:9f:91:e8:26:b6:dc:aa:37:bc:3a:b5:44:a6:08:b2:
cd:75:23:a2:1d:13:0d:c2:cb:1e:07:41:4c:a0:aa:c3:a1:3f:
fb:20:34:ee:18:77:27:30:4e:db:d5:49:4a:2c:38:4b:76:a8:
39:b8:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:37 2026 by rpki-client