
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3130332e3234352e35322e302f32322d3232203d3e203435303836.roa
File: 3130332e3234352e35322e302f32322d3232203d3e203435303836.roa (raw, json)
Hash identifier: i5qJZNkDZPbLnSPwG+FUzwdgKJgG+46ebD8l5awhpGE=
Subject key identifier: 6C:2B:BE:F7:76:24:8A:2F:53:C3:BA:A0:D4:A6:C5:61:46:3F:D1:2C
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 391DB4CE2F72794A54479AF384F8815757A3D628
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3130332e3234352e35322e302f32322d3232203d3e203435303836.roa
Signing time: Tue 28 Apr 2026 03:14:19 +0000
ROA not before: Tue 28 Apr 2026 03:09:19 +0000
ROA not after: Tue 27 Apr 2027 03:14:19 +0000
asID: 45086
IP address blocks: 103.245.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:b4:ce:2f:72:79:4a:54:47:9a:f3:84:f8:81:57:57:a3:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: Apr 28 03:09:19 2026 GMT
Not After : Apr 27 03:14:19 2027 GMT
Subject: CN=6C2BBEF776248A2F53C3BAA0D4A6C561463FD12C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:85:fd:cf:64:c5:95:b9:cd:6c:2d:75:86:
91:39:17:ed:a2:8b:25:05:3a:53:7b:3e:4e:34:72:
70:68:a8:94:a8:74:0a:75:aa:85:95:2a:60:9a:d9:
7b:65:64:2c:73:bc:14:5a:60:13:1e:4a:5c:c3:b9:
d9:9e:63:fb:c7:7e:a5:77:b0:68:b6:e5:04:58:09:
8c:a2:99:f6:a9:c5:c9:d7:fd:90:90:c3:49:b2:60:
a8:ef:50:6a:56:52:44:ee:e4:12:4f:88:39:f9:70:
e1:ed:ef:d7:b8:b1:23:65:60:61:b9:78:02:f9:16:
29:92:4a:34:c8:95:9a:76:e4:0b:a6:96:59:f7:de:
60:a6:8b:7d:46:a0:6b:8d:44:aa:45:2f:2c:8f:d0:
c6:ea:68:9b:34:f3:70:7a:ef:27:fa:20:85:ba:ae:
70:8a:ba:9b:b0:9b:83:1a:45:6e:e1:7f:38:55:85:
3a:9b:ae:cd:cc:fa:68:f0:9d:ad:6f:23:cb:d2:dc:
7c:dd:fb:95:23:3e:ac:40:12:09:61:53:25:59:cc:
34:66:38:14:fd:fd:c0:cf:f1:fd:c7:a2:7c:c0:c8:
03:d9:e3:6b:c3:1d:b0:25:24:93:44:06:51:f2:d3:
59:57:8a:3f:9b:97:9e:01:b2:db:0a:f1:aa:d8:66:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:BE:F7:76:24:8A:2F:53:C3:BA:A0:D4:A6:C5:61:46:3F:D1:2C
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3130332e3234352e35322e302f32322d3232203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.52.0/22
Signature Algorithm: sha256WithRSAEncryption
54:67:29:bf:22:67:b4:b0:61:4a:7c:f5:14:0d:5e:76:87:e0:
6e:10:a0:bb:8d:26:54:ea:20:03:fe:f9:8f:a5:4d:cf:39:6b:
3d:eb:92:c5:cd:5d:84:3a:f5:77:15:81:e2:a8:fa:5b:a5:64:
7c:06:a5:ab:7f:92:72:ff:0c:89:73:bf:d0:e0:f6:4d:cd:d7:
96:1b:fe:92:be:cc:b6:95:c7:52:d2:ab:24:d8:c3:60:26:2b:
f8:4b:d3:77:2b:8d:b2:53:e7:69:38:2b:87:bd:f2:83:a9:44:
ff:a1:67:99:5b:11:c7:7f:6a:bb:dd:23:b8:07:ce:4c:8f:2c:
93:1f:2b:ae:2b:55:23:9b:4b:be:bf:a4:48:ff:f9:d8:d9:25:
78:63:ff:bc:34:60:7f:d6:17:4d:3b:71:1f:19:9b:4e:da:f3:
9b:89:7e:c2:ef:69:94:f8:74:e2:11:b0:16:c2:cb:94:29:8e:
fb:d1:ea:cd:05:8f:30:9f:9a:12:e7:f1:98:f7:62:af:e3:e6:
27:54:19:54:49:ba:b5:75:83:2e:86:1b:15:fc:fd:65:f9:a3:
cf:9b:82:98:13:63:c4:90:bc:31:c4:d1:3b:4d:0e:b1:ba:b6:
a0:f0:9a:60:ed:1f:87:1c:7f:ff:4c:66:d4:71:88:91:7c:8c:
9d:5a:0d:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:23:42 2026 by rpki-client