
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa
File: 3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: 0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=
Subject key identifier: 6A:2B:FE:46:70:09:0B:89:3A:FF:D0:C9:79:54:66:AB:FA:3C:C1:B9
Certificate issuer: /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
Certificate serial: 2CBE65C6C9A4F2DDA2D31E79A90B93F173048480
Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa
Signing time: Sat 02 May 2026 16:18:50 +0000
ROA not before: Sat 02 May 2026 16:13:50 +0000
ROA not after: Sat 01 May 2027 16:18:50 +0000
asID: 4808
IP address blocks: 103.228.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl
rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:be:65:c6:c9:a4:f2:dd:a2:d3:1e:79:a9:0b:93:f1:73:04:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
Validity
Not Before: May 2 16:13:50 2026 GMT
Not After : May 1 16:18:50 2027 GMT
Subject: CN=6A2BFE4670090B893AFFD0C9795466ABFA3CC1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:45:03:58:32:e1:c7:03:ff:e8:ca:5c:28:
20:4d:3e:5b:a3:bc:be:74:e7:22:af:17:97:be:0c:
b6:4e:31:80:c5:5d:57:4d:98:de:ca:03:ba:cf:ae:
e8:d8:3c:84:8b:84:8e:a1:0f:b6:f3:72:a0:9c:89:
b1:fc:9c:3d:bc:ad:a3:bc:c7:f2:f7:3a:61:99:13:
22:cf:94:7f:4d:a8:38:24:1f:ea:7e:ae:0c:db:29:
a0:13:fc:8a:e2:b6:29:2a:98:e3:c0:8c:b6:2c:0a:
d8:0f:5d:0b:f7:c3:f6:b8:91:48:f4:88:c2:11:bd:
0a:9e:f6:8a:06:cd:b4:a4:22:72:39:9c:b8:af:aa:
83:b3:82:88:28:f3:ad:3c:78:c9:c1:d3:25:4d:cf:
bf:69:2b:5c:89:a0:f2:3b:2f:33:b2:8b:dd:05:48:
4c:09:de:de:c2:76:ad:54:63:0c:e0:ea:30:f5:e3:
9a:5c:3e:57:2f:c6:93:47:3a:84:fe:35:8c:de:d3:
20:c7:a6:d1:3e:89:28:e6:0b:ca:dc:49:8b:9e:03:
a5:b2:fd:b0:1b:4b:98:af:e5:3a:4a:93:d5:75:2b:
d1:a8:77:4e:71:dd:04:5f:c8:ad:fe:1f:15:c4:a6:
39:67:35:1e:0e:95:1e:22:f7:23:39:d4:65:6a:b3:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2B:FE:46:70:09:0B:89:3A:FF:D0:C9:79:54:66:AB:FA:3C:C1:B9
X509v3 Authority Key Identifier:
keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.204.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:48:67:3f:e1:41:96:82:c3:c0:69:83:37:f6:66:1d:06:36:
e4:1f:fb:21:75:4c:c8:48:9c:67:b7:0b:ae:ab:e1:fa:ca:61:
f4:10:9a:64:cf:46:fe:e7:a6:e2:49:a0:ab:51:dd:3f:c7:b7:
f5:a0:d8:25:5d:49:54:02:04:ed:9b:72:6e:06:84:3a:86:e9:
25:91:3b:54:61:cc:27:14:b0:11:ed:eb:a9:57:44:02:36:fb:
34:a1:28:a5:f4:c7:1a:f8:c3:15:96:14:53:dd:15:f0:4e:ad:
a4:81:2e:77:49:58:c4:8c:01:ea:10:31:fc:f5:c6:17:63:dc:
7c:dc:15:99:c6:90:bd:6e:9a:3b:f8:5b:19:6e:1a:4f:06:35:
c7:e5:f2:4b:6c:02:f3:59:da:9b:2b:0e:68:e1:5e:f6:9b:ce:
a4:2f:be:b1:1e:ea:9c:cc:fd:e2:e3:5d:36:7e:db:e0:c4:86:
3b:e5:c0:d1:c3:c8:07:d8:2e:01:22:ed:ed:b1:ec:70:f7:09:
34:52:11:86:05:7d:7d:25:bf:48:40:36:f9:ae:be:67:b9:6d:
9e:8b:1f:7d:bc:a5:13:cf:cf:54:c7:82:42:cb:b5:46:5d:ae:
9e:69:60:85:b0:15:53:ce:18:71:18:11:68:15:d1:89:d0:07:
2f:4e:d0:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:12:00 2026 by rpki-client