
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/3130332e35362e3135322e302f32322d3232203d3e20313430323933.roa
File: 3130332e35362e3135322e302f32322d3232203d3e20313430323933.roa (raw, json)
Hash identifier: ImPPU3y8zUBWVvlQ9Qo+FugbAtbXfmTj3yi+DJ+CZ2U=
Subject key identifier: E7:5F:DC:05:F2:C9:57:77:BB:EC:EF:01:64:24:3B:13:C1:7F:A6:54
Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED
Certificate serial: 723BF1D9E68406D41899309B30592CA7E9BC21C1
Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/3130332e35362e3135322e302f32322d3232203d3e20313430323933.roa
Signing time: Fri 08 May 2026 11:33:39 +0000
ROA not before: Fri 08 May 2026 11:28:39 +0000
ROA not after: Fri 07 May 2027 11:33:39 +0000
asID: 140293
IP address blocks: 103.56.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl
rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3b:f1:d9:e6:84:06:d4:18:99:30:9b:30:59:2c:a7:e9:bc:21:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128A765795FE2957B26881E441F8240B52742BED
Validity
Not Before: May 8 11:28:39 2026 GMT
Not After : May 7 11:33:39 2027 GMT
Subject: CN=E75FDC05F2C95777BBECEF0164243B13C17FA654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:8c:29:2d:c2:8f:4d:57:eb:47:6f:5b:2b:
d7:97:94:26:6b:0a:38:9a:49:44:b2:fc:9f:81:8c:
c9:70:b2:17:b2:15:d1:3f:6f:c1:2f:7c:ef:17:60:
2e:f3:20:40:ac:04:1e:a5:bb:3c:a1:7b:6d:b5:16:
61:96:49:00:98:84:b6:7c:86:df:e5:38:0f:b1:38:
b1:d4:28:30:cb:c8:b4:26:4a:a5:34:50:96:02:7a:
02:e8:52:45:54:45:36:fa:04:96:c7:b4:ed:75:f3:
f7:ea:c2:fa:a4:49:94:e9:c2:7e:92:f2:3c:9e:f3:
c7:38:8a:65:7c:30:e1:4e:5d:bf:15:07:b6:b0:f3:
ff:ce:14:60:10:24:78:00:86:f9:6c:92:eb:b5:88:
ff:5e:74:3c:c1:fe:db:9f:6e:92:5a:12:b7:05:ef:
33:79:43:13:64:33:4f:01:a5:fa:e2:c3:00:c2:5e:
78:be:fe:c9:a8:99:46:11:bb:f7:e4:dc:cd:70:2e:
bb:80:4d:e0:5a:0e:d2:62:af:f0:6b:6b:79:72:93:
bb:7c:80:be:3c:84:b1:2f:25:a2:4d:21:d2:cd:eb:
30:b2:9d:21:54:df:5d:36:e9:9a:24:3d:0b:09:0c:
51:d1:3b:9e:c3:fa:e5:42:11:ac:76:79:bc:80:22:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:DC:05:F2:C9:57:77:BB:EC:EF:01:64:24:3B:13:C1:7F:A6:54
X509v3 Authority Key Identifier:
keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/3130332e35362e3135322e302f32322d3232203d3e20313430323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.152.0/22
Signature Algorithm: sha256WithRSAEncryption
60:c3:2b:e6:45:9e:67:f7:a5:a7:16:01:3f:e4:82:36:6c:b2:
64:4b:8e:d6:df:ff:03:6b:98:cb:49:3c:c1:18:55:14:c7:cb:
b5:bd:96:c7:68:a1:b3:74:70:7d:77:50:b1:fd:af:6d:6e:18:
d6:80:89:83:3a:6b:9c:37:6e:e9:9e:c3:1f:d8:53:49:22:a3:
63:56:d9:fc:e4:9e:90:1b:a7:83:9c:0d:3e:66:90:09:1a:b0:
5b:6c:bd:d5:c5:40:b7:c5:ee:d4:47:92:c2:8d:99:0f:e3:2b:
d8:58:d2:32:83:f8:c8:8e:2c:e8:d8:a0:6f:84:85:77:01:d9:
73:b7:d9:95:2b:42:44:c5:fb:5f:54:00:6b:da:e6:cb:e3:2b:
26:44:54:43:b4:21:3a:6a:73:28:3d:0a:aa:ad:38:7c:be:91:
60:31:99:96:a0:da:10:4a:ff:79:fd:56:ee:f0:71:32:23:65:
c9:67:c3:ea:2a:93:85:12:5c:13:15:d1:08:d3:cd:3e:2d:16:
c5:a2:36:ed:a7:33:b3:53:9f:89:f2:0e:5a:e4:e6:98:8f:7b:
5e:ff:b7:78:10:ad:03:c4:43:22:fc:0f:de:3a:aa:cf:1f:b5:
0c:c0:31:a1:bb:6f:0f:ac:6f:cc:fe:db:f3:86:a2:37:7c:f5:
9f:17:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:06 2026 by rpki-client