
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3130332e3230332e39362e302f32322d3232203d3e203538353431.roa
File: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (raw, json)
Hash identifier: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=
Subject key identifier: 45:4C:C5:5F:40:AB:D3:14:DF:41:A4:03:1F:11:BC:CA:A8:0B:E1:E1
Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial: 6E6A13F77B765C07841EF99675277E00A0A223DE
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3130332e3230332e39362e302f32322d3232203d3e203538353431.roa
Signing time: Fri 08 May 2026 08:21:54 +0000
ROA not before: Fri 08 May 2026 08:16:54 +0000
ROA not after: Fri 07 May 2027 08:21:54 +0000
asID: 58541
IP address blocks: 103.203.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6a:13:f7:7b:76:5c:07:84:1e:f9:96:75:27:7e:00:a0:a2:23:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Validity
Not Before: May 8 08:16:54 2026 GMT
Not After : May 7 08:21:54 2027 GMT
Subject: CN=454CC55F40ABD314DF41A4031F11BCCAA80BE1E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:26:69:3e:3e:36:48:c2:62:e5:bb:00:18:
70:92:5c:f9:de:2e:2d:7f:3b:1f:77:81:29:c3:41:
68:a6:05:81:27:25:d0:1c:a4:28:be:e4:02:2d:13:
24:c9:51:1f:d7:1e:b9:cf:fd:6a:71:0a:da:29:c1:
37:1a:cf:e8:19:9e:c6:16:35:3e:6c:68:6f:3b:70:
42:44:c8:68:f0:3b:19:6d:22:2f:a7:4c:fb:78:38:
a2:6f:6e:f8:23:f9:d9:45:39:f3:38:51:73:b5:28:
f1:57:cc:29:5c:96:9e:7e:8c:a2:17:bb:90:c5:0e:
b8:b5:39:9e:80:4b:61:78:4e:b9:79:1f:f8:5d:0c:
ac:45:48:48:be:3c:19:c5:d7:64:b0:62:ba:86:de:
1a:3b:ac:d1:a6:af:48:cf:98:de:53:2b:d0:73:7e:
3d:e7:9e:f7:84:4b:b2:53:e3:2c:44:7f:44:fc:cb:
f7:ad:6b:1a:42:27:3c:38:86:09:24:99:44:74:9d:
73:d9:71:29:03:38:5a:37:77:09:e8:d0:1e:5d:b1:
8b:1b:6a:b3:59:8b:ae:d9:3f:63:18:eb:14:ba:54:
43:46:ad:0e:90:9b:a6:6b:8f:1e:66:3b:49:5f:40:
9b:cc:00:d3:1e:9e:f8:2f:fe:dd:93:b8:d7:66:40:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4C:C5:5F:40:AB:D3:14:DF:41:A4:03:1F:11:BC:CA:A8:0B:E1:E1
X509v3 Authority Key Identifier:
keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3130332e3230332e39362e302f32322d3232203d3e203538353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.96.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a0:f5:3f:8b:36:45:fd:62:3f:64:1f:6a:52:2b:b4:84:6d:
84:76:40:2c:3a:66:04:d6:64:1b:8e:a4:6c:e7:25:35:71:14:
07:9b:16:ed:17:4b:6d:00:a1:3c:6a:87:e6:e5:c7:40:f8:49:
4d:19:29:10:66:b0:e0:21:5f:67:f2:e6:7e:d4:7b:81:19:9d:
74:04:72:ea:e0:50:f9:51:d7:e6:47:f0:34:d7:4a:2a:b2:6a:
4c:d6:fa:1c:dd:46:1c:9d:dd:f1:47:36:0b:cf:30:b5:8d:84:
40:72:89:6e:01:d9:fd:0c:df:d3:0c:7c:67:5e:2e:6a:6c:e1:
be:c9:70:c4:e3:c7:d5:81:42:89:95:c3:82:ad:a2:ea:a1:ea:
c7:82:b0:d4:d9:9d:29:e5:f2:4a:90:7b:70:02:ec:1e:5b:df:
92:5f:55:9b:ef:be:a7:16:93:da:4a:3a:2e:7e:ee:7b:e6:69:
0a:a7:d3:53:de:2a:6e:61:32:a1:a6:bf:79:be:fb:37:dd:d0:
0c:08:12:c2:c5:c3:e2:a8:b6:21:0e:bb:ff:3e:3d:02:98:82:
19:4d:41:47:db:c9:9b:f7:98:e7:20:b1:2e:50:66:9d:76:d8:
95:db:58:17:3b:f0:77:e1:16:1d:8b:fb:46:b5:e7:61:c5:34:
d5:c9:31:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:42:17 2026 by rpki-client