
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38382e302f32322d3232203d3e20313436383137.roa
File: 3130332e3132302e38382e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier: uefeqZ1PoU30C3q70fy+aswUI8PsKiL2Hj72aTVkV2s=
Subject key identifier: 04:C5:C2:0C:70:37:56:AF:85:24:83:7D:C7:CB:07:28:32:2F:3F:14
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 22717D4F47D05D22579BE16DBC495543731A6B51
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38382e302f32322d3232203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:41:54 +0000
ROA not before: Fri 08 May 2026 09:36:54 +0000
ROA not after: Fri 07 May 2027 09:41:54 +0000
asID: 146817
IP address blocks: 103.120.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:71:7d:4f:47:d0:5d:22:57:9b:e1:6d:bc:49:55:43:73:1a:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:36:54 2026 GMT
Not After : May 7 09:41:54 2027 GMT
Subject: CN=04C5C20C703756AF8524837DC7CB0728322F3F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:8b:c0:22:ca:9e:cb:f6:b8:48:2b:35:d9:
cb:5e:3f:9b:62:be:92:db:aa:74:48:06:80:4c:d2:
2e:96:72:40:e6:70:74:27:42:df:34:bd:2f:2c:b8:
2a:d7:b6:fd:f9:49:c2:64:fd:bd:c8:6a:92:00:9f:
49:05:61:36:0c:4e:60:72:82:37:91:99:4d:a1:aa:
73:03:13:47:06:8d:ad:d1:38:a3:57:e5:48:a4:a1:
e3:10:e5:44:1c:a2:fb:6d:df:a3:0f:99:51:37:3b:
5e:f6:d9:a3:1b:7e:42:cb:00:0b:78:cc:b0:d9:32:
39:fe:65:19:e2:14:10:3c:7c:46:ec:7d:1c:cf:5c:
f9:6b:7a:44:8b:56:10:ff:3a:58:1e:b9:fd:a7:25:
fd:db:8f:36:6f:18:08:b0:83:61:0c:b5:79:cc:74:
d5:08:33:ea:ae:92:31:21:ed:27:93:b4:b8:f0:90:
05:ed:1a:3d:d7:26:13:95:24:78:e7:9f:03:ef:e6:
f9:4a:91:1b:16:eb:d4:87:ff:8f:1b:f9:fc:21:b6:
1d:8d:c3:0c:cd:60:41:7b:e2:89:4a:04:02:cc:57:
56:11:86:e6:cd:1c:fe:d0:11:5d:e8:54:be:56:87:
02:64:59:15:ec:a6:d0:99:9d:ef:45:3b:94:51:1e:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C5:C2:0C:70:37:56:AF:85:24:83:7D:C7:CB:07:28:32:2F:3F:14
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38382e302f32322d3232203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.88.0/22
Signature Algorithm: sha256WithRSAEncryption
23:1f:18:3e:1f:d4:55:f4:24:18:f0:bd:45:39:7b:bb:7c:5a:
dd:72:37:56:4e:db:1b:fc:82:ef:86:de:94:e0:12:08:2a:08:
9d:fc:d6:7f:ee:e9:12:2b:f7:e7:5f:93:ea:94:c4:4c:42:c4:
e4:c0:b6:b2:13:77:ec:66:2f:6e:04:43:d4:e9:f0:f8:5c:77:
6c:f6:6b:4d:b1:61:60:ad:cc:ca:5c:09:15:83:62:54:2a:2c:
e7:2f:46:72:70:26:11:e5:35:61:ea:52:89:95:65:00:15:22:
59:85:ed:d2:22:b7:82:ad:3c:0a:e4:c6:39:f8:50:51:76:e4:
4b:0c:75:f2:13:de:3f:5d:39:96:0c:e6:a6:45:0d:a9:1e:1c:
23:d1:a5:ad:ef:e5:77:b5:bd:b5:68:31:74:c0:fa:1d:2a:43:
49:87:a2:18:be:12:d7:66:fc:77:f7:05:5b:1e:ec:74:73:24:
4e:24:af:12:04:4e:ad:6b:cd:eb:37:3c:17:78:95:28:47:25:
5c:dc:3b:ea:02:a9:96:80:f7:e8:73:40:cf:28:03:1b:73:33:
96:bd:14:4e:d1:18:17:75:03:d8:e7:27:f9:02:eb:bb:af:68:
7e:68:1f:b0:16:27:27:89:49:04:4c:3b:77:65:2f:00:af:e1:
b1:b4:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:23 2026 by rpki-client