
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa
File: 3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: faYHbH2+3j9/Ony37KmQvkIJuhAPvtebefAllPPbfTA=
Subject key identifier: E1:DD:D4:82:AB:80:C2:83:FF:64:EA:02:EF:78:B0:49:E0:DC:0A:DE
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 3BAC34ED02D63DC857771B171A4D03AC30C229C0
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:41:54 +0000
ROA not before: Fri 08 May 2026 09:36:54 +0000
ROA not after: Fri 07 May 2027 09:41:54 +0000
asID: 146817
IP address blocks: 103.120.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ac:34:ed:02:d6:3d:c8:57:77:1b:17:1a:4d:03:ac:30:c2:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:36:54 2026 GMT
Not After : May 7 09:41:54 2027 GMT
Subject: CN=E1DDD482AB80C283FF64EA02EF78B049E0DC0ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:f7:a7:2d:5a:3d:22:3e:04:6a:67:46:63:
04:a6:30:85:60:f7:d3:ee:72:4e:24:4c:11:48:35:
2f:00:c6:41:b4:40:cb:6e:a8:10:f2:38:2d:5b:eb:
da:0c:96:b4:cd:47:b5:4e:76:01:f2:e6:25:87:fa:
70:61:d3:fe:5b:83:ac:d3:b7:11:ab:bd:40:2f:f2:
95:40:f8:95:0c:74:1d:1a:40:ee:f8:db:c0:92:25:
ba:38:ff:e2:03:ed:f9:30:db:92:b4:dc:c7:ab:c0:
05:59:73:1e:61:10:3a:d7:f9:71:d4:0f:f8:89:09:
06:1c:66:44:b4:3f:5f:45:db:41:aa:25:66:5b:fd:
09:0f:d1:dd:ea:d0:15:cf:8f:9e:0d:3d:bd:fa:21:
7f:53:c3:23:02:63:48:ee:a3:68:95:b2:a3:ab:fb:
97:e8:ca:13:96:d2:f0:9c:1e:84:fa:c2:04:f7:e7:
6d:d9:c2:40:2c:c4:41:98:05:1f:77:c0:b4:96:46:
00:24:59:a4:39:40:66:99:aa:a5:13:65:2e:37:57:
6d:e4:68:5b:bd:d2:12:87:fd:30:ea:9d:3c:10:94:
5c:0d:42:c0:d5:b3:de:ee:00:56:2c:67:2f:00:13:
e6:a5:ea:db:dd:fa:fb:ec:38:92:f8:0e:b9:69:44:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:D4:82:AB:80:C2:83:FF:64:EA:02:EF:78:B0:49:E0:DC:0A:DE
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.89.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:4a:e4:ee:66:2b:25:c0:71:32:21:ae:49:8b:62:58:ea:6a:
71:72:c0:46:fd:5f:bb:94:03:2a:60:32:82:a4:37:e5:db:74:
b1:38:05:0b:5d:7e:a7:2e:30:17:ef:d4:34:c6:43:39:98:43:
e1:8d:0f:13:d1:81:72:9e:aa:96:57:c0:3e:c4:76:d6:77:c6:
81:ea:1e:2a:e4:3b:0f:d5:47:df:93:38:b9:f2:6b:a3:fd:e4:
fe:9d:26:7d:4a:bb:20:50:a2:42:6a:26:bb:3c:71:2b:9f:44:
3e:94:0f:48:1a:87:2e:05:25:e6:db:f5:f0:db:c9:19:52:f5:
97:18:41:22:cd:49:c3:fd:dd:ee:f3:1b:9e:ec:ad:94:94:be:
92:ca:55:f9:3e:db:65:03:b3:15:5b:23:33:b1:32:1f:e5:3d:
dd:0e:93:50:cb:bb:18:a5:6b:80:58:0e:4a:0b:4a:e0:e6:db:
2f:eb:e3:b4:eb:1e:7e:57:90:c2:b2:29:5a:34:5d:d7:2e:b9:
62:6a:8a:b6:4d:4c:7b:c6:93:96:45:71:8b:b6:ef:57:f6:39:
23:f5:b7:1f:a2:77:c2:e1:17:ca:51:6d:82:3e:b9:31:e9:76:
6b:87:ce:04:d5:7c:c1:7e:f1:ae:5b:aa:fb:23:ec:e5:78:dd:
da:b7:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:19 2026 by rpki-client