
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa
File: 3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: lksEDfTBLhTki/Ep3H+dy7jbsWT52psiivn/d38PdDs=
Subject key identifier: 57:26:49:C7:EA:1F:A4:16:CF:45:26:0D:4D:1C:6A:A7:F6:3F:A7:C2
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 28CC9297FD10666C5112F790CC90EC320DF28637
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:41:55 +0000
ROA not before: Fri 08 May 2026 09:36:55 +0000
ROA not after: Fri 07 May 2027 09:41:55 +0000
asID: 146817
IP address blocks: 103.184.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cc:92:97:fd:10:66:6c:51:12:f7:90:cc:90:ec:32:0d:f2:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:36:55 2026 GMT
Not After : May 7 09:41:55 2027 GMT
Subject: CN=572649C7EA1FA416CF45260D4D1C6AA7F63FA7C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:c8:06:37:8e:8c:c1:82:c7:d3:1c:07:90:
1f:ba:9a:06:d8:46:a2:8a:7b:ae:41:06:1a:f1:7d:
1c:71:d7:b2:75:20:08:a4:68:41:b1:1c:2e:c3:a4:
33:73:1e:8a:c5:d6:b5:d3:68:ac:74:58:64:94:6c:
7e:ea:c3:57:9b:9a:cd:d6:06:e1:f3:00:0f:a7:ed:
e5:b0:cd:35:04:f4:cd:24:91:41:a1:00:15:20:7a:
12:50:5d:e5:6f:6b:36:b1:1e:88:2c:01:cc:95:99:
49:7f:b6:f3:55:ee:c6:2d:af:20:1e:3f:55:f2:ac:
fe:ee:eb:6e:f9:20:01:58:52:21:e1:9c:d7:3a:30:
33:4c:bd:23:0c:d0:ce:72:9c:f8:45:80:41:1d:f8:
3e:4f:83:ad:a9:45:e0:a2:98:fe:ac:b7:e9:f5:3c:
aa:26:a4:63:84:1a:cd:d9:11:78:a8:d7:9f:9d:70:
2c:51:39:7e:41:46:a3:bc:e8:01:55:80:e1:59:60:
35:12:9d:b0:36:eb:1c:03:86:14:12:2e:71:e7:11:
1a:77:07:45:fd:f2:ca:1a:f9:24:ee:c2:1c:a0:46:
29:ab:9b:18:d0:df:ad:e5:19:a3:76:ac:a5:2f:d2:
39:a5:bb:72:40:e6:93:88:0b:1b:e1:51:81:ff:3f:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:26:49:C7:EA:1F:A4:16:CF:45:26:0D:4D:1C:6A:A7:F6:3F:A7:C2
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:67:ba:42:b2:6c:3d:0c:a5:df:68:dd:cc:7c:23:dc:29:4d:
e7:74:26:73:f8:d1:e5:d3:fe:0b:a9:41:cc:3c:b8:79:4b:60:
e6:c1:e5:be:5f:1a:ce:4b:7a:9c:1f:42:76:45:51:20:13:53:
1e:61:97:14:ee:7d:6c:44:7d:f1:e1:83:4b:c2:69:ea:b1:eb:
0f:7f:30:b5:eb:6d:e2:dd:25:f9:79:1b:89:6d:5d:f0:98:bb:
87:f9:42:d6:6f:6f:85:46:7f:d3:d0:48:86:af:79:05:d9:95:
09:16:bc:59:25:4f:1f:75:e1:78:41:dd:71:e6:31:5c:93:f6:
5f:47:8d:b8:72:3e:ba:e4:d4:23:c6:46:9e:5e:d8:7c:56:b3:
4f:00:56:09:2f:1e:ad:75:c4:cd:5b:82:52:51:8d:93:23:86:
ca:22:81:57:8e:fe:83:6b:b2:1b:4e:82:65:be:a1:b6:04:23:
1c:d4:a9:02:a3:79:60:7e:86:61:3b:9c:0e:c2:06:82:45:83:
3c:96:1a:e6:19:63:02:4e:f3:54:72:b8:1c:66:ea:30:8b:34:
91:99:24:1c:19:e4:e8:1a:b1:53:fd:53:dd:69:4b:55:ac:98:
b2:d5:86:0a:22:b6:aa:d5:6a:99:5c:cb:7d:a8:5e:fe:86:51:
ec:0f:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:17 2026 by rpki-client