
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3138342e302f32322d3232203d3e20313436383137.roa
File: 3130332e3231372e3138342e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier: 6UYDsSXeaxxaafAndiUj8QnhDIROfqOd5A3BfC7fi+M=
Subject key identifier: 3F:4D:DA:3B:12:55:34:7B:36:75:8E:CB:2E:A6:BC:97:90:CC:AD:FB
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 58CCEAFE1DAD92099F576248A80548DC0332DCEB
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3138342e302f32322d3232203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:34:29 +0000
ROA not before: Fri 08 May 2026 09:29:29 +0000
ROA not after: Fri 07 May 2027 09:34:29 +0000
asID: 146817
IP address blocks: 103.217.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cc:ea:fe:1d:ad:92:09:9f:57:62:48:a8:05:48:dc:03:32:dc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:29:29 2026 GMT
Not After : May 7 09:34:29 2027 GMT
Subject: CN=3F4DDA3B1255347B36758ECB2EA6BC9790CCADFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:d3:da:f8:c3:21:99:67:3e:01:2f:20:24:
03:f8:89:9d:7e:65:b2:80:3c:7e:66:fd:4b:58:10:
65:b1:76:ff:3e:df:bc:b7:c5:c6:81:16:6d:e5:27:
59:70:ec:4b:4e:8b:56:34:33:ae:50:f7:5f:cb:0a:
b8:ed:ce:d7:0a:db:7b:ae:e1:d4:a6:da:f4:d6:56:
ee:c8:25:86:ee:0c:41:12:5a:b3:35:eb:0c:c5:e1:
a4:ce:60:43:aa:e4:87:db:bf:11:70:9f:8f:37:bd:
54:e1:df:30:f2:94:67:f0:1b:99:c8:b1:8c:b5:36:
33:70:12:b6:df:82:a1:b3:6a:75:18:28:f2:53:19:
3f:97:22:7b:79:5e:cb:06:6d:c9:4e:fd:39:4a:d2:
34:24:c9:58:1a:1c:63:80:f2:45:01:0d:3d:f8:fd:
7c:dd:11:11:3a:85:f1:73:44:b5:e7:23:1f:d8:7c:
ec:f6:65:05:36:3b:93:50:9a:dc:3c:04:74:eb:47:
1c:a9:a2:19:3b:5c:bc:39:0d:39:b8:c4:39:d5:fe:
5a:1b:2e:6a:1c:cf:45:63:b1:e0:90:cf:03:12:42:
69:73:ea:ee:67:80:82:3e:da:2b:38:22:f5:88:2e:
1c:35:2b:ce:a1:56:96:d3:d5:d4:6f:fb:79:f7:3c:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:DA:3B:12:55:34:7B:36:75:8E:CB:2E:A6:BC:97:90:CC:AD:FB
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3138342e302f32322d3232203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.217.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:09:1e:fd:75:3e:29:21:de:a8:fb:4e:d1:48:13:5a:3e:da:
c2:43:4f:b0:50:f6:25:b9:bb:48:59:c7:b0:ae:91:35:a5:0d:
4e:df:43:fe:3f:6d:c4:ee:f2:59:d0:ad:36:3e:02:58:33:93:
4f:a2:5b:8e:22:14:e3:2d:2c:86:4f:96:39:14:87:30:f3:08:
0b:4f:b1:17:53:ac:91:35:6f:3e:1d:e1:7a:c9:79:1d:06:8f:
23:45:8d:89:16:fc:4f:aa:c7:cb:26:7e:a6:56:10:33:f0:b5:
ab:73:22:42:24:69:34:83:00:72:e2:1c:4c:21:6b:7d:99:55:
85:43:7e:10:5a:b9:0b:f9:18:1e:c4:11:2d:56:cb:c0:09:82:
6d:08:30:be:d7:45:75:6c:57:bf:5f:1b:70:7f:13:16:60:f0:
e7:b6:92:ac:73:84:ac:93:de:8e:cd:15:5e:d1:a7:6f:a6:c7:
35:48:17:cc:12:fc:bb:e5:61:bd:6e:a9:c9:c9:02:de:13:ea:
5a:f0:69:30:a7:63:d1:d5:2d:50:b5:76:31:a6:59:ae:fa:70:
30:d3:7a:f0:61:61:85:11:94:4d:37:a7:b0:c6:51:e0:a2:cf:
cd:81:87:70:3b:b4:c8:52:d8:ed:35:95:4a:22:2c:ea:a5:21:
66:37:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:15 2026 by rpki-client