
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37372e302f32342d3234203d3e20313436383137.roa
File: 3130332e33382e37372e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: HKawEyVJJD5O6pchXRz+LmMXLDRyck4TSGOdeV9xTOw=
Subject key identifier: 8D:EE:F1:14:F2:C8:BB:AB:7D:8A:DB:19:57:C6:F1:E6:0A:BD:65:14
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 074E9D30F4A93E5DD49079B3579AA00E4F3EF9DC
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37372e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:47:17 +0000
ROA not before: Fri 08 May 2026 09:42:17 +0000
ROA not after: Fri 07 May 2027 09:47:17 +0000
asID: 146817
IP address blocks: 103.38.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4e:9d:30:f4:a9:3e:5d:d4:90:79:b3:57:9a:a0:0e:4f:3e:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:42:17 2026 GMT
Not After : May 7 09:47:17 2027 GMT
Subject: CN=8DEEF114F2C8BBAB7D8ADB1957C6F1E60ABD6514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:29:5e:84:d4:ce:4b:99:91:c1:12:f5:c2:
4a:85:b5:2b:95:fc:76:96:b1:28:8d:a0:7a:50:72:
82:5e:61:f3:52:39:a8:8c:0d:ef:a3:9f:e0:c9:89:
85:58:89:f8:fa:ff:34:e4:f7:f0:a9:1d:d8:33:99:
dd:5c:33:8c:16:1d:26:de:6d:bc:c4:1d:3d:36:ed:
e0:c7:1f:17:50:eb:2f:ba:e9:06:3c:13:19:ab:45:
df:30:79:d3:6d:4b:ab:1c:15:1f:db:ed:58:9e:61:
ea:49:d2:f7:7f:f7:2a:1e:19:6c:b9:f4:b4:c5:c2:
53:79:1e:50:95:36:bc:d6:f2:c6:62:0d:b3:0e:72:
a7:6b:6e:e4:7c:c2:ff:82:2a:2c:26:d2:b1:cc:2e:
05:de:da:45:47:ae:11:23:35:30:50:b6:eb:f1:94:
73:a9:65:02:8f:f1:64:0c:ca:f6:39:6e:9d:a0:ca:
fc:f9:ff:f3:15:d8:42:ed:00:7e:d4:f3:07:5f:c7:
42:31:00:b3:42:a0:e3:1a:e9:70:43:2e:b2:c7:32:
ba:a2:d6:62:2c:b8:bd:f0:7c:ff:4d:86:78:45:52:
62:14:ef:30:87:2b:6e:d1:24:8d:e0:0e:fc:5f:5b:
84:f4:95:ca:cc:ea:e7:c8:ff:91:c9:88:7c:e5:a1:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:F1:14:F2:C8:BB:AB:7D:8A:DB:19:57:C6:F1:E6:0A:BD:65:14
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37372e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:71:72:15:64:d7:0d:ae:d9:f3:e7:df:31:a8:71:07:0f:5f:
50:78:c3:9d:2c:a4:11:fb:0c:ff:e2:a6:01:02:7c:e9:91:ef:
d4:e7:14:a3:3a:c6:40:6a:5a:ab:1c:b8:09:5f:17:00:70:a2:
ff:7d:c5:ee:8c:d4:4f:64:23:a2:e5:0b:9d:eb:59:4b:3e:0a:
6e:67:a3:1d:36:66:56:18:5f:f0:70:6b:6b:0b:1d:11:e5:f9:
93:73:d8:e4:94:37:12:c4:51:48:56:f6:8a:04:69:de:6f:f5:
10:06:c2:96:42:85:2f:e6:b2:71:df:0f:02:a5:a8:34:02:15:
90:f1:6b:2a:aa:a6:c9:40:47:4d:a2:75:ef:9b:13:97:2c:92:
a6:04:39:af:57:40:e5:87:7b:88:fb:d6:c8:d9:b3:27:47:ff:
2e:1a:5a:f7:fd:9f:6d:75:65:56:af:d3:6d:3e:6a:a4:3c:93:
df:52:0a:59:64:24:e0:50:9e:01:97:ff:e4:3e:cd:9a:34:68:
8f:9e:9e:ec:8a:d1:d1:a3:2e:05:c5:61:9e:f9:4c:b3:48:fb:
98:4b:13:63:87:c3:10:81:4e:53:62:ad:17:5c:ee:56:ca:f8:
c3:b5:73:24:2f:1d:26:c7:ad:f1:2b:31:78:b4:aa:8f:1e:c6:
c6:1f:68:fd
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUB06dMPSpPl3UkHmzV5qgDk8++dwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTdaFw0yNzA1MDcwOTQ3MTdaMDMxMTAvBgNV
BAMTKDhERUVGMTE0RjJDOEJCQUI3RDhBREIxOTU3QzZGMUU2MEFCRDY1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQilehNTOS5mRwRL1wkqFtSuV
/HaWsSiNoHpQcoJeYfNSOaiMDe+jn+DJiYVYifj6/zTk9/CpHdgzmd1cM4wWHSbe
bbzEHT027eDHHxdQ6y+66QY8ExmrRd8wedNtS6scFR/b7VieYepJ0vd/9yoeGWy5
9LTFwlN5HlCVNrzW8sZiDbMOcqdrbuR8wv+CKiwm0rHMLgXe2kVHrhEjNTBQtuvx
lHOpZQKP8WQMyvY5bp2gyvz5//MV2ELtAH7U8wdfx0IxALNCoOMa6XBDLrLHMrqi
1mIsuL3wfP9NhnhFUmIU7zCHK27RJI3gDvxfW4T0lcrM6ufI/5HJiHzloSubAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUje7xFPLIu6t9itsZV8bx5gq9ZRQwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNTA1ODA3Mjk0MzkxOTExNy8wLzMxMzAzMzJlMzMz
ODJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcmTTANBgkqhkiG9w0BAQsFAAOCAQEAtHFyFWTXDa7Z8+ffMahxBw9f
UHjDnSykEfsM/+KmAQJ86ZHv1OcUozrGQGpaqxy4CV8XAHCi/33F7ozUT2QjouUL
netZSz4KbmejHTZmVhhf8HBrawsdEeX5k3PY5JQ3EsRRSFb2igRp3m/1EAbClkKF
L+aycd8PAqWoNAIVkPFrKqqmyUBHTaJ175sTlyySpgQ5r1dA5Yd7iPvWyNmzJ0f/
Lhpa9/2fbXVlVq/TbT5qpDyT31IKWWQk4FCeAZf/5D7NmjRoj56e7IrR0aMuBcVh
nvlMs0j7mEsTY4fDEIFOU2KtF1zuVsr4w7VzJC8dJset8SsxeLSqjx7Gxh9o/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:27 2026 by rpki-client