
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32322d3232203d3e20313436383137.roa
File: 3130332e33392e36342e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier: wOuQlt/FgN7JePvHzwK9ocNlznLMfT1frycDzxpR6eY=
Subject key identifier: E8:8A:02:36:AF:75:0C:3A:A1:14:1C:44:2F:D7:6D:C7:98:87:7B:83
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 2A2E9E4174A84194CC00FC6A01904B56FAF7079B
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32322d3232203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:48:49 +0000
ROA not before: Fri 08 May 2026 09:43:49 +0000
ROA not after: Fri 07 May 2027 09:48:49 +0000
asID: 146817
IP address blocks: 103.39.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2e:9e:41:74:a8:41:94:cc:00:fc:6a:01:90:4b:56:fa:f7:07:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:43:49 2026 GMT
Not After : May 7 09:48:49 2027 GMT
Subject: CN=E88A0236AF750C3AA1141C442FD76DC798877B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:d1:f1:b7:1f:9a:0d:9e:f3:e2:0a:b3:5e:
6d:a4:63:03:fb:a9:62:f0:cb:b9:ca:2b:5d:48:a5:
e7:c9:5d:4e:ca:ae:e1:0c:b4:7c:8b:0b:c9:bf:d9:
dd:2d:2b:ca:0f:84:53:45:fc:43:36:da:3b:6b:bd:
19:27:fe:e1:b9:63:fc:91:35:bc:c9:58:4e:0d:22:
c1:fd:b3:49:86:86:e3:70:cd:94:03:b8:96:a0:2e:
f8:9f:95:50:89:91:93:00:13:1f:ec:f5:5d:fb:ee:
c1:da:e7:ce:4a:c4:b4:79:de:93:c7:2e:c0:73:f9:
48:d1:07:30:9c:fa:45:e1:20:48:be:0a:56:80:9d:
f0:0b:3e:6f:d7:0d:78:f5:68:a8:0b:60:a4:20:72:
1e:4e:f1:73:66:94:b9:75:f4:ab:52:66:5b:6e:77:
25:4b:63:33:ed:ff:a6:fe:2e:9f:c9:b5:c1:0a:21:
06:ba:25:40:d5:08:fd:8c:62:ce:d1:23:06:2a:2f:
d7:16:d7:1e:37:8c:23:b1:ff:83:33:96:99:d7:ee:
c6:72:a6:d3:e9:91:ff:92:a5:93:89:ce:d5:40:80:
77:35:b5:19:b1:71:29:fe:db:51:01:a2:fa:83:09:
b5:b8:6c:c5:61:9f:b9:5f:a8:57:1a:cc:02:63:65:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8A:02:36:AF:75:0C:3A:A1:14:1C:44:2F:D7:6D:C7:98:87:7B:83
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32322d3232203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.64.0/22
Signature Algorithm: sha256WithRSAEncryption
30:4a:92:c9:f3:46:73:72:f6:a3:a5:2f:b4:af:ff:d4:9b:d3:
5b:0c:60:28:20:47:04:f4:63:31:be:52:36:58:a6:62:af:f9:
09:90:49:42:cb:0b:6e:5d:5a:83:4e:a7:d3:1f:1a:0f:ad:7a:
57:44:b7:32:24:99:d7:a2:91:11:83:53:2d:1e:cd:84:cd:a1:
65:51:b7:76:95:c5:f1:ae:01:8b:38:c1:2d:43:b6:e0:21:ba:
31:96:72:d3:32:4f:42:fd:90:fb:b1:a2:33:1c:50:6a:09:b4:
6e:48:49:30:83:05:63:d2:66:3b:42:11:49:90:c5:95:36:87:
c0:e6:3c:7f:c1:4c:b4:c6:52:1b:95:82:79:45:30:0b:e7:a0:
0e:36:c5:30:ff:3d:cc:6a:d9:fb:f9:88:ea:fb:6f:c5:9b:55:
2b:d2:52:ea:25:3d:df:87:91:35:38:74:df:0d:da:ff:99:b7:
16:1d:a2:cd:55:cc:d9:26:a9:7b:d3:b8:61:e1:36:64:30:4d:
a3:bb:8b:a6:52:4a:ba:8f:38:b3:5e:4c:ca:24:3c:52:55:5f:
14:74:7d:dc:84:3b:e9:20:d6:45:93:b1:70:2a:3b:55:d9:9b:
d5:4a:e1:ca:ff:2a:14:19:da:0f:5d:f9:5e:36:02:02:35:4e:
c6:6a:6b:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:27 2026 by rpki-client