
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32342d3234203d3e20313436383137.roa
File: 3130332e33392e36342e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: Ch0NDH3hPSsd8H8VtiCK1KzZLqEjFRMzbPLG9CzVsC0=
Subject key identifier: E8:6C:74:FA:D1:88:E0:2C:7F:9A:9D:04:87:F0:53:87:2F:BE:D1:72
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 18B0507F899CE8E7F95599603E38CAF73074E373
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:48:50 +0000
ROA not before: Fri 08 May 2026 09:43:50 +0000
ROA not after: Fri 07 May 2027 09:48:50 +0000
asID: 146817
IP address blocks: 103.39.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b0:50:7f:89:9c:e8:e7:f9:55:99:60:3e:38:ca:f7:30:74:e3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:43:50 2026 GMT
Not After : May 7 09:48:50 2027 GMT
Subject: CN=E86C74FAD188E02C7F9A9D0487F053872FBED172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:0c:10:2e:12:47:e8:9a:e2:8c:67:35:17:
99:6e:f4:7b:dc:0a:d8:ec:b7:ae:a3:79:da:14:31:
36:b9:19:1a:a3:1f:25:68:26:0b:27:f7:7e:4c:48:
72:57:1b:3e:3a:ff:9e:a5:0d:dd:34:a3:84:b8:da:
7d:a3:a5:80:43:d8:d9:a5:7e:eb:49:77:70:1a:26:
98:5c:50:25:00:8d:29:07:0b:41:23:da:a6:8b:e5:
c8:9e:f4:a8:84:e5:01:35:55:9b:28:10:7e:2c:47:
d5:29:a6:72:77:f1:6d:93:63:20:7d:0c:cc:55:ab:
8a:5e:fe:ba:b4:1f:d4:85:2b:16:61:52:2e:d0:0b:
52:da:ac:34:d1:ed:cd:e9:7f:6a:fd:df:64:fb:57:
fe:1c:b3:04:47:47:a7:f4:77:86:9d:e5:00:29:81:
c6:f8:b4:8c:f5:79:ab:23:71:63:71:e7:89:a4:ca:
f7:4b:3e:51:6b:f8:c9:70:15:44:b9:8a:fc:20:ae:
ed:b1:6e:23:3c:ea:1d:09:b5:05:16:57:c4:04:89:
d1:e8:c3:77:9a:50:0e:65:ac:46:c6:7e:da:c1:e4:
e9:6c:78:83:02:b0:d2:f8:bb:06:16:e0:21:6e:98:
3e:39:37:79:9c:70:f1:bf:cb:9b:20:ee:99:04:33:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:74:FA:D1:88:E0:2C:7F:9A:9D:04:87:F0:53:87:2F:BE:D1:72
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.64.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bc:15:31:d4:e6:38:f2:58:ea:3d:a4:e2:12:cc:46:13:61:
a8:d7:b0:79:83:59:26:38:ad:fe:56:67:be:62:4a:37:b0:8b:
a6:9a:75:1e:a2:5f:65:db:13:a9:d2:70:a0:93:ad:3e:8d:78:
3d:00:0e:a0:24:89:97:3c:e5:a4:00:0a:28:c0:33:ab:a9:4a:
b8:4a:a6:34:56:58:87:bf:af:b2:8b:5d:a8:c2:55:0a:9f:e1:
5e:2b:69:96:6a:fa:de:7c:1c:86:07:5d:e5:9c:3f:44:e0:31:
82:73:fb:86:c3:89:04:32:24:79:ba:a0:74:78:d4:00:f6:84:
ed:cb:4c:ae:76:9b:62:f5:03:b5:db:3a:e6:f8:86:1c:6c:3b:
ba:46:6e:cf:f6:e6:32:1e:97:c9:33:e1:04:1e:9f:73:16:e4:
38:be:29:36:30:dc:a3:14:15:9e:8e:dc:08:38:7c:a2:5a:59:
e5:4a:f8:a6:0d:8c:87:87:23:0a:18:ca:3f:5a:40:d8:f7:d7:
dd:30:55:53:e3:e4:0c:64:57:4f:a8:3f:cd:ce:b2:32:d0:5a:
4e:d5:7d:d5:cd:5f:1e:14:17:41:92:40:85:27:b9:bd:47:51:
c8:91:30:e6:08:5e:3b:e2:08:7f:ed:47:02:7a:26:b8:50:60:
4e:24:ec:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:25 2026 by rpki-client