
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36372e302f32342d3234203d3e20313436383137.roa
File: 3130332e33392e36372e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: 4BrId0ha4NIMn7Wbont3p/AHQtaK3QoQbjhwLk2SpM8=
Subject key identifier: 85:04:4C:34:70:E8:E1:B4:B5:00:44:BE:4C:B4:6A:4D:D3:17:A1:FE
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 2BD99B206EB0389214D3B369969CECEEA790BB5D
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36372e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:48:49 +0000
ROA not before: Fri 08 May 2026 09:43:49 +0000
ROA not after: Fri 07 May 2027 09:48:49 +0000
asID: 146817
IP address blocks: 103.39.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d9:9b:20:6e:b0:38:92:14:d3:b3:69:96:9c:ec:ee:a7:90:bb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:43:49 2026 GMT
Not After : May 7 09:48:49 2027 GMT
Subject: CN=85044C3470E8E1B4B50044BE4CB46A4DD317A1FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:4c:f1:67:f3:06:6c:b1:ce:c8:90:29:af:
54:e0:4f:a3:f0:a8:4b:e8:47:92:5f:93:a8:de:16:
60:05:48:4d:4d:91:83:0e:cc:a6:da:f1:e1:d4:ce:
f8:e9:0c:68:f6:e9:8d:ed:b8:af:17:9e:a0:8f:69:
09:d7:6a:0b:9b:de:8c:0e:cf:bb:21:b6:11:30:f5:
14:d3:f2:d8:c7:67:93:fa:11:91:e2:70:c3:17:09:
a5:ca:82:73:b6:11:58:2d:8c:73:31:b9:93:1b:48:
32:91:95:6b:d3:e4:4f:b3:60:c3:fe:77:92:4b:06:
f2:ec:f1:96:31:df:c1:b9:9b:60:25:e9:84:fe:66:
e9:10:63:69:5b:fc:17:51:ec:4e:0a:fb:18:56:15:
3f:b7:a3:b3:eb:04:31:99:ce:bb:75:ec:d1:e0:b1:
82:9b:02:ce:e5:31:77:f1:c4:ad:37:af:04:3e:12:
a8:d4:58:2f:8b:59:43:7c:37:59:6a:d7:ad:8c:1d:
63:88:ef:5b:b9:b3:51:ee:15:c6:75:32:0a:74:91:
ad:2e:b2:69:c7:24:c7:5f:ec:20:96:ae:c7:c8:99:
2c:f8:2a:39:50:9c:6a:aa:16:e8:55:d6:91:f0:34:
5d:10:9c:c0:70:27:64:05:17:0a:ec:b9:8f:5f:81:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:4C:34:70:E8:E1:B4:B5:00:44:BE:4C:B4:6A:4D:D3:17:A1:FE
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36372e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7a:29:94:a5:2f:54:c7:4a:c9:a2:7a:d7:8c:3e:99:13:6f:
32:ed:ea:c0:ad:91:a0:c0:d1:e4:ab:90:a5:d7:55:c8:ed:ef:
3c:39:22:17:13:cf:4b:59:c4:90:c5:c8:b7:7e:26:b3:80:24:
c3:fe:70:b9:50:cd:51:1b:e0:1a:ff:69:b9:93:52:fa:94:ca:
13:ef:05:48:99:db:fe:87:d7:d5:e9:b9:fb:90:de:42:96:6a:
b1:f1:2b:4c:39:be:8b:09:c5:fb:c7:11:d2:18:d2:93:5f:06:
2a:69:6a:b3:37:06:e1:b4:2f:8d:a9:04:a3:bf:a4:98:64:73:
2f:97:05:79:e2:c8:f0:35:96:22:43:87:5a:89:50:81:d8:7f:
e7:ac:7b:e2:07:23:38:26:6c:d7:af:bf:6f:e0:2b:53:3a:29:
45:3e:be:65:65:f9:7a:0e:76:0a:25:92:46:80:2c:7a:ff:bb:
1a:31:a3:0b:a7:fb:3d:99:81:50:54:99:41:1e:7e:20:7a:82:
28:a3:14:33:b3:39:21:77:03:5e:b7:36:62:03:f7:09:52:f5:
2b:b7:81:5e:49:57:52:c9:0a:6a:b5:4f:76:e9:21:2e:5a:82:
92:19:38:5e:97:05:c2:4a:93:3e:f1:8f:3b:f5:77:b5:56:83:
62:82:f3:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:26 2026 by rpki-client