
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32322d3232203d3e2034383437.roa
File: 3130332e3235342e36382e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: aZ/0G1bg8whxvsp31vQsWHhAvgkdQ5XTg3GUqH++CNM=
Subject key identifier: 31:8C:22:2D:4E:59:2B:E5:13:EB:34:89:D9:1E:7D:8D:40:EA:38:FD
Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial: 70A60FBE1AB5B714D5C1E1716E6A71817BB6181C
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32322d3232203d3e2034383437.roa
Signing time: Sat 09 May 2026 06:18:17 +0000
ROA not before: Sat 09 May 2026 06:13:17 +0000
ROA not after: Sat 08 May 2027 06:18:17 +0000
asID: 4847
IP address blocks: 103.254.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a6:0f:be:1a:b5:b7:14:d5:c1:e1:71:6e:6a:71:81:7b:b6:18:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Validity
Not Before: May 9 06:13:17 2026 GMT
Not After : May 8 06:18:17 2027 GMT
Subject: CN=318C222D4E592BE513EB3489D91E7D8D40EA38FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:b0:ac:7b:47:e9:ea:6f:7f:27:8a:eb:cd:
3c:b4:a0:4b:d0:4a:35:05:c6:4c:21:b1:f6:39:67:
60:00:a9:59:42:54:98:08:d4:64:b3:45:63:6a:c2:
b1:05:64:2d:8d:5d:43:62:79:38:50:fe:2b:53:00:
66:2c:de:04:c4:e7:d3:17:52:49:53:bc:21:8a:8b:
80:c1:d3:9e:83:6f:3b:4a:18:16:34:7d:e1:0b:ad:
fd:fb:03:26:f4:b7:76:24:9b:b6:03:29:9f:0c:a9:
43:bd:91:2f:02:3a:56:a4:59:bf:42:ec:fa:04:70:
50:97:89:58:a2:77:4e:f1:1b:9a:b3:1f:15:bb:28:
bb:6d:aa:5a:4c:65:77:a9:b8:78:b5:6f:39:18:a0:
5b:54:9b:77:9d:f3:6f:26:94:ec:fd:c2:f5:1e:04:
5b:1a:13:de:18:74:38:66:7d:f2:f9:ca:4c:a0:45:
eb:09:16:66:df:33:9d:09:f8:c1:87:cd:eb:c5:81:
ad:00:e0:74:08:6b:f4:50:a1:30:a4:57:90:7a:68:
cc:c1:8c:c1:cb:c5:59:1f:22:b4:80:1f:e8:66:6e:
ea:a5:a0:41:f8:cb:6a:fd:47:e6:7d:0e:7d:89:a7:
28:51:5c:d8:78:b0:92:93:fb:62:a2:f7:d1:76:e9:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:22:2D:4E:59:2B:E5:13:EB:34:89:D9:1E:7D:8D:40:EA:38:FD
X509v3 Authority Key Identifier:
keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.68.0/22
Signature Algorithm: sha256WithRSAEncryption
26:7d:83:03:af:cb:5b:94:49:16:0f:f3:9e:7c:51:49:66:3e:
b4:75:d4:8a:fb:22:12:56:74:4c:c6:32:d7:60:db:02:7f:10:
fc:74:b5:2b:5f:c1:2d:94:80:b5:f0:92:b3:b7:ab:0b:a7:7a:
75:6c:56:72:a1:3f:52:e0:f7:7c:df:20:31:58:33:3e:21:ba:
e7:c0:88:2a:c7:e5:66:2e:ea:bd:b8:68:62:51:b9:2f:2e:2c:
97:3c:a1:78:f5:1a:c0:30:7d:71:06:dc:02:25:67:14:d7:ea:
a6:35:db:5c:da:e4:90:c7:ae:99:cb:f5:47:d4:f4:f8:a3:22:
6b:92:6d:a3:4b:de:0f:a9:85:4f:0c:a6:b1:d3:b2:e1:23:25:
8b:35:c6:f1:55:8e:2f:ec:ba:61:ce:89:8a:ad:86:05:88:82:
60:aa:78:df:9f:67:87:f2:7c:a8:89:33:c9:6e:d5:cb:b7:77:
68:65:7e:14:b0:a4:54:c7:c6:d3:ab:49:e6:00:f8:01:8e:f6:
d8:9e:81:2b:0f:65:fe:cd:a7:59:38:ee:12:cd:4d:40:5d:71:
95:31:28:7e:87:27:4f:76:2c:5e:df:89:11:66:0f:bc:f3:2a:
ae:82:ce:fc:75:7c:2b:b5:8f:ad:ca:51:4f:3b:1b:b4:15:c3:
79:f8:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:56 2026 by rpki-client