
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32332d3233203d3e2034383437.roa
File: 3130332e3235342e36382e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: b1EVn7R7/USI6UFqMLTUH9674Mh9xwEDoREczBT6nZM=
Subject key identifier: 8E:C5:1F:23:14:B6:BB:22:9A:BA:04:22:4E:BC:42:1F:A9:BE:1C:80
Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial: 52CCBDDD80FA34C2FA842827D6F2382035821BC8
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32332d3233203d3e2034383437.roa
Signing time: Sat 09 May 2026 06:18:17 +0000
ROA not before: Sat 09 May 2026 06:13:17 +0000
ROA not after: Sat 08 May 2027 06:18:17 +0000
asID: 4847
IP address blocks: 103.254.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cc:bd:dd:80:fa:34:c2:fa:84:28:27:d6:f2:38:20:35:82:1b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Validity
Not Before: May 9 06:13:17 2026 GMT
Not After : May 8 06:18:17 2027 GMT
Subject: CN=8EC51F2314B6BB229ABA04224EBC421FA9BE1C80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:53:73:5b:66:73:94:0d:77:c3:f4:19:d2:
81:d5:e8:b5:77:e6:02:f0:5f:15:c5:90:4a:08:c2:
fc:46:ee:c2:30:d2:e7:eb:f7:9a:78:ae:c3:4d:da:
b4:b0:ed:46:e6:a8:04:fe:6a:b3:ab:07:ec:4d:88:
16:f7:07:28:a6:3d:21:b9:59:17:ff:8a:31:c5:9f:
b6:20:54:7b:55:b5:71:c0:42:49:eb:1d:b4:fd:9d:
46:56:9b:ea:08:33:97:43:ee:e3:e7:ab:b8:46:67:
1c:a5:cb:74:06:d0:aa:7b:ce:c3:55:12:7e:6e:ea:
92:6c:a4:74:d5:fa:63:11:cb:9e:6a:4d:da:4a:e9:
13:17:e6:0d:44:dc:f0:a7:76:38:45:80:6e:c2:8f:
cb:24:65:6a:fa:72:d2:af:57:ae:76:ce:cb:ee:ed:
bf:bf:30:23:ff:0a:9b:75:ce:52:73:bc:0e:0b:b7:
b8:20:e3:52:c1:bf:ba:95:f0:08:65:83:86:69:c0:
8d:68:13:bf:38:80:24:92:f9:42:00:bb:b0:05:28:
4d:38:8b:99:a3:6c:f9:f4:4f:a8:db:5b:25:fc:53:
a4:72:31:e8:ff:ca:ff:7f:fa:0d:fd:9a:98:5b:97:
69:77:32:ad:20:7e:47:8b:64:3d:d7:47:9d:66:54:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C5:1F:23:14:B6:BB:22:9A:BA:04:22:4E:BC:42:1F:A9:BE:1C:80
X509v3 Authority Key Identifier:
keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.68.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:66:f8:f2:14:d9:7f:8e:ce:de:7a:f9:5e:cf:69:ef:1e:8d:
55:b6:62:11:60:4c:63:7e:a3:59:54:7b:12:5f:06:5b:7e:1d:
d2:46:bb:32:cc:83:18:e5:0d:89:33:ee:a8:24:84:6f:0e:9e:
90:de:bb:e0:c0:9a:34:15:78:85:2c:77:59:cf:5a:c4:1c:60:
18:1b:e1:6b:7a:f5:16:c0:2a:b6:2e:d7:5f:5e:7c:29:2b:4b:
78:02:c7:d7:dc:09:18:ef:62:aa:c6:ca:83:7a:60:2e:55:53:
46:11:1e:7d:c7:70:f3:22:fd:c4:d7:83:ae:4d:fa:d3:03:ab:
1a:12:49:d6:8b:b2:ba:d4:06:2b:5a:7b:b3:8a:42:20:af:16:
d9:2f:64:63:91:20:cf:a3:81:7f:b5:75:3b:26:b6:3a:d1:45:
8f:08:0c:24:27:15:68:c3:bd:ed:06:b2:44:e8:af:9d:f7:fa:
30:5a:64:77:8a:95:63:af:2d:cd:df:28:56:e8:2b:a2:c5:6f:
37:36:6d:1b:e9:e6:40:db:95:1f:cf:6b:4d:ac:ac:d6:84:b8:
58:e3:df:39:75:d7:fb:8a:1d:60:79:ad:dc:96:20:bd:72:52:
d1:6a:ae:b6:00:66:ad:e7:53:92:28:1d:5a:22:5f:4b:54:fc:
c6:e3:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:33 2026 by rpki-client