
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32342d3234203d3e2034383437.roa
File: 3130332e3235342e36382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: zPWgyyF1Mrz5OFEF3JqQzSab+M9J8QVcEpUZrn16NyU=
Subject key identifier: 57:3E:8A:00:E2:DD:8F:9F:10:BA:A6:42:1A:A6:59:83:15:88:64:2A
Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial: 41B26C102F71E3FC1230FDA9B8EFE39B6E099CF5
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32342d3234203d3e2034383437.roa
Signing time: Sat 09 May 2026 06:18:17 +0000
ROA not before: Sat 09 May 2026 06:13:17 +0000
ROA not after: Sat 08 May 2027 06:18:17 +0000
asID: 4847
IP address blocks: 103.254.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b2:6c:10:2f:71:e3:fc:12:30:fd:a9:b8:ef:e3:9b:6e:09:9c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Validity
Not Before: May 9 06:13:17 2026 GMT
Not After : May 8 06:18:17 2027 GMT
Subject: CN=573E8A00E2DD8F9F10BAA6421AA659831588642A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:30:7a:c8:ef:fe:68:df:f5:6a:e0:ec:bf:
ff:06:74:30:00:47:95:d5:19:2c:ce:dc:2a:40:b0:
7a:de:58:40:fc:72:91:d2:25:10:76:e4:5e:b3:61:
91:5c:c9:1f:f7:79:32:33:f6:06:ee:0b:3f:53:79:
70:46:10:60:5d:c7:88:d9:70:25:6d:0c:72:21:2d:
05:f7:a2:f8:c3:90:a7:f4:5f:99:3e:7c:55:da:9e:
bf:0b:9d:bb:22:fb:9e:43:02:ca:f3:37:00:58:77:
82:ee:96:a2:aa:bb:62:7d:67:6f:ce:a2:fb:37:b8:
a5:c1:43:75:1f:9f:a9:10:59:8c:4b:f0:a9:6f:3e:
04:a2:ae:8c:ce:5e:ca:38:d7:d7:ed:cc:d2:b7:96:
7c:c1:5e:02:00:c0:db:ed:f6:13:50:27:d9:e0:28:
6d:af:bc:86:6e:26:2b:7d:34:74:ce:9c:90:a0:c9:
72:c7:62:d0:e7:1d:fa:35:53:c9:61:a8:33:7f:c1:
56:12:d5:ae:57:31:94:b9:7c:25:e1:bb:ed:0d:4e:
50:90:4a:29:b1:63:6a:c8:41:cc:cf:b2:09:3d:eb:
ee:fd:5b:25:4a:17:66:7c:8d:e6:2b:be:a1:cf:41:
77:16:3b:cf:39:21:9c:4c:35:10:89:55:63:83:e8:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:8A:00:E2:DD:8F:9F:10:BA:A6:42:1A:A6:59:83:15:88:64:2A
X509v3 Authority Key Identifier:
keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e36382e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7b:0b:bd:c7:34:54:6b:aa:da:bc:75:c7:71:64:79:54:1d:
86:bf:79:8f:e1:4b:ee:ee:1a:dd:d9:36:df:4d:67:f1:57:55:
44:72:d3:84:f2:c0:9c:08:14:07:a8:79:c1:85:98:15:0d:2b:
67:f0:5c:08:cd:f4:6d:ce:55:e9:e5:51:e9:95:04:f4:35:6d:
67:a7:70:6b:ad:b6:18:4e:8a:fb:44:90:cd:1c:d0:e6:eb:9a:
44:32:56:6c:65:36:68:7b:08:5e:74:5a:09:4e:16:fd:0b:d8:
9a:4d:ae:7b:74:cb:b8:39:77:ca:e8:5b:5e:18:ff:b1:b1:8f:
8e:da:1f:46:dc:67:8d:6c:1e:dc:49:2e:14:55:17:d7:e7:ee:
1a:d3:9c:ed:1c:67:d0:c0:37:6f:10:76:33:a9:a8:43:bf:89:
9a:d2:b3:9b:f9:e7:52:91:71:53:a8:ba:4d:46:1c:c5:b7:d0:
d4:87:e1:33:3f:e2:7a:93:1a:fc:ff:d9:b9:24:cd:e6:25:1f:
56:b3:ef:a8:b3:b0:3c:68:83:06:cf:82:86:27:52:6b:2a:68:
e2:0a:26:f7:02:a0:46:53:74:0a:29:38:88:35:ad:ed:5d:41:
ae:1c:45:c9:58:cf:47:7a:31:2a:2a:7b:04:a5:48:f5:43:cf:
84:35:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:47 2026 by rpki-client