
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37312e302f32342d3234203d3e2034383437.roa
File: 3130332e3235342e37312e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: Z9Cz6Wun0YZVCea+g+TAm8panVnYO6AEROUy+XcBmjo=
Subject key identifier: D0:99:39:2E:3C:F1:7A:C4:B0:D1:E0:0A:B3:59:83:B3:64:C7:59:4B
Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial: 7F4DD8FB2F885430B13B686C11C4C0ACA2002C50
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37312e302f32342d3234203d3e2034383437.roa
Signing time: Sat 09 May 2026 06:18:17 +0000
ROA not before: Sat 09 May 2026 06:13:17 +0000
ROA not after: Sat 08 May 2027 06:18:17 +0000
asID: 4847
IP address blocks: 103.254.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4d:d8:fb:2f:88:54:30:b1:3b:68:6c:11:c4:c0:ac:a2:00:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Validity
Not Before: May 9 06:13:17 2026 GMT
Not After : May 8 06:18:17 2027 GMT
Subject: CN=D099392E3CF17AC4B0D1E00AB35983B364C7594B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:c4:96:e8:8e:46:25:4d:42:76:e3:9f:4d:
93:81:54:c4:98:aa:95:9f:e5:83:08:89:78:c0:71:
fc:e9:de:47:a4:f0:9f:ea:de:0a:bb:23:a2:14:90:
5f:65:38:0d:63:20:f8:7a:0c:a9:03:c3:24:40:ea:
fb:4e:c6:e8:f5:b8:22:e8:17:56:51:76:27:9f:6b:
04:f7:ca:be:3e:6b:0e:e5:07:72:58:75:c2:c7:02:
1f:03:dd:07:70:ae:ba:15:63:54:fc:61:cc:01:6a:
b5:a9:b8:2f:f8:6d:ea:02:ec:93:76:49:ec:c1:a4:
09:51:2b:47:a2:5f:27:8d:c7:72:d6:e4:4e:53:50:
90:21:0e:bd:33:b5:85:30:26:9e:57:c9:f6:6d:53:
9b:78:c3:17:dc:c8:97:cf:09:47:80:71:0d:a9:9a:
d5:47:28:b4:11:17:3a:45:d5:7f:b8:b8:d9:2d:47:
d3:4a:a7:b1:bc:69:c2:06:5d:a4:0d:6a:ba:73:1b:
56:40:dd:73:f3:c0:99:d1:84:0d:15:1e:bb:41:19:
5c:32:8f:77:a2:e6:46:ec:dc:53:69:61:ad:cd:fa:
97:1d:c7:d0:14:56:37:33:58:10:37:e5:81:76:e6:
2c:df:57:0b:97:eb:4b:37:57:07:b3:42:53:34:5c:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:39:2E:3C:F1:7A:C4:B0:D1:E0:0A:B3:59:83:B3:64:C7:59:4B
X509v3 Authority Key Identifier:
keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37312e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.71.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2e:d8:d8:81:50:0c:c7:ac:9d:5f:f3:2a:63:21:7f:9a:f7:
18:c1:ab:04:df:fa:f4:a5:13:fb:bc:76:cd:f5:90:39:4c:51:
dd:1d:bb:9b:fa:38:56:cb:5e:70:1f:ea:6c:78:8d:08:36:38:
52:f4:de:7b:37:25:a9:33:7b:53:8a:53:a8:e9:02:ee:b0:02:
07:8c:3b:4a:bd:ca:c6:7d:d7:9c:c9:d7:d5:ab:b1:2e:db:27:
7e:12:7e:b8:26:5c:ba:ef:40:73:12:9d:45:56:f2:74:43:cb:
f8:e6:19:7b:ca:86:96:55:6f:0e:5c:d7:ab:98:0a:42:63:87:
49:3a:d9:0f:77:16:e6:0e:96:22:88:f9:f1:da:9a:ab:27:8f:
e0:09:5a:89:bd:92:7d:02:ff:42:c4:fe:a0:b9:48:58:06:f1:
70:f8:ec:8f:f3:b5:b4:5d:0e:32:83:8d:a6:eb:77:ae:f9:1d:
5e:e7:63:39:41:f7:cf:6f:66:a3:b5:bd:a7:12:65:52:19:3e:
d9:07:ed:65:31:0c:7a:4f:c2:1a:ae:f3:22:c4:75:a7:63:eb:
7a:c3:3f:46:c4:37:e8:7b:82:e1:96:4c:d6:32:da:b6:b3:49:
78:91:ba:c1:a1:d3:83:bc:79:22:7f:f0:f8:2b:f6:82:6f:5c:
90:a2:da:d4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUf03Y+y+IVDCxO2hsEcTArKIALFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQw
NTE4RjUwNzAeFw0yNjA1MDkwNjEzMTdaFw0yNzA1MDgwNjE4MTdaMDMxMTAvBgNV
BAMTKEQwOTkzOTJFM0NGMTdBQzRCMEQxRTAwQUIzNTk4M0IzNjRDNzU5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJsSW6I5GJU1CduOfTZOBVMSY
qpWf5YMIiXjAcfzp3kek8J/q3gq7I6IUkF9lOA1jIPh6DKkDwyRA6vtOxuj1uCLo
F1ZRdiefawT3yr4+aw7lB3JYdcLHAh8D3QdwrroVY1T8YcwBarWpuC/4beoC7JN2
SezBpAlRK0eiXyeNx3LW5E5TUJAhDr0ztYUwJp5XyfZtU5t4wxfcyJfPCUeAcQ2p
mtVHKLQRFzpF1X+4uNktR9NKp7G8acIGXaQNarpzG1ZA3XPzwJnRhA0VHrtBGVwy
j3ei5kbs3FNpYa3N+pcdx9AUVjczWBA35YF25izfVwuX60s3VwezQlM0XBmPAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU0Jk5LjzxesSw0eAKs1mDs2THWUswHwYDVR0j
BBgwFoAUML/eSMq53dXidackH/fk5AUY9QcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTM3NTkzMDMyODU0NzM0MS8wLzMwQkZERTQ4Q0FCOURERDVFMjc1QTcyNDFGRjdF
NEU0MDUxOEY1MDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQwNTE4RjUwNy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA1Mzc1OTMwMzI4NTQ3MzQxLzAvMzEzMDMzMmUzMjM1
MzQyZTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGf+RzANBgkqhkiG9w0BAQsFAAOCAQEARi7Y2IFQDMesnV/zKmMhf5r3GMGr
BN/69KUT+7x2zfWQOUxR3R27m/o4VstecB/qbHiNCDY4UvTeezclqTN7U4pTqOkC
7rACB4w7Sr3Kxn3XnMnX1auxLtsnfhJ+uCZcuu9AcxKdRVbydEPL+OYZe8qGllVv
DlzXq5gKQmOHSTrZD3cW5g6WIoj58dqaqyeP4Alaib2SfQL/QsT+oLlIWAbxcPjs
j/O1tF0OMoONput3rvkdXudjOUH3z29mo7W9pxJlUhk+2QftZTEMek/CGq7zIsR1
p2PresM/RsQ36HuC4ZZM1jLatrNJeJG6waHTg7x5In/w+Cv2gm9ckKLa1A==
-----END CERTIFICATE-----
Generated at Wed May 13 12:43:39 2026 by rpki-client