
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/3130332e3131312e36342e302f32342d3234203d3e203137363231.roa
File: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=
Subject key identifier: 27:8A:D1:7F:4E:43:34:13:30:9B:09:6C:6D:12:FE:31:C9:C8:DE:2C
Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB
Certificate serial: 6094B0EF15BDD5461BB4030AFCFA1CF6F58CD340
Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/3130332e3131312e36342e302f32342d3234203d3e203137363231.roa
Signing time: Mon 11 May 2026 02:54:36 +0000
ROA not before: Mon 11 May 2026 02:49:36 +0000
ROA not after: Mon 10 May 2027 02:54:36 +0000
asID: 17621
IP address blocks: 103.111.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:94:b0:ef:15:bd:d5:46:1b:b4:03:0a:fc:fa:1c:f6:f5:8c:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB
Validity
Not Before: May 11 02:49:36 2026 GMT
Not After : May 10 02:54:36 2027 GMT
Subject: CN=278AD17F4E433413309B096C6D12FE31C9C8DE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:32:94:09:64:06:ea:5a:e1:58:87:90:00:
ba:54:eb:25:18:9b:53:56:b2:06:65:a2:ee:67:e8:
9d:e0:d6:2a:ce:9d:44:15:38:c6:bb:e3:ff:8c:09:
7c:35:4b:87:ab:b0:92:7a:d1:0d:a1:e5:f0:87:d3:
0a:80:b2:b1:91:ac:67:f2:60:72:89:51:1d:45:03:
77:50:65:83:66:65:f7:31:1d:24:3f:49:87:78:33:
bc:c2:d3:1f:c1:b6:de:b8:f1:3f:0d:c4:7f:c5:0f:
b1:70:12:65:ca:5a:4f:5f:73:ae:59:29:29:ed:30:
b8:b5:dd:b9:dd:70:47:d3:9d:da:ac:68:36:3d:d3:
84:b7:40:7c:2b:d5:21:aa:53:dd:a7:a0:3d:7a:b5:
8e:0e:76:a2:13:5b:7b:03:85:98:91:64:00:bc:eb:
66:30:97:05:b0:d1:1e:f0:ac:2e:7c:b7:28:e5:e2:
dc:7b:0b:2c:1c:8e:22:2d:8c:7e:92:70:02:81:c7:
f6:1f:49:a9:72:f5:2f:2f:bd:63:1a:08:01:4f:b2:
43:bb:06:93:59:af:30:7b:95:77:56:2c:03:8a:23:
83:a9:90:09:ba:c2:6c:1c:59:4a:59:e0:cf:dd:db:
89:67:29:27:8a:bc:81:cd:95:d7:9c:7d:1b:fb:78:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8A:D1:7F:4E:43:34:13:30:9B:09:6C:6D:12:FE:31:C9:C8:DE:2C
X509v3 Authority Key Identifier:
keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/3130332e3131312e36342e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.111.64.0/24
Signature Algorithm: sha256WithRSAEncryption
48:68:d2:66:f2:eb:87:08:43:02:da:86:0a:b8:45:09:b1:53:
51:8a:20:da:79:de:dd:eb:99:29:ab:e3:3b:3a:82:48:82:7d:
56:de:1d:b4:44:86:64:0b:90:50:31:61:c5:8c:7a:c8:b6:a2:
11:3b:b9:f3:a3:73:d9:81:ce:f3:24:b5:f8:4e:c7:71:b4:df:
53:c7:fb:4e:0f:57:17:08:2f:93:71:73:97:d7:7b:5f:b8:71:
cc:bb:a7:4b:54:a5:a7:04:97:3e:72:31:4c:1f:b4:65:46:eb:
45:a1:32:b6:af:3e:98:ad:75:8e:6f:4a:3b:76:69:b6:8e:87:
87:65:a1:b2:0d:b2:e2:e9:7a:d9:92:30:04:17:8d:f2:04:b0:
1e:b7:5d:ae:10:df:60:53:f4:66:e0:8f:1e:2b:71:46:77:de:
9b:c9:de:0f:e0:69:58:46:1a:0a:79:29:91:93:3d:13:4e:20:
8a:53:59:3f:6d:db:dd:8d:32:45:4d:e7:7e:5a:0e:fd:58:ed:
ff:d7:b5:83:4e:8e:8f:d9:a0:ce:6c:24:cf:26:11:d3:02:42:
b5:45:e2:ca:7e:4e:62:1d:e3:23:26:06:90:7e:cb:47:84:b2:
63:38:90:75:72:7a:7e:37:19:72:4f:92:ae:c8:5c:1d:76:d9:
07:9e:03:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:17:18 2026 by rpki-client