
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa
File: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=
Subject key identifier: C0:20:42:E7:C4:86:0F:72:6A:77:BB:18:E8:D3:46:97:D5:04:15:5E
Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
Certificate serial: 2EC244625E6DF32589C64CCDDB6CF8BB3CC88056
Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa
Signing time: Mon 11 May 2026 03:19:35 +0000
ROA not before: Mon 11 May 2026 03:14:35 +0000
ROA not after: Mon 10 May 2027 03:19:35 +0000
asID: 4808
IP address blocks: 103.135.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl
rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c2:44:62:5e:6d:f3:25:89:c6:4c:cd:db:6c:f8:bb:3c:c8:80:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
Validity
Not Before: May 11 03:14:35 2026 GMT
Not After : May 10 03:19:35 2027 GMT
Subject: CN=C02042E7C4860F726A77BB18E8D34697D504155E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:af:2b:f0:68:72:3a:98:79:98:d7:5b:cb:
e0:d6:1a:49:bf:d2:9c:64:35:1b:48:d0:22:32:74:
28:8d:fd:ea:a8:4a:cf:f3:cc:32:d6:2c:d3:07:d5:
59:d6:b0:02:da:54:12:46:d9:b2:aa:8c:a8:1f:1f:
cf:43:45:20:f8:38:6b:df:12:c6:49:a9:fb:d6:63:
82:6a:a7:5e:a8:c7:f0:d2:ec:94:03:69:2a:8f:b7:
c7:bf:6a:58:6a:56:d7:20:de:14:99:a2:7e:8c:50:
9d:74:c1:b2:ca:6b:82:6f:24:a1:f5:20:7d:11:51:
76:f6:01:79:ff:2a:bf:3a:38:d4:38:ed:61:1e:6f:
08:4b:36:49:a0:85:08:99:41:97:41:f3:c2:c3:97:
5c:81:93:2c:ee:6d:83:d2:85:7b:8d:c9:af:c2:0f:
a8:d2:c7:f9:d9:04:82:a4:2c:de:9e:b8:64:f4:6f:
6e:48:42:ae:98:67:08:8b:6d:95:21:f6:e2:8a:89:
70:7b:b9:bc:e4:a5:0c:47:f0:ff:32:48:25:d7:a3:
20:60:50:55:68:37:0e:49:a3:88:c9:83:76:ea:25:
86:12:dc:c2:6c:00:09:e5:cf:f4:b5:4d:ea:c9:eb:
b5:78:45:c7:2b:c1:92:e8:97:c0:e4:5b:ab:83:21:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:42:E7:C4:86:0F:72:6A:77:BB:18:E8:D3:46:97:D5:04:15:5E
X509v3 Authority Key Identifier:
keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:ab:79:a3:1f:86:c3:4a:4d:64:b6:57:95:26:f4:92:c6:ed:
f9:04:b6:f4:13:26:13:03:44:08:51:de:ae:54:a6:00:f6:24:
06:f0:1d:df:e1:04:cf:c7:1d:11:63:1f:7b:97:63:84:d7:30:
eb:fb:71:ee:d9:66:43:0b:60:e9:7b:9b:59:09:88:14:36:a1:
82:eb:3c:f6:ef:b0:c0:8b:5f:cd:d0:56:f2:ff:c9:26:82:05:
fc:e4:28:0c:40:e6:20:b5:c7:00:24:04:6d:a1:56:ed:fb:07:
f6:f3:54:63:40:85:0a:a5:90:b0:67:57:1f:ff:ba:77:a1:e5:
d6:1b:65:d5:79:b6:a0:ef:b8:e5:fa:cf:99:6a:03:3d:dc:78:
d3:97:7a:07:dd:07:33:8d:77:56:42:7b:07:97:0c:c3:f3:ed:
bd:ab:20:98:3f:ea:6d:c4:59:82:b4:97:34:53:72:64:c2:d8:
77:5c:36:7b:ef:7e:61:b1:f1:2b:a1:81:12:47:fc:ed:da:2c:
38:8a:7b:6a:d0:1b:e4:f8:b0:16:92:2b:13:b2:68:9b:94:cc:
a9:d9:d6:e2:a7:27:90:af:11:ef:5e:26:aa:49:72:1c:86:8c:
bd:45:dc:92:a3:54:11:4e:c9:cb:8a:ee:40:f5:b9:1d:04:32:
29:d4:0c:5c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIULsJEYl5t8yWJxkzN22z4uzzIgFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0
MzY0QkFFQTAeFw0yNjA1MTEwMzE0MzVaFw0yNzA1MTAwMzE5MzVaMDMxMTAvBgNV
BAMTKEMwMjA0MkU3QzQ4NjBGNzI2QTc3QkIxOEU4RDM0Njk3RDUwNDE1NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjsq8r8GhyOph5mNdby+DWGkm/
0pxkNRtI0CIydCiN/eqoSs/zzDLWLNMH1VnWsALaVBJG2bKqjKgfH89DRSD4OGvf
EsZJqfvWY4Jqp16ox/DS7JQDaSqPt8e/alhqVtcg3hSZon6MUJ10wbLKa4JvJKH1
IH0RUXb2AXn/Kr86ONQ47WEebwhLNkmghQiZQZdB88LDl1yBkyzubYPShXuNya/C
D6jSx/nZBIKkLN6euGT0b25IQq6YZwiLbZUh9uKKiXB7ubzkpQxH8P8ySCXXoyBg
UFVoNw5Jo4jJg3bqJYYS3MJsAAnlz/S1TerJ67V4RccrwZLol8DkW6uDIZL5AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUwCBC58SGD3Jqd7sY6NNGl9UEFV4wHwYDVR0j
BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE
MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjA1NTI5NTczMTIzNjg3NS8wLzMxMzAzMzJlMzEz
MzM1MmUzMTM2MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmeHoDANBgkqhkiG9w0BAQsFAAOCAQEAoat5ox+Gw0pNZLZXlSb0ksbt
+QS29BMmEwNECFHerlSmAPYkBvAd3+EEz8cdEWMfe5djhNcw6/tx7tlmQwtg6Xub
WQmIFDahgus89u+wwItfzdBW8v/JJoIF/OQoDEDmILXHACQEbaFW7fsH9vNUY0CF
CqWQsGdXH/+6d6Hl1htl1Xm2oO+45frPmWoDPdx405d6B90HM413VkJ7B5cMw/Pt
vasgmD/qbcRZgrSXNFNyZMLYd1w2e+9+YbHxK6GBEkf87dosOIp7atAb5PiwFpIr
E7Jom5TMqdnW4qcnkK8R714mqklyHIaMvUXckqNUEU7Jy4ruQPW5HQQyKdQMXA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:43:41 2026 by rpki-client