
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa
File: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=
Subject key identifier: 6E:77:8D:1A:3E:5E:82:54:BB:C0:21:36:63:7D:12:1E:42:7C:1A:9A
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 1C2DFA7CC55E411679956911A4FD6D5C54F0CB18
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa
Signing time: Tue 12 May 2026 01:54:33 +0000
ROA not before: Tue 12 May 2026 01:49:33 +0000
ROA not after: Tue 11 May 2027 01:54:33 +0000
asID: 4611
IP address blocks: 103.228.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2d:fa:7c:c5:5e:41:16:79:95:69:11:a4:fd:6d:5c:54:f0:cb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: May 12 01:49:33 2026 GMT
Not After : May 11 01:54:33 2027 GMT
Subject: CN=6E778D1A3E5E8254BBC02136637D121E427C1A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:ea:ea:78:a8:ab:0e:7d:a7:6e:b3:a6:b1:
1c:00:37:e3:2b:c0:5f:c6:a5:50:eb:84:fa:ee:52:
ee:fb:f9:4b:49:4e:ce:25:7b:9d:16:79:87:e1:9b:
57:b6:dd:d9:ca:17:77:3b:1c:12:ef:6f:64:ba:3c:
51:7f:dd:ae:90:89:9f:32:e9:49:74:df:ef:c3:5f:
7e:49:ec:b1:7f:86:3d:fc:40:51:70:bf:41:39:8d:
44:8a:8d:b5:09:db:cd:55:02:d9:f7:d8:73:bb:37:
1e:bc:d6:e9:16:ea:df:aa:ff:4b:84:37:aa:0f:ab:
1e:00:c1:3b:19:58:d0:da:5b:2e:43:c7:ca:81:bc:
51:6c:83:d0:51:91:49:c9:bb:d8:93:4a:00:b1:99:
9e:8d:dc:1b:d9:c3:4e:b2:dd:0d:8f:e4:72:20:0e:
3f:64:29:6e:47:18:64:64:66:2c:c1:9b:8d:36:ac:
e7:03:ba:c8:e7:2e:80:12:de:1e:e9:25:7c:9b:dc:
96:63:34:b3:ad:94:56:e4:e3:8c:b5:32:41:06:09:
6b:de:74:d9:3c:1a:f1:93:1a:05:3d:65:aa:a8:a1:
98:6e:08:90:65:f4:c7:aa:30:96:0f:78:6b:2d:05:
66:25:13:28:e4:8f:91:32:04:fd:a2:c6:12:f9:97:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:8D:1A:3E:5E:82:54:BB:C0:21:36:63:7D:12:1E:42:7C:1A:9A
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.137.0/24
Signature Algorithm: sha256WithRSAEncryption
98:47:11:ff:91:6d:ea:44:16:59:a2:44:a1:27:5d:3b:15:63:
98:2c:f2:fa:68:d8:20:08:98:a9:22:da:d8:e4:e0:13:3a:7f:
20:50:e9:e8:c6:28:f8:47:a4:b7:67:29:25:f7:46:8b:a6:3e:
65:35:ce:f6:de:2f:fd:10:2a:dd:5b:da:3a:73:38:7d:9f:66:
ef:72:25:5e:9c:97:e8:fe:9d:b2:ee:03:8b:44:08:74:98:82:
7d:5f:28:e2:1e:5a:7c:f7:5c:88:df:3b:bc:15:77:91:d3:05:
6c:4f:63:f4:a7:83:42:71:8f:99:7e:52:76:39:c0:36:e4:90:
25:7e:d6:9d:eb:93:ca:86:97:56:67:27:c2:9a:bc:21:f8:d6:
90:6f:25:98:31:e4:27:ee:ab:20:de:d1:fd:fd:d3:27:40:2f:
90:02:1d:af:b4:da:88:cb:b0:fd:5a:22:22:4e:c3:2c:4e:39:
f4:00:fa:36:4f:d0:dc:c9:a8:44:c5:46:04:63:d9:5d:fb:c9:
17:51:9d:03:c0:ef:ea:a1:4e:a1:e8:47:5d:99:fa:ab:fd:d9:
a0:85:47:fc:f5:df:43:01:da:63:e7:38:11:8c:ef:56:a5:58:
99:73:31:ef:4d:a6:2d:62:6f:c0:93:57:41:d3:42:2f:5b:fc:
db:5f:f5:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:12 2026 by rpki-client