
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33332e302f32342d3234203d3e2034363131.roa
File: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=
Subject key identifier: DF:73:AD:3B:EF:4E:4B:75:BA:6B:76:77:46:0D:CE:70:85:67:C4:92
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 435E4985ED8DA3D0D4D1692DE8411FCC79BAECD3
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33332e302f32342d3234203d3e2034363131.roa
Signing time: Tue 12 May 2026 01:54:33 +0000
ROA not before: Tue 12 May 2026 01:49:33 +0000
ROA not after: Tue 11 May 2027 01:54:33 +0000
asID: 4611
IP address blocks: 103.66.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5e:49:85:ed:8d:a3:d0:d4:d1:69:2d:e8:41:1f:cc:79:ba:ec:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: May 12 01:49:33 2026 GMT
Not After : May 11 01:54:33 2027 GMT
Subject: CN=DF73AD3BEF4E4B75BA6B7677460DCE708567C492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:c2:2e:e4:57:9e:9e:33:5a:0a:0f:10:40:
20:91:4c:3c:c9:85:fe:77:23:e4:7d:e5:c6:a4:e1:
3b:e7:74:bb:bd:6f:87:43:04:aa:a9:8a:81:03:f7:
27:2c:3f:a6:4a:bd:96:65:87:da:c4:88:d1:92:a0:
57:20:81:98:92:ae:12:7c:6b:ba:d4:1a:74:ec:bb:
c1:a2:c1:96:2b:87:6b:0d:83:b4:31:3b:8a:bc:4e:
f6:69:9a:16:a0:38:2c:1d:7a:ab:fc:44:28:1c:86:
98:23:aa:58:74:d3:47:e3:d6:9e:a6:88:8f:91:0a:
1a:1a:55:31:5d:17:14:e6:75:33:90:44:02:0c:a5:
42:4a:bd:c0:4e:07:40:1a:fb:72:74:45:95:fb:97:
b2:3e:c1:9f:0f:13:10:d4:f0:33:b7:2d:01:13:9f:
a4:ef:ab:cd:40:ee:f4:40:9d:d4:33:d9:cf:2c:22:
3d:79:63:87:0a:ae:df:76:bd:7d:49:75:19:7a:77:
42:ff:91:67:c2:98:9a:e7:1e:85:20:dd:c2:2d:3f:
6a:0f:76:bf:67:25:38:aa:f5:62:ce:8f:71:ae:fc:
f6:b1:98:ec:ca:b6:6d:73:f6:49:3f:4e:22:84:8c:
f7:2c:7e:28:54:2d:d5:b1:38:31:0e:79:72:0b:40:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:AD:3B:EF:4E:4B:75:BA:6B:76:77:46:0D:CE:70:85:67:C4:92
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33332e302f32342d3234203d3e2034363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.33.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:6d:d7:e2:7e:5b:fb:f8:57:9f:e1:85:72:e5:fc:47:42:35:
63:99:fa:bc:3b:6b:5a:b4:21:64:5b:62:02:38:1d:74:92:b1:
c5:f0:f8:a6:d1:51:0c:6b:d1:ab:18:f5:cd:85:b4:da:c8:d0:
b2:3f:02:5e:8f:e0:ea:2b:4d:ca:45:aa:33:93:1a:67:63:68:
ae:a2:e2:47:2d:78:22:34:ce:c3:a9:a5:2d:de:a9:59:35:ee:
3f:3a:51:96:73:5e:79:e5:a0:bc:53:b9:a7:26:5e:a5:52:e4:
57:ba:d7:ee:7e:ba:c4:d4:57:ec:c4:30:21:32:e5:a4:70:76:
ab:56:48:32:63:48:95:5b:3d:8b:1e:7d:cd:e9:9b:24:5e:9a:
13:b9:d0:ed:1a:66:28:30:27:34:4c:56:b8:9d:98:16:94:8e:
c6:fd:bd:65:b1:fa:9c:c2:15:cc:3c:ec:ef:8d:f9:a4:0b:7e:
00:76:05:4f:db:ce:4a:e2:74:b8:25:99:1d:bf:82:23:d0:ec:
d9:6a:71:c9:34:5f:fd:c3:f2:d5:9a:ff:f5:b4:1a:f5:6b:57:
28:ff:02:33:8a:be:42:92:c3:e0:c5:0c:bc:61:5c:6d:1e:ab:
6c:c5:1a:27:c9:d3:a2:13:27:72:91:44:15:7f:a8:7d:7b:a1:
2a:c8:5d:5c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUQ15Jhe2No9DU0Wkt6EEfzHm67NMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD
QUREMEFGQjAeFw0yNjA1MTIwMTQ5MzNaFw0yNzA1MTEwMTU0MzNaMDMxMTAvBgNV
BAMTKERGNzNBRDNCRUY0RTRCNzVCQTZCNzY3NzQ2MERDRTcwODU2N0M0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlCMIu5FeenjNaCg8QQCCRTDzJ
hf53I+R95cak4TvndLu9b4dDBKqpioED9ycsP6ZKvZZlh9rEiNGSoFcggZiSrhJ8
a7rUGnTsu8GiwZYrh2sNg7QxO4q8TvZpmhagOCwdeqv8RCgchpgjqlh000fj1p6m
iI+RChoaVTFdFxTmdTOQRAIMpUJKvcBOB0Aa+3J0RZX7l7I+wZ8PExDU8DO3LQET
n6Tvq81A7vRAndQz2c8sIj15Y4cKrt92vX1JdRl6d0L/kWfCmJrnHoUg3cItP2oP
dr9nJTiq9WLOj3Gu/PaxmOzKtm1z9kk/TiKEjPcsfihULdWxODEOeXILQMwJAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU33OtO+9OS3W6a3Z3Rg3OcIVnxJIwHwYDVR0j
BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy
RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2Mzk4Mzg4MTg3ODI0MTQ3LzAvMzEzMDMzMmUzNjM2
MmUzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnQiEwDQYJKoZIhvcNAQELBQADggEBANFt1+J+W/v4V5/hhXLl/EdCNWOZ+rw7
a1q0IWRbYgI4HXSSscXw+KbRUQxr0asY9c2FtNrI0LI/Al6P4OorTcpFqjOTGmdj
aK6i4kcteCI0zsOppS3eqVk17j86UZZzXnnloLxTuacmXqVS5Fe61+5+usTUV+zE
MCEy5aRwdqtWSDJjSJVbPYsefc3pmyRemhO50O0aZigwJzRMVridmBaUjsb9vWWx
+pzCFcw87O+N+aQLfgB2BU/bzkridLglmR2/giPQ7Nlqcck0X/3D8tWa//W0GvVr
Vyj/AjOKvkKSw+DFDLxhXG0eq2zFGifJ06ITJ3KRRBV/qH17oSrIXVw=
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:38 2026 by rpki-client