
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/3130332e31372e3232382e302f32322d3232203d3e203234313339.roa
File: 3130332e31372e3232382e302f32322d3232203d3e203234313339.roa (raw, json)
Hash identifier: WKBC1qRwt+7dMdzTZIqQRn/5SumS317itfT4IKDsIo4=
Subject key identifier: F4:96:24:47:C4:9E:C2:45:2E:89:B6:E5:3B:C2:5E:F7:10:FA:29:58
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 35AEFEB29C84EBA87724250F529C68E65B4CE0BA
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/3130332e31372e3232382e302f32322d3232203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:21:55 +0000
ROA not before: Tue 12 May 2026 07:16:55 +0000
ROA not after: Tue 11 May 2027 07:21:55 +0000
asID: 24139
IP address blocks: 103.17.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ae:fe:b2:9c:84:eb:a8:77:24:25:0f:52:9c:68:e6:5b:4c:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:16:55 2026 GMT
Not After : May 11 07:21:55 2027 GMT
Subject: CN=F4962447C49EC2452E89B6E53BC25EF710FA2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:9a:32:2d:ee:c3:96:10:18:c3:94:7a:40:
48:3e:1e:32:43:3c:82:2b:77:5a:f9:62:c9:fd:79:
a5:af:cc:00:d3:f7:b5:05:0d:f8:93:5a:08:5d:f4:
5e:49:ae:24:68:d1:86:8f:b9:c1:93:66:b2:ba:40:
53:ec:54:0b:19:12:9e:62:ee:ee:95:3e:c5:9c:8b:
ec:e4:41:23:4c:c1:44:1a:ce:18:89:41:df:b7:56:
87:5a:e8:fb:6b:f0:c9:1a:d3:c7:ef:62:b7:fb:65:
de:07:47:ab:a5:86:88:ac:91:1d:ec:b1:32:e5:49:
98:db:31:d8:18:3e:76:4e:bd:a1:2a:6f:c1:76:29:
0c:59:9e:88:c6:74:85:90:d7:d5:64:d4:44:dc:4e:
1a:80:1b:cc:72:36:59:42:55:eb:17:a9:71:da:9d:
fa:4c:b0:eb:fc:64:55:81:fe:b2:5a:6f:e2:26:16:
35:61:90:02:95:3e:0c:e5:66:8d:1e:ec:e8:fb:7c:
78:5c:7b:02:2a:cb:fb:64:63:35:89:ae:83:a6:42:
95:63:be:2c:75:ee:32:f9:c6:f1:8a:2d:4e:5f:cf:
2b:53:22:63:42:0d:6c:a3:ec:07:52:a3:91:86:9f:
df:d5:34:a5:70:bc:3e:2a:a3:e6:bb:01:fd:31:b0:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:24:47:C4:9E:C2:45:2E:89:B6:E5:3B:C2:5E:F7:10:FA:29:58
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/3130332e31372e3232382e302f32322d3232203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.228.0/22
Signature Algorithm: sha256WithRSAEncryption
00:32:3f:c8:6b:d9:24:6a:54:c2:e7:5e:f3:0b:34:b6:16:db:
15:6c:a2:c2:f2:4d:ee:7d:42:5b:90:17:26:db:74:46:f1:37:
46:bd:78:a4:d8:4b:d7:22:d0:0e:af:ba:5c:11:e4:e0:7a:eb:
6b:27:0c:ec:06:a0:48:18:72:47:47:7e:ff:09:20:48:85:27:
d3:4b:6d:98:84:fa:ad:17:8a:90:9b:a9:a2:37:f9:03:27:51:
98:c1:4f:ad:3d:e6:8b:24:74:8e:b9:5e:57:7d:07:c7:6d:6c:
8b:32:02:84:8f:84:fa:f6:aa:cb:a7:53:8e:97:b4:0f:48:23:
11:85:f9:04:aa:79:cd:ce:35:ed:fd:b3:b8:df:53:92:c4:92:
34:13:2e:37:58:67:82:0b:2d:48:0a:36:6f:e3:2e:7f:2a:2c:
29:93:1b:2b:19:ce:fc:d7:40:34:b8:78:06:b6:a6:a8:11:d0:
3d:a8:33:49:ee:59:ed:10:33:bc:ea:73:8c:35:fb:18:0e:67:
ed:0e:dd:d5:78:36:74:fe:06:37:ed:9a:d8:06:ee:a9:a3:e0:
c8:b8:1d:b6:6a:b4:ea:f3:ac:cb:2f:b2:7a:0d:26:c1:93:b1:
37:7e:72:e1:f7:b2:15:d5:c5:1d:4c:00:86:79:89:d9:2b:29:
d1:c0:df:a8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUNa7+spyE66h3JCUPUpxo5ltM4LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4
NjkwNTIwNDAeFw0yNjA1MTIwNzE2NTVaFw0yNzA1MTEwNzIxNTVaMDMxMTAvBgNV
BAMTKEY0OTYyNDQ3QzQ5RUMyNDUyRTg5QjZFNTNCQzI1RUY3MTBGQTI5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVrpoyLe7DlhAYw5R6QEg+HjJD
PIIrd1r5Ysn9eaWvzADT97UFDfiTWghd9F5JriRo0YaPucGTZrK6QFPsVAsZEp5i
7u6VPsWci+zkQSNMwUQazhiJQd+3Voda6Ptr8Mka08fvYrf7Zd4HR6ulhoiskR3s
sTLlSZjbMdgYPnZOvaEqb8F2KQxZnojGdIWQ19Vk1ETcThqAG8xyNllCVesXqXHa
nfpMsOv8ZFWB/rJab+ImFjVhkAKVPgzlZo0e7Oj7fHhcewIqy/tkYzWJroOmQpVj
vix17jL5xvGKLU5fzytTImNCDWyj7AdSo5GGn9/VNKVwvD4qo+a7Af0xsLNHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU9JYkR8SewkUuibblO8Je9xD6KVgwHwYDVR0j
BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4
NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjQ1MzA5OTEyNTQwNzc2My8wLzMxMzAzMzJlMzEz
NzJlMzIzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDMxMzMzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmcR5DANBgkqhkiG9w0BAQsFAAOCAQEAADI/yGvZJGpUwude8ws0thbb
FWyiwvJN7n1CW5AXJtt0RvE3Rr14pNhL1yLQDq+6XBHk4HrraycM7AagSBhyR0d+
/wkgSIUn00ttmIT6rReKkJupojf5AydRmMFPrT3miyR0jrleV30Hx21sizIChI+E
+vaqy6dTjpe0D0gjEYX5BKp5zc417f2zuN9TksSSNBMuN1hnggstSAo2b+Mufyos
KZMbKxnO/NdANLh4BramqBHQPagzSe5Z7RAzvOpzjDX7GA5n7Q7d1Xg2dP4GN+2a
2AbuqaPgyLgdtmq06vOsyy+yeg0mwZOxN35y4feyFdXFHUwAhnmJ2Ssp0cDfqA==
-----END CERTIFICATE-----
Generated at Wed May 13 18:14:38 2026 by rpki-client