
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130332e35342e34382e302f32332d3233203d3e203536323832.roa
File: 3130332e35342e34382e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: rrQA6aw3fS76sFYorViQean0YInZIxQAAm7IiL1pGlM=
Subject key identifier: 11:40:65:C3:F4:A1:1B:3F:B5:6F:94:4F:21:C2:DB:BF:16:7C:DD:4D
Certificate issuer: /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial: 42FEC22028AA04F96EA7BB992ADCD0D59E7552A9
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130332e35342e34382e302f32332d3233203d3e203536323832.roa
Signing time: Tue 12 May 2026 08:34:54 +0000
ROA not before: Tue 12 May 2026 08:29:54 +0000
ROA not after: Tue 11 May 2027 08:34:54 +0000
asID: 56282
IP address blocks: 103.54.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fe:c2:20:28:aa:04:f9:6e:a7:bb:99:2a:dc:d0:d5:9e:75:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Validity
Not Before: May 12 08:29:54 2026 GMT
Not After : May 11 08:34:54 2027 GMT
Subject: CN=114065C3F4A11B3FB56F944F21C2DBBF167CDD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:02:69:61:86:5b:45:fa:15:16:40:25:2f:
c5:9e:1a:a3:ff:35:7f:22:e5:2b:fb:09:96:38:97:
ab:08:1d:6e:9f:16:cd:36:2e:24:76:5c:2d:50:cd:
9e:f6:2c:38:09:fb:13:1a:e6:ca:1d:b7:1e:65:e0:
8e:e5:5b:1f:f4:f9:18:84:b2:87:55:37:10:e7:da:
b4:5c:e7:53:6e:be:52:b1:31:5a:5b:c6:3b:39:bc:
a2:1a:a3:5e:34:1c:27:b1:d2:c5:e3:05:ac:e8:09:
08:35:91:aa:a1:14:ac:84:63:2a:4e:3e:9f:da:41:
10:91:bc:66:32:31:aa:5a:fc:78:34:93:9a:e1:b7:
c0:c6:2a:5f:14:f7:c7:7d:88:39:31:26:16:55:ef:
77:5c:02:2c:c3:23:b6:6e:82:42:6d:e1:70:80:69:
0a:25:f5:53:f6:9a:61:83:01:49:96:7c:26:bb:fa:
e9:71:20:cc:ec:62:29:61:ed:37:71:69:e9:a0:a4:
28:68:7b:4c:fe:05:82:5c:62:3b:d5:58:6c:dc:d7:
ef:f5:fa:a4:ce:d1:8a:5e:0d:b0:9b:88:ca:4a:9d:
65:7c:ae:81:71:9f:fb:ed:a1:0f:f5:74:26:33:40:
12:28:23:85:ac:f4:20:92:1b:74:5f:7f:e0:ca:6b:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:65:C3:F4:A1:1B:3F:B5:6F:94:4F:21:C2:DB:BF:16:7C:DD:4D
X509v3 Authority Key Identifier:
keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130332e35342e34382e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.48.0/23
Signature Algorithm: sha256WithRSAEncryption
03:5f:1f:f8:95:70:37:b8:44:89:db:eb:e6:44:6c:e6:ea:c5:
9f:a7:30:ca:8e:f9:7e:d4:ad:fb:70:bf:d0:7b:33:48:9a:4f:
1b:d8:0f:34:0b:06:95:ff:c9:b2:d5:49:5b:f8:0e:9d:a8:7b:
8d:1f:5f:a3:0d:c2:8d:67:42:43:07:68:71:ac:e1:74:0f:12:
fe:68:15:ec:ab:13:25:90:cc:4f:4b:9f:63:69:8d:1c:bd:b8:
27:64:3b:b1:60:a2:18:b2:82:d4:a8:5b:67:63:14:a4:7c:a7:
fc:36:fb:65:58:14:f3:0d:92:5b:3c:43:20:f7:56:03:f0:e1:
e5:6a:17:1b:fc:cb:4e:a9:37:6d:a5:f7:78:83:be:47:a2:17:
f5:15:61:20:f9:29:6e:98:e9:16:70:b7:0c:f4:50:d8:4e:f5:
33:68:4f:67:36:63:ca:a2:e9:73:77:a2:b2:ed:a4:07:02:fb:
01:43:69:84:b3:b5:bc:06:6a:5b:76:e2:87:69:42:6d:0f:28:
84:34:94:ee:0e:f8:f6:7d:1d:5f:42:38:49:af:51:e1:6d:35:
de:3c:5d:64:a2:d3:2a:f9:33:1e:22:ec:c4:b5:25:37:af:11:
c4:22:9d:70:fd:00:56:ff:b7:eb:5e:af:39:a0:30:fb:a3:72:
c8:42:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:13 2026 by rpki-client