
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32322d3232203d3e2034383038.roa
File: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=
Subject key identifier: 77:DD:22:47:48:8C:A4:D5:56:DB:C7:6E:85:07:17:11:6D:DC:87:7A
Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial: 049B3809C4A50DC19C38B447F95EB7A3DA333FD6
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32322d3232203d3e2034383038.roa
Signing time: Tue 12 May 2026 09:41:48 +0000
ROA not before: Tue 12 May 2026 09:36:48 +0000
ROA not after: Tue 11 May 2027 09:41:48 +0000
asID: 4808
IP address blocks: 103.79.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9b:38:09:c4:a5:0d:c1:9c:38:b4:47:f9:5e:b7:a3:da:33:3f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Validity
Not Before: May 12 09:36:48 2026 GMT
Not After : May 11 09:41:48 2027 GMT
Subject: CN=77DD2247488CA4D556DBC76E850717116DDC877A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:6f:f0:47:d9:f0:93:89:18:6c:1b:e0:b5:
42:8b:61:f9:43:09:0e:e0:2a:d5:4d:43:ca:f0:85:
db:70:23:1d:6c:07:3a:49:c3:16:d9:0c:fe:86:96:
37:66:6e:1f:42:9a:76:48:aa:7f:24:a4:fb:4b:48:
b2:0e:7e:dd:3b:ac:20:1a:e6:1e:8a:0d:e8:d8:8c:
ed:94:99:49:c0:b3:89:42:0c:be:db:b7:f0:f9:bf:
48:f9:c0:10:0f:a4:24:8b:f5:cb:3c:3e:3e:08:e6:
f6:14:42:83:b6:07:30:16:54:21:fe:dd:c1:b5:7f:
e8:1e:7f:91:e2:58:ff:bf:b3:5c:11:c2:62:bf:d1:
90:3e:70:c1:82:c5:70:2f:59:9c:79:da:5a:75:c5:
d7:04:61:d1:31:51:eb:91:f3:a2:5a:34:54:eb:c4:
2a:de:f7:d4:bb:42:44:ae:87:27:60:fd:65:0e:5a:
02:20:44:3d:69:fc:02:d9:fe:3f:08:2c:8e:16:13:
2f:de:3b:40:05:04:77:84:4c:16:ca:2a:9f:01:3d:
8e:03:75:66:19:5b:fe:4c:69:b0:6b:54:05:60:a7:
58:b6:99:56:46:6b:70:87:6b:24:21:31:94:68:f4:
18:03:c1:f9:b2:38:bc:a3:77:09:1e:b4:99:07:69:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:22:47:48:8C:A4:D5:56:DB:C7:6E:85:07:17:11:6D:DC:87:7A
X509v3 Authority Key Identifier:
keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:9b:38:e5:62:f0:dd:92:17:4b:b8:bf:59:37:06:a6:90:91:
11:1e:01:93:82:a8:41:ab:6f:12:81:e6:85:76:2b:97:a0:20:
96:b7:8b:ef:62:5e:b3:8c:06:93:e6:fb:43:25:b1:6f:52:f2:
f8:a9:f7:10:7f:01:3f:7b:70:29:1d:b7:c5:e1:b7:b5:2e:a6:
b8:ac:60:f3:e9:4a:43:c1:bf:ce:f1:10:ff:79:5a:63:29:5f:
01:0c:2a:02:95:e4:47:9c:ef:f6:a0:fa:d4:b2:6b:c2:ef:74:
87:62:e6:73:9a:f7:e9:60:9a:85:fb:10:41:28:17:94:84:d2:
25:5a:1f:d1:cb:89:af:31:57:fd:33:3f:b0:03:c6:b8:1e:a7:
c3:76:c6:57:b7:08:f8:01:17:32:c9:16:44:65:17:be:fd:40:
34:a5:d8:ae:51:80:b6:79:a5:32:f5:11:fd:fe:67:63:85:22:
e5:06:30:e3:2e:9e:20:60:a4:70:25:54:82:25:4a:98:d7:13:
33:91:8b:ec:13:fb:26:48:e3:ec:50:5b:7e:79:49:76:81:57:
34:a7:d4:c6:86:4d:cf:9d:32:90:97:35:34:5f:1d:38:06:7e:
56:72:57:9b:e0:70:21:79:2f:15:6c:16:f6:07:1e:52:0b:93:
c7:da:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:26 2026 by rpki-client