
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32322d3232203d3e2034383437.roa
File: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=
Subject key identifier: 81:81:9F:F9:90:68:21:7A:42:AB:7C:8A:6B:A1:33:1A:9A:2E:F3:C1
Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial: 0C0AF5FF0DD1EDF6BF70A05D24BDEB76FAE95E5B
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32322d3232203d3e2034383437.roa
Signing time: Tue 12 May 2026 09:41:48 +0000
ROA not before: Tue 12 May 2026 09:36:48 +0000
ROA not after: Tue 11 May 2027 09:41:48 +0000
asID: 4847
IP address blocks: 103.79.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0a:f5:ff:0d:d1:ed:f6:bf:70:a0:5d:24:bd:eb:76:fa:e9:5e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Validity
Not Before: May 12 09:36:48 2026 GMT
Not After : May 11 09:41:48 2027 GMT
Subject: CN=81819FF99068217A42AB7C8A6BA1331A9A2EF3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:6a:28:af:0a:ca:2f:c2:2b:99:81:a1:df:
de:77:e8:fd:b9:f8:90:73:6d:cb:c9:29:9f:2c:38:
14:8c:58:66:67:9d:04:cf:9e:86:f0:a4:1c:38:98:
3d:ec:c8:6e:ce:a7:4c:fe:0c:bb:5d:4c:6f:44:83:
73:f1:2a:23:4a:4f:d5:54:42:54:22:72:dc:5b:47:
e2:76:12:31:97:01:75:c7:da:8d:ed:37:ff:db:c4:
09:18:ef:1e:a1:14:fe:d6:1f:05:ee:8f:69:45:b6:
06:cb:0e:59:15:b1:3c:8b:91:f6:49:1f:31:55:35:
11:74:46:2d:03:12:a6:08:15:f5:db:1b:a0:6b:4b:
37:38:ba:5c:fa:50:29:d5:c0:db:49:72:18:04:36:
99:50:d9:72:f8:76:f4:c3:3b:34:fe:28:87:50:f1:
16:43:61:1d:6f:7a:03:1a:e2:74:ca:8e:f5:b3:f5:
8e:eb:67:ad:85:51:d7:0c:8c:91:c8:76:88:ab:a8:
42:50:ba:23:ed:d9:0f:49:62:15:d8:3a:dd:e7:82:
d2:3d:59:95:29:c8:72:76:53:ca:51:81:0b:80:ce:
df:51:14:c1:b0:1d:51:32:3c:8e:cd:97:cb:5f:fa:
2c:59:6e:38:f6:98:1c:ef:02:47:e1:7b:36:3f:62:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:81:9F:F9:90:68:21:7A:42:AB:7C:8A:6B:A1:33:1A:9A:2E:F3:C1
X509v3 Authority Key Identifier:
keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:b3:74:b3:56:86:78:3c:68:28:a6:cb:6c:04:a0:81:65:19:
ff:80:80:e3:ed:6d:9c:c0:17:4f:a5:e2:d4:e5:f2:c3:2f:b7:
07:85:07:51:5a:6d:5b:4f:cc:e8:19:47:9d:db:66:8c:83:52:
f2:55:db:c6:5b:28:bd:b4:13:ef:da:31:e4:fb:c1:59:8e:40:
98:f6:f2:b1:28:ea:c1:47:f1:da:a3:e8:8f:db:7a:f2:aa:ab:
cf:f3:73:03:bf:7a:34:2d:cc:8f:ec:1a:f6:f3:37:77:2b:ac:
02:94:84:2f:73:4e:f8:43:9b:c1:ea:9d:a3:2b:05:2b:f4:3b:
63:12:0e:5d:95:b5:0f:31:29:45:4d:04:65:d9:2d:bc:0e:2a:
20:87:e0:5a:96:df:a1:92:99:13:c0:00:c1:fa:70:fb:1d:83:
68:d9:3e:65:54:87:0d:76:4e:ce:85:0e:5a:40:b3:7d:ad:cd:
8b:54:cb:c3:4e:59:33:80:fb:62:10:01:af:66:25:4e:b3:0f:
90:55:8e:50:5c:6f:e4:b4:4a:96:b2:6c:3a:5b:17:4c:15:18:
5e:f1:14:ab:4c:ba:c9:bf:5a:aa:b8:7b:44:e9:6a:88:9a:b1:
fb:d2:ea:a5:01:38:c3:5a:a0:fe:cb:2f:25:6a:39:98:bc:79:
ae:04:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:32 2026 by rpki-client