
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e31322e302f32322d3232203d3e20313431373731.roa
File: 3130312e35302e31322e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier: 867rAOSf9MH3aTsqN6kvGu2HGBa9hFbzMNFlS13tI1Q=
Subject key identifier: D7:33:D8:2E:80:6B:77:1F:22:32:99:BC:0A:7C:4F:17:D1:8D:E7:D5
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 1C1DEA9A73E4845C33E3E168BFEEEDA315C83AC9
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e31322e302f32322d3232203d3e20313431373731.roa
Signing time: Wed 13 May 2026 10:01:25 +0000
ROA not before: Wed 13 May 2026 09:56:25 +0000
ROA not after: Wed 12 May 2027 10:01:25 +0000
asID: 141771
IP address blocks: 101.50.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1d:ea:9a:73:e4:84:5c:33:e3:e1:68:bf:ee:ed:a3:15:c8:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 09:56:25 2026 GMT
Not After : May 12 10:01:25 2027 GMT
Subject: CN=D733D82E806B771F223299BC0A7C4F17D18DE7D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:04:6d:d0:18:e9:03:b0:23:05:de:dd:53:
b6:b8:26:ae:41:38:4c:34:19:24:07:7b:d1:98:25:
8e:e4:33:9e:3c:aa:1f:9d:c4:d2:0b:84:02:33:a3:
b2:f6:55:62:57:2a:7a:c5:fe:98:5e:60:74:a6:68:
e9:50:64:d2:2d:d6:4c:72:3d:a8:65:7c:26:04:e2:
e4:be:e3:7d:00:7c:b6:f3:1a:39:0f:c8:a4:83:7b:
8a:99:a9:d3:bb:14:36:ce:72:47:10:5b:1b:26:54:
08:db:61:c3:c8:0e:36:87:d8:05:d6:13:73:1b:aa:
45:5c:61:52:04:19:a0:5a:e3:fa:c0:d3:c5:9c:7b:
ae:ab:42:a9:f3:96:fd:d0:d1:35:ab:f5:0c:80:c4:
95:49:88:9a:c1:4e:2c:23:4b:97:6e:14:cf:4f:0b:
83:32:05:a2:91:38:2e:90:ef:da:5a:d2:c6:86:fd:
c1:4e:2c:70:43:f5:32:3f:8a:0f:87:8b:ac:1c:44:
ae:2e:f2:45:f1:6e:2c:91:6f:2a:ae:2a:fd:c4:9f:
0c:c7:83:17:03:d9:ab:42:51:53:59:4b:4d:f1:f2:
ed:91:f1:14:62:e8:34:26:5f:53:e5:73:8f:be:a8:
00:fc:3d:cc:84:72:99:03:96:e3:ff:ab:6f:f6:89:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:D8:2E:80:6B:77:1F:22:32:99:BC:0A:7C:4F:17:D1:8D:E7:D5
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e31322e302f32322d3232203d3e20313431373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.50.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:45:c6:a0:f1:73:56:c9:d2:f1:f9:48:21:06:74:15:cd:42:
ed:77:be:3d:96:8e:04:17:a3:09:46:31:34:f3:00:2a:6c:2c:
7f:59:91:ab:79:f2:c1:74:54:2a:df:73:ab:d6:be:95:44:66:
f7:41:da:61:0b:48:66:48:59:23:db:96:e8:55:f4:62:4b:4d:
f3:0a:b0:dc:2f:81:8b:6a:1f:bd:3b:aa:ba:ae:a0:21:21:3b:
69:8a:6a:fa:ea:b6:f9:fa:28:ba:54:e7:6f:90:e0:e5:62:0b:
75:cc:eb:53:1d:fc:4e:14:20:63:8f:3b:2e:64:c6:b4:26:c9:
48:22:5d:21:d7:32:d9:f1:82:81:6e:97:52:2a:97:87:a0:62:
1c:cc:1a:33:5c:04:25:f1:a8:c6:06:f7:79:a1:87:4b:a6:77:
c4:d0:74:ed:ad:a5:e6:c3:13:3e:1e:13:3d:71:78:cb:13:6b:
27:2c:d5:17:83:c7:30:3c:00:e5:0a:98:f7:e3:94:b4:ee:c5:
ee:7b:82:54:33:0d:6c:21:5b:ab:fe:96:3d:20:37:bd:fa:eb:
fe:a2:64:6a:78:1e:66:94:cf:24:43:a0:7f:d3:42:29:b8:42:
db:3b:2f:97:b6:9e:c2:65:2b:9f:d7:2d:ec:84:f1:e4:1c:10:
3e:2f:50:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:32 2026 by rpki-client