
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e31322e302f32322d3232203d3e203234353437.roa
File: 3130312e35302e31322e302f32322d3232203d3e203234353437.roa (raw, json)
Hash identifier: CXps3HnRLUirgIdTYe1EiLvTT7leqdJSwfOqQxuzuOs=
Subject key identifier: 33:29:D4:6C:CC:B5:AD:66:FB:3C:80:07:72:CA:92:CE:3E:29:14:44
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 1BA3D2DE9D4DF1C93A589F57811977E52DD63281
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e31322e302f32322d3232203d3e203234353437.roa
Signing time: Wed 13 May 2026 10:01:25 +0000
ROA not before: Wed 13 May 2026 09:56:25 +0000
ROA not after: Wed 12 May 2027 10:01:25 +0000
asID: 24547
IP address blocks: 101.50.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a3:d2:de:9d:4d:f1:c9:3a:58:9f:57:81:19:77:e5:2d:d6:32:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 09:56:25 2026 GMT
Not After : May 12 10:01:25 2027 GMT
Subject: CN=3329D46CCCB5AD66FB3C800772CA92CE3E291444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:0b:e8:a3:14:8c:04:b1:c1:fe:f7:8b:a4:
2f:28:db:fd:23:5d:31:1a:0b:e0:38:0f:43:3c:c8:
27:d2:70:43:d2:b0:a0:bb:9d:92:f9:e0:6a:28:da:
ea:b2:43:f8:eb:12:3e:4d:e4:8e:dd:4d:91:4c:e5:
4b:c4:30:15:02:49:db:e7:1e:7c:21:65:0b:8e:ea:
f1:d1:66:b9:24:eb:8b:e1:0f:fc:21:57:c1:b8:72:
42:d7:29:03:58:1a:69:55:20:fd:a4:09:1a:9b:a4:
9c:93:15:05:6c:dc:aa:11:69:ae:a7:a1:46:5c:f7:
3f:89:19:f7:df:5d:9c:d0:29:c8:41:4d:c6:ae:94:
ba:da:33:b7:bd:f3:a6:b8:3f:7b:f4:c5:30:8f:42:
f3:8c:5c:cb:13:e4:4e:b2:51:24:ba:a8:0d:c6:05:
f5:25:64:a9:35:73:56:31:7f:d4:d2:4d:6c:cd:05:
ac:bf:a3:b5:f8:85:0f:e9:f3:d0:2f:0e:24:69:69:
a7:92:3d:e2:17:c8:66:f5:f2:6d:98:bc:63:61:0f:
8d:0b:36:3e:4a:41:32:9e:95:19:15:2c:b0:fa:20:
da:43:db:5f:e4:8e:2a:6b:15:5d:0f:5d:5e:72:60:
ee:81:5d:65:ec:d2:36:ae:f7:fc:96:8e:27:0a:ca:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:29:D4:6C:CC:B5:AD:66:FB:3C:80:07:72:CA:92:CE:3E:29:14:44
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e31322e302f32322d3232203d3e203234353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.50.12.0/22
Signature Algorithm: sha256WithRSAEncryption
56:87:8e:3e:08:22:eb:ee:40:6b:87:8b:5b:ec:73:bf:60:30:
6d:43:16:45:36:13:9b:2f:d7:25:c9:06:1e:35:e6:3c:fc:f2:
62:45:ab:5f:3b:da:b4:eb:17:00:b6:51:f7:aa:c5:77:4e:48:
92:07:a8:90:ff:a8:b6:2e:f5:ba:dc:6f:3c:1a:7a:14:89:24:
d7:81:2a:eb:78:3b:b8:14:dd:72:2c:49:af:7c:8f:18:c1:17:
72:9e:b0:14:1e:82:3c:e3:ee:00:eb:8f:b5:4f:99:b3:85:43:
1b:11:ed:8c:d1:18:04:4a:2b:fd:53:b4:35:39:b2:2c:51:ad:
ac:f6:9f:fa:18:c7:3b:fe:32:26:63:39:55:96:3e:ff:fd:4e:
13:19:ea:b4:f1:de:0c:79:ab:2d:51:cd:80:46:b5:26:ca:9a:
2a:38:1b:f6:30:26:a8:82:e7:c7:54:30:a3:f3:e5:46:bf:f9:
e0:26:49:2c:77:99:9f:82:de:1e:a9:b9:f8:9a:83:b5:09:62:
08:17:a0:6d:65:2d:c2:ff:22:84:9d:a1:f9:cb:18:b9:da:ef:
f8:ed:ca:84:75:5c:84:af:88:17:f7:bf:4a:ec:2c:ff:75:53:
85:08:f7:cf:f6:1a:c7:09:a3:27:ad:02:98:31:27:95:1e:ff:
a0:73:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:35 2026 by rpki-client