
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa
File: 3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: InTOOdjEW7lOP4AuxhfIYnA8N2CWDLSF5w9U1Qh1sTw=
Subject key identifier: 71:27:C2:B1:5F:DE:F2:94:EF:AC:CC:B1:33:8F:10:F9:12:50:83:A0
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 1F92AD515E5E47384081AB4E58C50AC33CF8453A
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:01:24 +0000
ROA not before: Wed 13 May 2026 09:56:24 +0000
ROA not after: Wed 12 May 2027 10:01:24 +0000
asID: 4811
IP address blocks: 103.200.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:92:ad:51:5e:5e:47:38:40:81:ab:4e:58:c5:0a:c3:3c:f8:45:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 09:56:24 2026 GMT
Not After : May 12 10:01:24 2027 GMT
Subject: CN=7127C2B15FDEF294EFACCCB1338F10F9125083A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:ff:b4:37:2c:0d:6c:c6:fb:a9:78:f9:1e:
c7:ae:49:06:5f:9a:b5:c8:2d:44:84:ab:cf:fa:1c:
ce:97:69:47:86:68:10:f5:3d:0c:2c:39:e3:3f:4d:
d8:f9:9e:6d:1c:d4:07:d6:96:39:bc:6f:be:99:64:
00:45:47:03:db:b1:40:26:28:e5:e9:1f:80:ee:3c:
08:92:68:3b:72:11:3b:e6:53:07:ab:13:3a:4c:69:
15:6c:bf:3f:d4:8d:ca:c4:0d:2a:cc:f6:42:86:f1:
d6:3c:ea:e0:26:24:cc:94:09:3e:28:dd:3b:fa:78:
ad:06:88:1d:a5:db:a9:cf:a0:cb:e2:58:01:78:03:
2f:85:51:47:67:17:4a:85:ad:91:09:6d:71:05:ea:
87:4e:f3:c4:6e:51:c9:53:13:b5:a1:2a:ff:08:4f:
af:9b:f9:47:4a:bd:8c:c1:8c:fd:8b:66:7d:a9:a1:
79:35:44:a3:6f:5f:81:a9:21:0e:ba:d6:f5:cd:2e:
1f:b0:18:a1:14:8c:3c:01:cb:14:2f:63:e3:6c:cf:
cb:78:20:83:54:93:b6:f5:15:f9:2b:54:c4:e1:d2:
17:a3:cc:83:82:a8:91:9d:14:f9:5f:b7:f3:84:3b:
00:ee:0b:dd:93:a1:19:7e:11:c2:e9:75:0d:58:5f:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:C2:B1:5F:DE:F2:94:EF:AC:CC:B1:33:8F:10:F9:12:50:83:A0
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.200.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:a8:7b:2c:f0:a0:7c:e1:f2:cb:0b:e8:60:be:6c:6b:cc:81:
76:d3:44:34:4f:22:a7:16:0a:00:0b:bd:e1:e0:0e:39:e6:d8:
d3:a1:7a:e7:df:69:e0:13:d0:ac:df:2d:a5:9c:27:29:67:4d:
9e:cc:fc:63:4a:18:1a:6d:22:1e:bc:ac:5e:bd:aa:21:e6:1f:
70:2c:dc:11:a3:8e:74:07:23:b6:3c:4b:0f:90:6d:f9:7d:11:
d4:19:d4:f8:46:bd:9f:f6:6e:77:b9:bc:21:bc:65:91:79:d1:
fc:1a:7d:90:b7:02:39:7f:a1:c9:55:47:60:2b:84:dc:33:11:
0c:5e:b5:89:bd:e3:87:01:33:99:fc:5d:43:0c:c0:d0:54:fa:
64:b8:5b:20:88:aa:1d:39:a1:80:06:87:21:8b:37:cf:cf:00:
da:d5:47:f6:68:f2:e8:a0:52:5a:34:1a:f4:99:fc:84:b0:ee:
bd:00:dc:c5:ce:25:81:5d:23:c4:cb:31:9a:65:d4:bc:b4:d2:
09:0b:88:4a:5e:30:8f:91:fd:42:5f:44:13:c2:9f:52:fd:02:
af:2e:52:5c:23:b8:bf:1d:0f:1f:9d:6b:78:ba:ba:38:90:1a:
99:5b:11:50:d6:1f:b6:cb:fa:e7:82:5a:3c:68:25:d8:37:ea:
0b:c5:23:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client