
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: oAE3UH1BkehOWwH0WdjvNbfshdqsGHvxSkWbT+Qrfvg=
Subject key identifier: E5:6B:4A:A6:9C:E6:25:DA:78:31:B1:8E:C9:CE:F2:1E:E8:FB:49:1E
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 5E8443546E8DD781D3990784DFFF5116111B48B1
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:01:25 +0000
ROA not before: Wed 13 May 2026 09:56:25 +0000
ROA not after: Wed 12 May 2027 10:01:25 +0000
asID: 4811
IP address blocks: 103.202.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:84:43:54:6e:8d:d7:81:d3:99:07:84:df:ff:51:16:11:1b:48:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 09:56:25 2026 GMT
Not After : May 12 10:01:25 2027 GMT
Subject: CN=E56B4AA69CE625DA7831B18EC9CEF21EE8FB491E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:0f:91:26:03:b3:7b:1e:3e:bb:a3:ab:ad:
d7:18:6f:36:74:fd:47:ba:54:a5:41:38:f3:6c:fb:
b9:2a:a5:25:9c:0b:09:02:c3:e4:d8:e0:ae:d4:62:
77:fc:6f:f6:7b:ed:35:95:f0:44:78:11:6f:28:13:
5e:a0:37:7b:09:dd:8f:ab:01:2f:30:17:6e:21:47:
e7:4a:71:1b:76:50:6a:98:b3:96:99:87:2b:92:85:
66:45:3e:b6:51:ff:22:02:e0:ea:fe:4c:f7:71:44:
44:b8:d2:7c:80:79:7d:2d:76:0c:5f:3d:95:e0:e8:
97:fb:dd:6a:27:bd:74:78:9b:b1:25:e8:3f:e3:78:
4a:9a:a5:ad:05:55:f5:49:0a:98:21:43:f1:2e:9e:
a9:66:b2:12:27:8d:47:b9:47:bf:93:bc:8c:17:9f:
aa:98:9b:9c:41:00:6a:70:48:b2:96:0e:34:30:d3:
1a:62:63:33:50:26:ed:d4:c4:81:9d:2c:70:95:83:
a4:cb:01:28:4b:5a:e6:98:49:a6:39:c9:61:df:2e:
05:7e:12:e9:ef:08:06:7a:0b:2a:ba:ed:4f:b7:ef:
59:06:a1:8e:bc:d7:29:16:c5:a4:55:04:b6:dd:20:
53:4a:9e:f5:9c:5b:d8:e5:38:4f:22:43:d5:1e:bb:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:4A:A6:9C:E6:25:DA:78:31:B1:8E:C9:CE:F2:1E:E8:FB:49:1E
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e2:a8:d7:08:76:f7:13:ce:ea:36:2f:24:ed:39:09:80:77:
aa:cf:a5:7d:b3:ee:1e:fa:0f:52:28:e6:28:af:2d:fd:d0:92:
dd:20:fc:93:7f:13:e6:23:a5:98:f5:bd:ac:bd:29:28:ca:4e:
4f:5a:9e:93:cf:f9:5c:e4:02:d0:66:5d:33:2e:46:50:b5:95:
1e:55:16:da:42:75:e3:14:a3:eb:82:b0:dd:8e:d3:fc:b0:a7:
54:33:8b:90:83:83:ce:6a:95:1b:4f:26:1c:a9:39:92:a9:f0:
8b:43:5a:44:97:19:14:f3:e0:17:2f:49:25:db:a1:2a:06:2b:
d1:e3:cc:28:e1:19:20:f5:f6:02:95:4c:02:46:f1:0b:9a:fa:
69:49:32:92:9b:77:ea:5b:59:2b:40:0e:60:f8:22:be:9d:cb:
e5:72:2d:7c:f8:a4:37:6a:e1:3c:f1:94:8d:e1:4c:7d:61:66:
55:6f:0e:74:17:66:7e:31:15:e1:3e:e3:c7:7f:33:46:5f:34:
e5:3d:cc:c3:bf:c8:59:a0:77:27:44:ce:f6:1d:85:19:96:89:
0d:38:98:1d:c6:6a:fd:b2:23:15:39:2f:8e:ad:a4:f5:e9:ab:
a5:a9:c7:35:0a:72:e0:84:c3:59:78:22:de:73:de:9e:99:31:
0b:49:cd:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:35 2026 by rpki-client