
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa
File: 3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier: R+6nV/q63c0bx+Mf28Q3uacYRl9wrZm/e4V4+Hj0hRs=
Subject key identifier: AC:10:D0:0D:E1:00:DD:F4:76:C9:87:BD:F6:86:3D:B9:B1:90:CC:C2
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 63E626817A07115B89374E8F113F93EC90398614
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa
Signing time: Wed 13 May 2026 10:05:11 +0000
ROA not before: Wed 13 May 2026 10:00:11 +0000
ROA not after: Wed 12 May 2027 10:05:11 +0000
asID: 17621
IP address blocks: 103.202.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e6:26:81:7a:07:11:5b:89:37:4e:8f:11:3f:93:ec:90:39:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:00:11 2026 GMT
Not After : May 12 10:05:11 2027 GMT
Subject: CN=AC10D00DE100DDF476C987BDF6863DB9B190CCC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:80:3f:f6:bc:5f:8f:31:bf:08:96:62:8e:
17:54:28:92:06:e9:97:92:e8:bf:b9:a9:df:00:4f:
dd:2f:cc:a7:22:90:ac:d3:01:fc:3f:9f:b2:98:eb:
60:9b:69:cb:ff:39:74:5a:54:2c:69:01:af:13:ba:
14:e9:4f:07:e0:5f:67:d8:0e:ac:7b:15:8d:e8:df:
e3:2a:bd:65:52:b9:61:c3:bc:9a:2a:4e:e7:e2:8f:
1a:9c:ae:f5:b4:0b:10:5d:6e:0f:f9:86:51:cb:39:
27:2f:2f:00:10:a2:36:c3:03:1b:a0:85:f6:59:e6:
51:85:41:37:be:8c:75:97:99:2e:96:10:a0:69:2d:
c9:e5:08:49:a3:3b:f4:1d:10:31:40:94:26:6f:61:
fc:27:22:dc:48:ec:6a:d5:75:4b:19:aa:4d:13:55:
d4:53:58:9e:00:04:b1:08:4d:04:4a:22:ee:68:f2:
34:6c:24:a9:8f:71:26:cc:14:c0:50:7c:ef:a0:b2:
c3:c1:ff:48:82:4e:22:0b:18:64:62:63:26:ac:81:
a5:ed:20:3e:3a:0e:f1:40:eb:d0:6a:cb:a4:e1:80:
eb:af:9e:1a:4d:55:46:b4:ea:47:11:86:a5:d8:82:
cb:1f:9e:62:c5:a4:12:8b:37:3a:ab:78:53:37:60:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:D0:0D:E1:00:DD:F4:76:C9:87:BD:F6:86:3D:B9:B1:90:CC:C2
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.104.0/22
Signature Algorithm: sha256WithRSAEncryption
40:76:07:bc:4a:81:06:dd:16:ef:bf:60:bc:4f:a4:cd:5c:b9:
06:7a:8e:08:fb:8d:37:1a:55:c4:87:1e:18:38:2d:b8:35:00:
58:05:52:15:04:69:f9:6a:e5:30:66:bf:4d:4d:9c:e2:ed:e2:
34:5b:21:6f:93:df:9a:9b:50:30:f8:77:7b:21:ea:9f:00:e5:
f4:47:39:4f:1c:e3:6c:3e:64:33:bb:0b:c7:fe:ef:14:a5:5e:
7b:20:65:72:8b:3c:da:6f:a2:96:4e:a3:33:c6:15:63:ff:a2:
11:96:7d:4f:d2:7b:fa:04:fe:c8:59:08:f4:eb:f7:ca:93:d0:
db:a5:e3:09:88:9d:03:e7:aa:e2:02:2d:c6:9a:c7:93:49:67:
91:50:7c:18:d2:5c:af:ca:61:33:ea:cc:e5:1e:56:47:98:d2:
db:4d:70:4f:7b:3e:39:7e:ed:56:ba:61:23:18:77:db:e5:7d:
c2:63:64:b2:e7:42:3f:f0:d4:11:33:f7:70:a7:a4:80:e5:ad:
8b:c4:c0:6f:ea:2d:f6:ac:47:be:ac:cf:7e:7a:a8:8a:48:11:
ca:88:5e:db:93:6f:15:04:a9:b4:b7:69:a1:75:76:58:91:9b:
ba:97:09:47:36:62:4d:ed:df:3e:ff:6c:81:a3:10:a9:7d:c7:
8f:77:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:33 2026 by rpki-client