
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: v5tS5JZZ0sAPZxL+D0C1/AP3i6cGuCUnF4s32jXfyg8=
Subject key identifier: 21:FF:FC:0B:6B:EB:89:6A:30:19:E3:C9:EC:91:F5:FD:28:FF:34:63
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 2F57DA71B0AFA1C5685A626A68D76F4EA4CE1F5D
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:05:12 +0000
ROA not before: Wed 13 May 2026 10:00:12 +0000
ROA not after: Wed 12 May 2027 10:05:12 +0000
asID: 4811
IP address blocks: 103.202.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:57:da:71:b0:af:a1:c5:68:5a:62:6a:68:d7:6f:4e:a4:ce:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:00:12 2026 GMT
Not After : May 12 10:05:12 2027 GMT
Subject: CN=21FFFC0B6BEB896A3019E3C9EC91F5FD28FF3463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:3e:cf:59:7e:0b:6d:ac:94:cd:d5:d3:0f:
3f:fa:e3:02:0b:43:42:f9:31:85:b4:a5:92:4b:d2:
ee:1c:aa:9b:2a:b3:31:03:45:ae:07:ed:19:e1:a6:
7f:b3:02:ec:df:d8:56:e6:80:b8:6c:d4:b3:a9:7a:
10:00:01:6c:b6:f0:c4:53:0c:4f:db:a0:7e:f1:8a:
85:76:00:b7:d9:c4:39:ae:d9:7c:e1:b9:5c:77:9d:
a4:1f:e5:fb:b3:93:fc:cd:66:69:82:74:9f:be:cf:
3a:e0:82:b0:ab:6b:a4:4f:2c:68:c5:58:b9:db:da:
cf:7a:72:7e:3a:c4:0d:85:67:4f:f1:d2:1d:16:ac:
a3:9a:02:cc:29:9d:0c:ee:d5:ae:cf:54:e1:c6:d3:
30:bc:a2:22:9f:3d:27:dd:d9:03:e0:0d:76:a8:ff:
8f:65:de:90:e6:8e:f7:dc:0e:b4:47:1c:72:ac:6c:
93:a1:af:76:4e:98:8d:e4:4e:fa:d5:e2:a0:8f:5c:
fa:e9:f2:a8:57:52:ec:21:46:41:f1:bd:49:ea:ce:
b4:c8:d5:0a:17:51:7a:3b:16:79:64:84:0e:62:6a:
16:14:96:34:72:3c:dc:df:8b:88:fe:a3:57:14:f1:
9d:d2:cf:49:a1:da:76:b0:fe:24:c7:fa:d9:ae:8b:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:FC:0B:6B:EB:89:6A:30:19:E3:C9:EC:91:F5:FD:28:FF:34:63
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.112.0/22
Signature Algorithm: sha256WithRSAEncryption
08:b7:1c:0c:46:dd:3a:2c:37:ce:b4:fe:d1:8a:a7:6d:65:dd:
45:61:3d:43:5d:42:c3:68:db:f2:bb:9b:d6:9a:0c:1c:ad:53:
39:ba:8c:3c:20:76:1d:e1:44:04:35:5a:45:1b:a4:c9:b2:76:
db:e4:a9:fb:a0:4b:0f:82:95:db:9f:78:12:04:ea:3a:b3:f6:
2c:a9:83:58:e5:08:8d:f0:b0:89:c2:c9:9c:1f:74:e5:d4:05:
0f:0b:4b:6f:f7:19:c6:cd:96:b1:97:01:b5:6f:dc:5b:7d:c9:
a1:93:d9:b0:da:da:b9:d5:46:6a:05:9f:11:d8:df:0f:b7:04:
80:be:3d:8e:c4:8c:28:21:bf:ac:69:0d:13:5e:82:93:56:70:
4a:0b:13:6d:63:f4:9b:d9:38:05:43:3f:99:1a:f6:3d:3b:fd:
ff:45:3a:5d:c7:f3:d5:73:8e:5a:01:eb:9e:3c:1a:e9:89:f5:
24:ab:57:d8:97:59:f8:cc:08:29:cf:04:3b:94:53:de:f0:96:
10:cb:a0:93:5a:45:1d:a7:d5:42:14:c5:91:c6:1f:6c:01:de:
b3:8e:09:ca:01:37:e5:da:eb:b0:ff:53:b0:58:cc:ca:8d:14:
82:58:66:8d:49:2d:8f:4b:ef:b2:5d:55:65:f3:a4:d7:ba:5a:
30:e6:fc:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:33 2026 by rpki-client