
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: t+0kFLiobHUWWliIj8mMCAKjvn9Lu5qg82iGrH3pY98=
Subject key identifier: E5:57:5E:01:82:C1:E0:F0:A9:CD:FA:E4:75:5E:31:0D:3F:A2:05:99
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 2F5B42408A301C1546B71FB956B937F8014E7105
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:05:11 +0000
ROA not before: Wed 13 May 2026 10:00:11 +0000
ROA not after: Wed 12 May 2027 10:05:11 +0000
asID: 4811
IP address blocks: 103.202.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5b:42:40:8a:30:1c:15:46:b7:1f:b9:56:b9:37:f8:01:4e:71:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:00:11 2026 GMT
Not After : May 12 10:05:11 2027 GMT
Subject: CN=E5575E0182C1E0F0A9CDFAE4755E310D3FA20599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:a8:61:49:77:53:90:d5:af:fe:f1:56:d9:
a9:04:fe:36:24:bb:0d:0e:1c:5d:cc:bf:02:91:46:
42:eb:0d:24:c7:74:ad:65:c2:19:d4:fa:a6:fa:ae:
cf:2b:77:98:a1:a0:9d:b3:87:9e:56:2a:16:c9:f2:
c2:d2:bd:0a:9f:35:ef:ee:5a:1a:51:5d:16:a6:e0:
25:7e:e5:39:1f:e3:16:44:70:f6:04:00:bd:35:e3:
a1:5f:0f:eb:2d:79:aa:63:dd:f3:4a:54:5e:be:e8:
ac:6d:12:77:ed:24:10:37:54:e0:d4:25:ad:33:e2:
b4:60:f2:28:49:8a:27:ec:8b:9d:64:4f:28:65:7b:
97:45:1c:ec:89:2a:79:7a:67:07:bd:ad:8c:c1:06:
20:d8:72:f2:6d:f9:73:dd:cd:73:6a:87:30:c8:7d:
53:83:23:1e:c1:95:04:68:5f:bf:de:c8:8d:31:4b:
6c:09:c6:57:29:89:c3:6e:a3:2e:da:64:03:61:a2:
4f:5e:19:14:44:76:ce:10:e9:94:d2:f8:9e:b2:b2:
78:60:7b:3d:ca:57:d0:d6:ae:a1:3e:09:15:85:81:
ce:d1:bf:fd:48:a6:01:e5:65:71:fb:64:22:54:07:
3f:7f:a1:f1:11:4f:09:cf:51:b0:a0:b7:3f:6c:78:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:5E:01:82:C1:E0:F0:A9:CD:FA:E4:75:5E:31:0D:3F:A2:05:99
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.120.0/22
Signature Algorithm: sha256WithRSAEncryption
93:6f:d1:65:44:1d:e3:9d:e4:31:9f:ac:d9:d9:56:62:a3:d7:
31:00:6f:f7:88:bd:91:f6:32:12:d0:aa:4f:96:b4:d7:c4:b3:
15:90:b8:06:cb:55:e5:ab:29:75:fd:7a:9b:80:26:bf:87:e6:
c3:09:24:7f:24:ff:d7:52:33:b6:94:b9:8a:ba:bc:e8:fe:19:
4b:d7:bb:0d:3d:13:67:64:21:1f:3f:4c:5e:04:e7:00:27:12:
3a:47:ea:93:01:9c:56:2c:43:cf:9e:b8:47:30:b4:4d:35:6c:
aa:3b:72:de:ee:fa:e0:b1:95:77:27:07:5e:3f:10:5f:9b:25:
8a:bd:53:f9:41:b9:ac:60:d0:70:71:50:bd:bf:5f:dc:1e:ad:
0e:34:3b:83:84:2e:16:63:ae:f5:50:b8:ae:a4:ff:c0:c2:c1:
67:aa:1e:c3:49:0a:de:83:7c:1a:b6:4d:74:41:16:cc:0a:79:
17:0b:a3:6f:5c:cc:97:d4:b1:05:89:c9:ba:3d:f2:43:b0:4f:
dc:ed:af:af:87:3a:ca:1a:cf:03:8a:de:2d:fe:07:91:87:bd:
7a:6f:d1:24:28:d1:f4:60:2b:c3:9d:72:2a:1e:76:68:ce:fa:
81:a4:42:14:39:a7:18:91:ae:72:4f:37:7e:3a:51:98:13:5e:
ef:c4:92:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:35 2026 by rpki-client