
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa
File: 3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier: tH/PYynHKJaSQf+QX12Lom5FnAU4Sx941ToBzaHKylQ=
Subject key identifier: D1:45:15:F8:8F:5D:69:2F:4E:4F:12:0C:82:67:42:73:C2:33:1E:58
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 423536E986B6FDF2CDD5EFC8D64409A0696E25C5
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa
Signing time: Wed 13 May 2026 10:11:15 +0000
ROA not before: Wed 13 May 2026 10:06:15 +0000
ROA not after: Wed 12 May 2027 10:11:15 +0000
asID: 17621
IP address blocks: 103.202.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:35:36:e9:86:b6:fd:f2:cd:d5:ef:c8:d6:44:09:a0:69:6e:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:15 2026 GMT
Not After : May 12 10:11:15 2027 GMT
Subject: CN=D14515F88F5D692F4E4F120C82674273C2331E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:01:2e:b5:6c:9d:00:a6:72:20:e3:93:ac:
37:37:d1:03:09:3f:c5:3c:31:62:26:ff:7f:65:22:
c8:0a:34:0d:ed:3d:2b:f9:32:33:5b:81:e3:7a:74:
0e:f9:fb:50:e9:b0:9f:bb:d5:f3:0e:ec:b5:49:cc:
2f:a5:35:ba:8d:d7:22:10:62:ac:32:8b:86:e5:a5:
b4:41:90:2a:9c:e2:63:84:d2:e5:13:f9:1b:5a:00:
e9:93:13:34:e4:6c:e6:89:d3:43:b0:4e:82:c0:fa:
bf:6a:5f:45:d3:65:c0:a3:8b:a8:07:8b:a6:fd:73:
b1:d5:68:08:65:f6:11:dd:5e:48:bc:f0:74:96:b9:
ea:28:0e:58:18:3d:39:29:60:95:20:89:fe:6f:0a:
b1:d1:12:9e:e5:03:6f:e5:e3:d2:7d:53:69:ef:7f:
2c:3c:85:cf:cb:e2:96:fd:b9:41:ab:80:6e:20:a4:
9a:fc:14:82:2a:40:a7:d8:e0:9f:9e:bf:ac:13:9a:
d0:b7:17:e0:96:77:f9:ef:0c:97:a2:80:ce:f3:15:
0a:cd:c3:57:2c:58:8a:73:14:d0:c7:8d:46:e7:53:
2a:5b:02:7e:96:83:3a:b8:27:34:f3:82:c8:39:a9:
a2:78:7d:3b:92:b5:3c:b7:95:5b:1a:3d:e1:55:8a:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:45:15:F8:8F:5D:69:2F:4E:4F:12:0C:82:67:42:73:C2:33:1E:58
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:b1:99:e5:f6:6b:74:35:69:fb:19:8f:dc:21:88:a3:ea:82:
86:87:e0:ee:8c:21:19:19:7f:41:0e:23:59:bb:d5:e5:d6:99:
e1:0e:92:aa:c2:b3:a7:32:73:06:77:c1:1a:5f:ea:d2:95:a0:
f1:e0:52:1d:ab:06:0b:41:c8:a5:20:6f:f1:44:b4:94:42:47:
ac:6d:6e:61:a4:3f:d8:ad:75:6e:9a:c7:0b:9b:f5:73:ac:5c:
b6:81:d6:79:96:d8:91:25:1c:fa:5c:1a:49:94:ff:e1:c0:10:
d2:d0:88:48:4a:ed:ae:96:56:4c:ac:16:44:25:3c:12:b5:6d:
c4:3c:62:d3:ec:8d:63:bd:88:b6:0e:b1:a5:ff:90:da:15:a0:
90:81:88:75:af:30:7e:a0:50:82:5e:26:4b:4c:70:70:9c:e6:
84:36:30:f7:f4:ac:97:b5:77:60:6f:27:2f:a9:79:6d:93:25:
8b:1c:b6:fb:f2:65:8b:8a:c8:5f:d6:19:3c:cc:89:26:1a:a5:
db:ca:01:67:fa:64:ef:b7:bd:a8:4a:b8:9f:12:27:98:a7:86:
14:19:66:63:83:40:e1:a0:01:a9:fb:4a:87:45:72:6d:7d:f9:
dc:8a:8e:4a:eb:2e:3d:a4:8c:10:61:91:bd:a0:3b:16:c8:8a:
49:b7:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:38 2026 by rpki-client