
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: Ybi8h9aFyr2B65e3iBWcRUKXoKZrcwly52KFFVwXeH8=
Subject key identifier: 5F:CA:E4:F3:55:36:BD:2B:86:F5:B2:08:99:5A:22:BA:40:D4:56:60
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 6844F2C1818ADEF6A5FDC63F33812C751AF8B998
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:11:14 +0000
ROA not before: Wed 13 May 2026 10:06:14 +0000
ROA not after: Wed 12 May 2027 10:11:14 +0000
asID: 4811
IP address blocks: 103.202.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:44:f2:c1:81:8a:de:f6:a5:fd:c6:3f:33:81:2c:75:1a:f8:b9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:14 2026 GMT
Not After : May 12 10:11:14 2027 GMT
Subject: CN=5FCAE4F35536BD2B86F5B208995A22BA40D45660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:72:a8:e9:4b:a6:7b:34:93:cd:35:db:95:
5e:5d:c6:b6:37:83:f7:4b:71:d8:be:4e:26:79:09:
71:21:96:0e:79:bd:69:06:a4:ec:67:01:36:a7:84:
5d:eb:05:d2:b7:b9:13:e2:d5:1a:0f:2d:80:8e:d9:
ff:2e:64:b2:8c:7c:29:af:b3:aa:c2:bb:4f:7d:2d:
30:11:4c:0e:4e:67:12:4c:4d:0f:ad:c9:73:b1:44:
85:97:45:63:2c:41:91:5f:2f:85:d3:e1:3b:fb:06:
bc:89:b1:ce:c1:de:d4:11:30:37:c8:45:8d:02:1a:
31:d5:ca:3a:5d:3a:44:2b:33:07:71:3d:7c:67:ea:
13:9d:7b:1c:b0:77:0e:8c:0f:cb:9a:e4:39:c5:9c:
40:c1:00:c3:27:49:de:95:f6:2e:ae:ad:e0:35:e9:
7c:14:c4:b5:fe:48:d1:97:fd:20:ad:8a:46:31:ea:
23:ec:d3:99:fb:52:38:61:07:0c:ee:d9:c9:70:ce:
89:70:5d:ae:3d:2a:a2:ee:84:37:7e:5f:a0:60:82:
0d:20:bf:69:eb:e7:e3:db:38:a2:16:50:31:07:7e:
46:be:cb:1f:59:b2:8f:7e:9f:f9:48:80:a0:01:5f:
47:c3:ee:39:37:a5:5e:c5:93:a5:b9:30:8f:9a:3a:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:E4:F3:55:36:BD:2B:86:F5:B2:08:99:5A:22:BA:40:D4:56:60
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:58:ff:71:8e:8a:02:81:0c:0b:97:6a:7b:b6:cd:91:e3:69:
5d:55:e0:71:63:d2:28:89:f3:ed:52:e0:a1:00:45:4a:f3:77:
cc:e8:9b:f5:f2:b3:c7:d0:4f:04:ec:8c:47:f0:b9:a4:5f:5f:
2a:da:9d:5d:63:5e:7e:60:61:b1:2f:6d:22:62:5b:6e:33:cf:
bb:0b:56:c4:4e:4d:7e:fd:02:40:a8:4c:36:75:2b:65:e5:a3:
c1:d9:1d:f3:ac:a8:90:c6:25:6e:36:2d:a5:a8:39:ad:a7:b3:
80:d1:9c:8b:1b:f5:67:40:3b:0e:1a:f6:7c:f6:23:9d:70:f8:
38:13:9f:61:0b:56:26:b2:d8:7e:11:bb:02:e9:d5:ee:9a:69:
bb:e4:6e:d6:48:cd:df:35:69:d2:7d:0e:b3:f6:8c:09:85:97:
f6:5a:2c:bf:1a:9e:d0:ff:1d:5a:f4:51:6e:20:64:d8:10:c8:
39:17:8e:eb:90:00:3e:01:e5:84:da:8d:d1:95:77:e9:47:9a:
0f:fe:48:86:5f:2d:3f:11:17:0b:ac:5a:63:d1:b7:b2:96:ce:
da:f0:8f:78:ae:0f:45:8a:88:1f:1b:0a:07:2c:44:61:01:82:
a4:8b:68:71:b7:bc:c1:f2:9a:ed:2c:b4:6a:f0:75:c0:b8:d5:
46:ee:4d:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:38 2026 by rpki-client