
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: K2AKtBtoucfes95KywE9+NyjFY0nUVin6NWH6AE2xUM=
Subject key identifier: 30:45:B3:0C:2F:F1:7B:16:40:17:AF:87:00:0C:95:83:C5:CF:61:E8
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 1574AC2962942C8A8F548F9EF0F218C604716769
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:11:14 +0000
ROA not before: Wed 13 May 2026 10:06:14 +0000
ROA not after: Wed 12 May 2027 10:11:14 +0000
asID: 4811
IP address blocks: 103.202.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:74:ac:29:62:94:2c:8a:8f:54:8f:9e:f0:f2:18:c6:04:71:67:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:14 2026 GMT
Not After : May 12 10:11:14 2027 GMT
Subject: CN=3045B30C2FF17B164017AF87000C9583C5CF61E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:f6:72:b8:60:ff:57:54:bd:63:55:5c:79:
50:af:9b:5b:7c:4a:fa:af:86:82:df:4c:47:de:7d:
12:bf:fb:f5:c3:0c:46:57:11:c9:be:1c:03:3f:23:
6f:a9:84:16:58:6d:f5:1b:2a:ca:20:20:aa:eb:b8:
1b:fa:61:e0:e8:a2:d3:b8:95:c9:56:6e:c8:7a:db:
fd:31:67:41:03:14:06:c5:1d:d0:04:fb:db:9d:bf:
43:09:42:16:19:68:4d:f3:56:45:75:c8:dd:f6:dd:
b1:04:ae:6c:06:4c:cd:ad:c4:29:24:c6:1b:4c:74:
fa:a1:21:f4:2b:cf:99:0d:6b:0b:d5:e8:a0:f0:46:
7a:b8:91:13:d0:d8:1d:90:d7:09:a5:1c:f8:10:61:
4c:e2:69:aa:3a:fe:5f:b3:0c:b3:c0:e9:74:47:70:
3c:aa:72:9d:29:24:e6:4e:ec:0a:2e:51:47:4f:4b:
cf:79:0a:1f:ff:0a:c9:72:b0:26:25:8a:3a:14:3f:
26:ed:ca:64:41:b4:d9:e3:69:df:d5:3d:6a:a2:c3:
ae:1c:c9:c3:13:ef:2f:df:d1:fd:69:1c:07:d4:f2:
11:88:24:55:ec:7c:ac:7b:9a:84:6b:fe:ef:1f:24:
29:a3:de:e9:23:85:94:8f:88:52:59:2c:a4:67:b6:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:B3:0C:2F:F1:7B:16:40:17:AF:87:00:0C:95:83:C5:CF:61:E8
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.128.0/22
Signature Algorithm: sha256WithRSAEncryption
28:f0:7c:2d:5d:bd:d7:6d:69:0c:d9:cb:f2:b8:66:2b:11:2b:
9e:14:eb:4a:4b:8f:0a:cf:22:86:d3:6c:95:1d:8d:e5:51:73:
e3:87:33:d1:2b:10:4c:12:98:40:6f:0f:22:4a:b9:26:f6:04:
07:1e:09:42:d8:3c:2e:3b:11:01:76:d3:de:a9:8b:47:5a:0a:
ce:5c:cd:39:b1:32:fa:26:d0:43:44:5f:a7:6f:e7:66:eb:95:
1f:3b:26:4c:e6:4f:da:91:e7:ae:92:45:ef:8a:7b:48:85:c1:
4e:9a:1a:fc:df:db:cf:f3:05:42:27:0e:32:77:08:8a:76:a1:
f7:04:fe:24:49:e4:55:92:2b:6a:fc:b7:91:c3:fa:fc:fd:cc:
b1:1d:d7:56:15:42:14:89:23:c1:65:fe:22:eb:31:0c:46:95:
76:15:36:f0:67:bd:ee:c3:9d:c0:c4:7b:0b:d9:e4:21:58:20:
97:44:e7:30:04:31:d2:ec:91:6a:0e:60:b0:86:a9:4f:89:d4:
1c:f7:f0:28:80:3b:29:b8:75:2d:ba:20:e8:3d:de:f0:ef:df:
cd:1f:c9:6a:64:43:09:28:d7:29:42:35:8f:15:f2:95:ae:5f:
38:79:44:b9:8c:14:39:d5:98:31:e4:ad:43:7f:5d:4c:28:61:
e6:6a:9b:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:34 2026 by rpki-client