
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3133322e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: i2GQTzD/r37Pkjh8eYhP7LZufWS37iUfbhHS5vxj66U=
Subject key identifier: 61:CE:02:61:FD:6F:AD:EF:22:B7:C0:B0:09:42:DD:6C:70:90:6F:7E
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 41C6D30645094C44E8F44F1B19B7F7AEAFA1F5FB
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:11:15 +0000
ROA not before: Wed 13 May 2026 10:06:15 +0000
ROA not after: Wed 12 May 2027 10:11:15 +0000
asID: 4811
IP address blocks: 103.202.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c6:d3:06:45:09:4c:44:e8:f4:4f:1b:19:b7:f7:ae:af:a1:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:15 2026 GMT
Not After : May 12 10:11:15 2027 GMT
Subject: CN=61CE0261FD6FADEF22B7C0B00942DD6C70906F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:8c:b8:6d:6f:e3:b5:a1:a7:8f:e6:07:0e:
26:09:fa:dd:34:03:b0:b4:13:4c:55:51:a6:ad:f5:
78:9c:7d:9a:46:27:a8:42:4e:e7:41:17:b0:c4:a4:
ef:c8:1a:a1:56:16:88:3d:8c:c4:e2:73:a2:39:a7:
0a:3a:e2:84:c8:2a:26:81:10:ed:9b:73:e3:7b:fd:
95:f0:d2:99:7e:a9:ca:b5:05:2c:b4:3b:b3:58:5f:
88:27:c2:41:9b:53:8c:86:a8:cf:b6:09:ae:f7:1f:
c2:fd:d2:4c:07:f1:43:39:69:6e:c3:0a:a2:f5:8e:
ae:9e:b3:99:30:4c:13:38:4b:41:5b:ae:04:61:d9:
d0:78:d2:5d:99:de:fa:86:36:3a:c4:b2:2b:ef:45:
8b:10:9b:7f:e0:15:b5:c0:6f:7c:de:09:29:27:7c:
77:d2:6f:78:32:ae:bc:bf:4b:82:81:56:36:d1:4c:
61:7f:51:ff:50:61:7f:a5:a5:2f:cb:23:26:3f:ff:
f6:84:df:00:f8:3c:f3:cc:44:d8:61:97:ff:07:86:
94:12:12:00:d8:5a:f0:d0:6a:b6:4d:b3:88:4c:a2:
c0:a3:99:6d:bd:a9:61:17:04:4c:42:50:c5:38:ef:
94:85:74:39:3e:10:57:7e:ba:86:26:f4:d9:62:b9:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:02:61:FD:6F:AD:EF:22:B7:C0:B0:09:42:DD:6C:70:90:6F:7E
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.132.0/22
Signature Algorithm: sha256WithRSAEncryption
62:8d:c5:a5:0c:08:96:a9:4a:72:6a:86:cc:f2:93:49:c9:62:
5f:16:80:2d:d5:23:85:6b:f6:99:87:c8:99:49:d5:8b:25:ea:
2d:17:1f:73:93:45:5b:0f:ca:5f:e5:1b:70:3a:c8:a3:ec:a4:
9e:ef:df:43:a1:09:3d:98:60:1a:c6:7a:41:fd:f3:ee:73:10:
e9:2e:b3:15:db:65:04:ca:a1:d1:af:79:de:55:e7:be:07:8c:
1d:45:a6:8c:f9:cd:bd:76:9c:1e:ef:46:77:fe:35:a9:ce:74:
34:29:4a:e6:25:9b:f5:34:81:84:c9:0c:f5:84:37:6d:a5:5c:
57:d6:f8:27:6a:5a:2d:70:a2:77:80:63:37:5a:cf:78:8b:4c:
27:b8:c7:64:d4:7d:05:6b:69:fe:12:8e:e8:0e:32:fc:98:2a:
25:f8:29:df:2b:8c:53:cb:be:35:50:ca:03:b9:5e:b7:26:31:
a1:f6:13:d0:03:3b:99:23:bd:5a:82:05:98:28:10:a5:75:be:
f7:3a:3e:16:98:87:20:58:e3:28:35:6c:4f:02:a5:ed:a2:e8:
dd:1b:60:55:a0:ac:51:59:13:12:e7:c4:30:c3:7d:bd:7e:45:
74:d5:47:23:96:7c:4e:07:18:82:c2:44:c7:8a:c9:08:e6:57:
ea:6e:8d:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:33 2026 by rpki-client