
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e203137363231.roa
File: 3130332e3230322e3134342e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier: xQ0ZcOpvNZCwLxa+Y3tYk1KLjpbyNFIC1PH7fl9f3j8=
Subject key identifier: 6A:3F:2F:F3:96:32:53:50:9E:22:2C:A5:D7:04:4A:BC:F8:3E:BF:08
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 50B309DF741631A58E708766E1022655493ED116
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e203137363231.roa
Signing time: Wed 13 May 2026 10:11:14 +0000
ROA not before: Wed 13 May 2026 10:06:14 +0000
ROA not after: Wed 12 May 2027 10:11:14 +0000
asID: 17621
IP address blocks: 103.202.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b3:09:df:74:16:31:a5:8e:70:87:66:e1:02:26:55:49:3e:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:14 2026 GMT
Not After : May 12 10:11:14 2027 GMT
Subject: CN=6A3F2FF3963253509E222CA5D7044ABCF83EBF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:28:1e:06:83:c6:36:fc:c6:27:3f:71:80:
38:ed:70:63:45:16:cc:c2:ad:bf:cf:de:dc:dc:ca:
51:46:4e:36:4b:98:72:77:c0:23:92:ef:41:f0:a8:
bb:f9:9d:47:84:2c:c1:dd:b7:7d:b0:f8:74:0b:20:
c8:1e:ed:dd:51:2d:95:c0:6c:10:f7:68:a3:ff:c5:
17:9a:dd:6c:e8:41:47:28:79:72:ec:43:2d:52:b6:
62:18:ac:61:77:40:4b:bf:21:93:55:9a:cc:95:ba:
4f:2f:46:08:48:52:00:20:bc:de:61:65:fb:46:f9:
15:bd:1f:f8:3b:e0:8a:f1:d8:c6:d3:ad:7b:16:b7:
b1:76:a1:bf:ac:13:c3:7d:59:ff:b0:3d:15:5f:fb:
a0:f4:5d:8e:b9:47:ef:e5:26:4a:4b:7d:bc:d2:14:
31:55:59:0c:07:43:d3:fd:be:d9:22:23:f9:90:c5:
15:39:cc:33:ad:2c:42:5e:ee:ac:fb:1b:52:0e:5f:
c0:33:3e:27:71:a4:33:00:c0:33:dc:c1:bb:16:ea:
6d:53:04:10:c8:fe:d9:a7:9c:46:f2:06:38:0c:5a:
83:4a:4a:83:64:9e:62:fa:78:10:ce:ab:63:85:a8:
fc:6b:6b:16:56:59:5a:a5:aa:cc:7b:74:93:b7:fe:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:2F:F3:96:32:53:50:9E:22:2C:A5:D7:04:4A:BC:F8:3E:BF:08
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.144.0/22
Signature Algorithm: sha256WithRSAEncryption
92:5a:54:34:d3:53:91:8d:33:6a:fb:88:c4:fa:a6:a0:ad:d6:
10:49:da:13:15:8b:13:4c:9e:e9:96:bd:ca:10:68:3e:64:ec:
8f:dd:99:d5:dd:22:bf:94:8a:13:cf:2f:c1:6c:80:f0:01:2c:
e4:59:e5:ab:a2:24:ad:45:d3:73:dd:1d:a3:38:12:d8:bf:42:
23:7a:f8:ae:1d:da:f1:bb:30:5d:0c:d4:d4:12:a8:ef:43:ea:
c5:7a:47:12:0c:be:ab:2b:b8:2d:5e:cd:42:76:e3:ce:8f:78:
2b:fe:53:2c:37:f2:d5:c7:9e:6f:57:1f:11:46:fb:7d:5b:f6:
64:ac:01:85:9a:ec:1c:26:5f:13:cc:bb:e3:67:8d:ec:29:2d:
eb:30:e5:2f:5c:17:f4:c6:dc:e3:bd:71:ac:de:59:2e:0d:72:
da:d6:13:4b:0b:54:0f:0d:38:28:11:c9:ab:9b:ba:77:8c:f4:
6a:71:17:66:08:aa:68:18:ff:49:0a:8d:65:83:6d:5a:cd:14:
0d:f6:08:70:42:5c:26:d8:44:ac:d5:c1:36:42:8c:bb:2b:d2:
f5:32:83:29:a1:38:03:d1:1c:53:ee:51:39:17:fb:3e:15:a3:
0a:86:45:d9:56:8f:1f:6c:dc:77:34:1d:42:1a:c1:cd:ff:aa:
cb:ea:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:32 2026 by rpki-client