
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: H0xqUU6Dc6AAakFUhgacPyG26V4rt4RBfiXZXGHcLvE=
Subject key identifier: 52:E7:ED:A3:08:97:A5:BF:CA:10:0E:9A:68:87:CA:DE:37:76:EA:83
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 088E3389B5350E35FFAE7EF6B81C5F4C9C0EFE82
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:11:14 +0000
ROA not before: Wed 13 May 2026 10:06:14 +0000
ROA not after: Wed 12 May 2027 10:11:14 +0000
asID: 4811
IP address blocks: 103.202.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8e:33:89:b5:35:0e:35:ff:ae:7e:f6:b8:1c:5f:4c:9c:0e:fe:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:14 2026 GMT
Not After : May 12 10:11:14 2027 GMT
Subject: CN=52E7EDA30897A5BFCA100E9A6887CADE3776EA83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:58:ff:a1:bf:7a:dc:58:10:63:14:aa:6e:
e1:e8:47:c1:35:03:91:2c:14:f1:ca:c6:e6:e9:04:
e0:3a:36:1c:f3:05:a5:61:26:78:b0:8d:24:2a:52:
de:02:45:75:ba:3e:e8:26:d3:05:a1:8c:53:4e:db:
2e:9f:e1:80:53:9d:86:d4:c3:e3:d8:33:45:54:77:
f1:b5:4e:af:09:a5:17:71:07:df:0e:71:58:e3:64:
13:c5:8d:5b:0d:68:e4:bf:85:47:27:dd:e8:4c:51:
f1:bf:cc:8d:dd:92:74:83:8a:42:ba:4d:4e:99:92:
60:9c:3e:03:ef:57:f4:4c:6b:a6:1f:a3:8b:76:5c:
b3:3a:f9:f2:93:c4:7b:9d:36:50:be:ad:4f:c4:13:
3d:6d:07:e9:15:0c:3f:c2:d7:75:74:e5:91:0c:a3:
23:e7:7f:e2:33:4f:d7:17:bb:f9:d8:e2:df:bc:8a:
08:81:fb:22:56:a7:2b:51:4d:f3:70:38:76:65:69:
b3:b3:bb:e6:64:17:e9:c1:7b:4d:9c:95:fb:b2:c7:
88:c7:e4:c1:9c:75:56:e7:56:7d:60:49:36:4e:99:
6b:b8:3f:b1:16:62:6e:64:cc:5f:78:51:20:e2:6a:
3e:3b:e1:40:0a:b7:f0:fe:d7:c8:e5:93:b1:38:82:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:ED:A3:08:97:A5:BF:CA:10:0E:9A:68:87:CA:DE:37:76:EA:83
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.144.0/22
Signature Algorithm: sha256WithRSAEncryption
59:44:b8:cc:41:e1:f7:5b:e1:1d:8b:f5:e6:9f:1f:ad:e5:de:
aa:dc:84:ef:c7:da:db:98:b8:65:42:c2:cd:5a:4d:61:ec:b7:
7c:50:ca:20:94:b2:6a:76:61:66:72:c6:4b:9c:11:05:20:68:
d4:92:40:fe:33:19:2d:ce:65:6d:6f:3c:4d:f2:a6:f0:ee:2f:
70:3d:e9:a7:aa:87:01:93:0d:da:5b:ea:c9:4f:54:2f:58:4b:
54:a7:a3:21:d7:cf:b3:ba:6f:94:ba:ec:cf:b6:85:a2:86:22:
e0:3a:0a:3b:ab:2a:43:53:8e:89:6a:ab:7a:c2:2f:39:14:0a:
58:4b:8e:d0:7d:5c:69:92:89:3e:7a:a6:ca:93:3b:2f:e4:1e:
cf:87:1f:9b:60:96:31:a6:cd:6d:d7:39:c4:ca:91:cf:43:95:
71:bd:a1:d4:c4:bb:36:2d:f1:69:96:a5:df:a5:21:6e:8f:62:
71:18:69:65:cf:c5:a5:51:2a:e3:34:0e:e7:6f:99:d4:5f:ca:
2e:84:f1:87:9b:90:82:be:e5:14:1e:52:60:56:2f:08:97:8f:
42:db:2b:dc:53:98:47:2a:ba:75:ae:53:78:4c:7d:0b:83:e6:
7d:8e:b3:4a:08:fd:8d:7c:dd:25:f1:53:71:a9:91:e3:ba:16:
80:4a:45:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:32 2026 by rpki-client