
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e32382e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e32382e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: +lMSDGDMfRIjBIYPN67K1P4owZcKyLM0emj6giSnMb4=
Subject key identifier: B0:DC:5F:C5:62:5C:14:5D:E8:69:6F:58:18:14:CA:83:38:8A:5E:CE
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 52CB4B880DA7F45259D9F8D76F277DA4E4EF3744
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e32382e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:11:13 +0000
ROA not before: Wed 13 May 2026 10:06:13 +0000
ROA not after: Wed 12 May 2027 10:11:13 +0000
asID: 4811
IP address blocks: 103.202.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cb:4b:88:0d:a7:f4:52:59:d9:f8:d7:6f:27:7d:a4:e4:ef:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:13 2026 GMT
Not After : May 12 10:11:13 2027 GMT
Subject: CN=B0DC5FC5625C145DE8696F581814CA83388A5ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:3f:65:4b:e6:f3:56:62:23:1c:35:26:91:
5f:0e:fc:d6:98:f6:a7:dd:ca:5a:5c:98:c9:17:f4:
86:88:79:59:0e:a2:67:4b:ec:98:18:b5:9c:e0:b1:
fe:78:a0:51:3a:b6:30:c1:76:75:37:a3:de:e3:06:
77:f8:b6:a0:14:36:e8:59:b2:c4:86:6b:da:43:f5:
b9:ed:7c:ae:7f:39:a7:7a:c2:ef:e7:41:28:a7:a2:
72:59:a8:f7:d7:91:5d:09:6f:1d:6c:47:00:9f:03:
8e:bc:bd:60:2f:55:f4:f9:66:71:35:38:f8:36:f0:
55:cb:7c:13:e3:a6:a3:5b:70:05:2f:1d:ea:f7:0c:
92:57:e9:90:d5:64:94:63:98:27:ed:91:c7:5e:a5:
e4:f4:24:22:d8:2e:91:55:f6:50:c0:56:d0:65:4b:
79:db:eb:e2:64:09:d3:47:71:32:a4:28:ff:30:27:
04:c6:91:5d:26:c5:40:dd:bc:94:16:f4:bd:38:a3:
bf:04:23:0b:53:9c:9d:14:9d:20:78:aa:b9:a4:13:
92:de:7a:82:c0:77:e0:26:c4:b9:ee:83:87:96:30:
af:69:0a:56:1a:46:de:58:46:ba:da:23:b9:f8:a9:
c0:50:92:cb:2a:d7:b2:ca:31:fd:a2:2a:e1:e8:8e:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:5F:C5:62:5C:14:5D:E8:69:6F:58:18:14:CA:83:38:8A:5E:CE
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e32382e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.28.0/22
Signature Algorithm: sha256WithRSAEncryption
75:11:76:9e:cc:1a:2c:d4:a6:43:c9:3f:6f:14:f3:8b:b3:c4:
27:51:bb:46:33:bc:72:81:c2:36:23:44:50:f3:82:4c:6e:d7:
51:db:20:9a:e4:4e:64:58:02:fe:95:cd:fe:f4:16:46:92:36:
be:5f:f5:94:72:35:ab:4c:d5:48:22:ac:53:09:e6:18:52:3f:
5b:ae:c3:f8:75:0d:05:86:71:f1:39:56:5e:a2:77:a8:88:00:
ef:3d:48:94:3b:66:2e:66:98:44:3c:72:73:c2:a9:1f:eb:fa:
eb:81:a4:90:c3:80:c0:b5:cc:00:b0:40:69:89:44:96:a5:d0:
d7:ad:0a:c7:55:db:ca:cb:08:86:d6:47:32:9e:89:3c:53:e9:
c9:02:c7:c1:ad:7a:b2:5f:53:b4:00:61:d0:22:54:3f:bc:9f:
2b:5e:98:03:f9:c4:b1:3c:54:a1:fb:6a:40:26:4e:e6:4b:38:
5e:a8:e8:c7:f6:5f:13:86:62:c1:cb:a7:13:63:f4:b1:9c:31:
22:ec:33:9d:24:7f:28:fd:e0:38:4c:ab:cf:e5:9d:a4:fd:a9:
80:39:20:07:c8:23:f1:bf:23:d2:85:82:fa:99:a9:73:b5:fb:
db:9c:b0:06:a0:54:e1:39:c0:e5:44:6c:55:bb:94:e8:85:79:
34:ae:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client