
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e342e302f32322d3232203d3e2034383131.roa
File: 3130332e3230322e342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: kdFCVS6BehAtO9+QwAS9iGM9RMenAh658ShM/MLfRFI=
Subject key identifier: 22:5E:93:82:68:97:02:B0:74:E0:97:C3:2D:8E:57:C6:5C:18:2A:1F
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 42231987F4F2C803F7EBF8088937291F2DF1455C
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e342e302f32322d3232203d3e2034383131.roa
Signing time: Wed 13 May 2026 10:11:14 +0000
ROA not before: Wed 13 May 2026 10:06:14 +0000
ROA not after: Wed 12 May 2027 10:11:14 +0000
asID: 4811
IP address blocks: 103.202.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:23:19:87:f4:f2:c8:03:f7:eb:f8:08:89:37:29:1f:2d:f1:45:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:06:14 2026 GMT
Not After : May 12 10:11:14 2027 GMT
Subject: CN=225E9382689702B074E097C32D8E57C65C182A1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:58:57:01:3c:a6:89:8a:ae:27:c7:5b:16:
98:44:50:35:1c:c0:66:25:0e:58:18:30:db:a6:d5:
72:0b:d8:29:f2:2c:51:d8:f3:4a:2b:c8:32:12:04:
9b:8e:fc:f5:dc:14:65:26:64:5a:fb:aa:a2:9b:c1:
15:f0:f8:a8:e6:01:a8:44:5a:21:66:9d:a9:95:b1:
1d:67:1e:6a:95:5c:c5:af:49:72:29:76:5c:55:0c:
32:46:ad:65:04:71:bc:3a:92:53:02:3c:13:5d:87:
fb:5f:4b:5e:54:e3:1c:b0:af:0e:81:30:db:46:46:
fb:62:54:45:a7:83:17:c7:0d:6d:cf:3a:d2:f6:94:
a1:d8:67:b3:94:a0:d5:9d:25:36:f5:b6:42:c4:cc:
33:ad:1d:cd:67:c5:fa:10:c1:d6:e3:1f:7f:91:ea:
69:34:42:15:4d:69:1d:ab:79:3f:59:d9:59:3a:98:
03:82:9f:ce:17:09:39:cd:44:f3:1c:f0:4b:78:8e:
0f:02:b9:07:75:59:ff:27:43:4c:68:8f:84:4f:6e:
d2:a6:51:bf:a8:e0:17:e6:a7:6c:cb:66:59:00:99:
e8:15:ef:c4:14:28:b4:3e:6c:eb:58:e5:ca:2e:1a:
5c:9f:8e:ee:4c:e9:fc:e9:3b:97:76:74:f2:07:28:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5E:93:82:68:97:02:B0:74:E0:97:C3:2D:8E:57:C6:5C:18:2A:1F
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e342e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.4.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d3:e2:d2:55:b5:0f:0c:af:50:52:10:49:73:4c:86:3e:46:
83:74:1a:e4:ae:22:33:be:52:64:64:30:2c:0b:23:a5:e1:d5:
c6:28:32:17:7f:2d:a1:61:fb:30:90:18:2d:86:dc:6d:dd:48:
5a:c7:29:01:30:99:e7:6c:36:64:ea:f3:21:40:02:0c:d1:c9:
d6:e8:3b:d0:e9:06:aa:75:b9:30:6b:79:34:98:dd:81:54:27:
3e:c4:67:46:f3:0c:4d:6d:b2:18:19:f2:65:fa:91:06:9e:2b:
53:cb:9f:42:61:ea:01:4e:8c:e5:2f:39:19:75:6b:59:1b:98:
3c:a5:6d:77:67:46:35:c7:05:98:29:75:9d:e1:79:6c:cb:3a:
17:59:c4:e3:2a:fe:9d:96:d5:1c:27:9b:6c:44:0b:df:c1:90:
45:c6:a7:f7:69:c4:9e:96:19:85:fd:a7:5f:fe:04:51:b8:f0:
2b:68:47:04:3b:ca:4a:07:2d:91:3e:8d:b3:f4:45:85:e9:bb:
af:5d:d7:2a:be:32:ef:3b:14:3f:be:ca:25:7e:df:d0:01:bc:
96:b0:d9:90:d5:1d:29:58:b8:56:9b:bf:52:7b:e6:ca:4f:29:
5c:ba:11:c0:3c:dc:2d:17:8f:00:1a:47:92:24:62:3b:cc:49:
6e:86:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:37 2026 by rpki-client