
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa
File: 3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa (raw, json)
Hash identifier: LTiQbomNmW6b37oCfw3+PJVmc2lEYw3UBItNF+DyFww=
Subject key identifier: A4:4B:D6:EA:BF:C1:3E:72:3C:D7:EF:86:85:61:D8:56:5A:B2:15:4B
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 5D0FDBC04A78907FAB8B335CABCD3C839993CE40
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa
Signing time: Wed 13 May 2026 10:27:49 +0000
ROA not before: Wed 13 May 2026 10:22:49 +0000
ROA not after: Wed 12 May 2027 10:27:49 +0000
asID: 153393
IP address blocks: 103.202.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0f:db:c0:4a:78:90:7f:ab:8b:33:5c:ab:cd:3c:83:99:93:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:22:49 2026 GMT
Not After : May 12 10:27:49 2027 GMT
Subject: CN=A44BD6EABFC13E723CD7EF868561D8565AB2154B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:65:f7:45:91:4b:e0:46:e3:8f:a5:4d:67:
69:a6:7d:23:98:8b:12:46:ce:29:73:21:9b:f0:5e:
fa:81:66:cb:cd:05:fb:1e:c0:45:9d:c3:d0:9f:64:
44:22:80:94:76:69:51:76:7e:7b:9a:12:69:d7:ba:
4e:21:f0:89:eb:12:1b:27:17:21:94:ad:cf:bf:7f:
68:30:76:e9:6b:6e:ce:0f:ae:bb:ba:13:5b:51:b0:
d3:cd:5b:ea:99:c5:00:d3:89:a9:3d:24:16:ca:28:
5b:a4:e3:f8:5d:1f:e7:03:79:bf:15:81:25:a3:da:
74:d3:02:4d:1f:54:e5:3e:e9:52:e2:1f:fe:2c:43:
83:40:d4:6a:0d:f5:cd:f9:2e:81:8f:53:ee:0a:2e:
6e:72:f2:47:09:1e:41:90:7d:5e:58:56:cf:ca:b1:
96:92:e3:42:46:ba:71:ec:ec:49:36:f3:54:88:e2:
94:49:36:0b:89:a2:d6:f6:4e:fc:ff:f5:e8:6a:7b:
79:ab:64:33:1b:f3:16:04:c2:18:6c:c7:2a:ac:b1:
5e:f5:99:4e:dd:83:8d:8a:c5:da:3a:a2:90:47:a6:
3a:4e:69:e8:75:f2:d0:cd:9c:6d:b5:86:86:e8:34:
d6:23:44:86:82:29:ad:ac:56:0c:9a:a6:58:ee:33:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4B:D6:EA:BF:C1:3E:72:3C:D7:EF:86:85:61:D8:56:5A:B2:15:4B
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.61.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ec:0c:17:9e:bd:25:0b:f5:42:eb:45:7a:9c:3d:dd:e7:4b:
13:86:56:dd:42:71:ac:b0:af:22:bd:77:79:e8:8d:a8:c9:11:
1e:1c:ba:ed:8f:74:75:40:5c:37:86:0b:9a:f2:76:dd:d0:7b:
e6:6c:ed:51:37:fc:61:3f:7f:b2:36:5b:8b:37:37:0c:5e:ba:
de:85:56:cf:22:b9:bd:6a:b5:62:94:b2:c0:55:d4:0c:d1:b2:
43:c4:b1:ef:0d:a9:e2:6d:22:fc:a2:aa:4f:01:82:ec:3d:92:
c3:41:76:62:b4:f0:dc:b9:c5:10:62:70:63:54:27:d6:70:70:
01:65:d1:36:ea:ca:cb:9c:c8:cc:26:ab:74:16:ff:b7:4b:5d:
60:51:ee:0c:e1:e0:15:81:94:79:a9:1b:ca:95:a0:b8:61:8e:
b2:ce:49:10:2a:c8:56:5d:59:20:51:0b:4b:05:02:ae:1b:a0:
c7:fd:7d:26:0f:3e:7b:5c:72:49:ef:8d:1d:88:04:78:a6:60:
77:1d:3a:ba:d7:85:7f:06:ee:a4:45:d9:07:10:04:b0:a2:f1:
ec:aa:53:dd:bb:e0:37:9d:46:71:4e:b1:ae:17:f1:7a:5d:f5:
23:08:ac:f8:c4:1c:d9:fe:95:d7:a7:fb:79:39:7e:2e:cc:15:
85:2c:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:46 2026 by rpki-client