
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e203338303139.roa
File: 3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (raw, json)
Hash identifier: iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=
Subject key identifier: FC:2D:9D:97:53:6C:DD:56:67:62:07:2D:D1:DF:B5:BC:7A:D9:BF:CA
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 13874ABD72F2AE35D36CA1D686DCCC49A57760E1
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e203338303139.roa
Signing time: Thu 16 Jul 2026 01:50:01 +0000
ROA not before: Thu 16 Jul 2026 01:45:01 +0000
ROA not after: Thu 15 Jul 2027 01:50:01 +0000
asID: 38019
IP address blocks: 103.220.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:87:4a:bd:72:f2:ae:35:d3:6c:a1:d6:86:dc:cc:49:a5:77:60:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jul 16 01:45:01 2026 GMT
Not After : Jul 15 01:50:01 2027 GMT
Subject: CN=FC2D9D97536CDD566762072DD1DFB5BC7AD9BFCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:b2:14:42:b2:f6:08:55:7a:2c:2b:a0:b4:
1a:ec:a5:31:b5:f5:e7:6a:50:61:23:f4:a1:03:3e:
fa:73:17:28:7f:26:48:57:53:9f:97:21:e2:72:98:
3d:fc:5e:08:66:68:08:52:05:2b:de:4b:90:1a:00:
bd:51:8b:39:90:df:7a:30:14:32:4f:5c:4a:74:af:
a0:3d:ed:77:4d:7c:52:44:48:0a:70:21:f3:9a:fa:
74:69:bd:90:b3:71:e3:17:b9:34:e4:8a:c5:ec:88:
3a:2b:77:25:37:76:d7:04:4a:83:c4:f9:7b:f2:a6:
51:49:0e:d5:ca:f2:f5:84:28:ec:12:87:cb:d0:d8:
91:7d:74:51:78:61:3a:21:25:7c:a7:92:6c:9b:f6:
5f:e5:01:d3:d2:cb:04:67:b7:83:57:20:17:23:41:
f1:33:9c:65:0a:17:9c:0a:56:19:c0:a8:d7:fb:d0:
66:64:8b:ab:ef:d7:9b:51:81:d5:14:10:47:e9:68:
a4:ef:92:46:36:80:3b:08:58:c4:a0:13:79:83:4c:
1c:75:3b:fb:e2:59:43:a3:9a:bf:13:64:2b:1b:2a:
06:49:98:d0:46:f7:39:f8:a2:f8:a1:c2:ef:23:4b:
4e:81:2c:d8:61:da:e0:94:90:82:8f:b2:28:7f:85:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:9D:97:53:6C:DD:56:67:62:07:2D:D1:DF:B5:BC:7A:D9:BF:CA
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.60.0/22
Signature Algorithm: sha256WithRSAEncryption
76:17:33:69:cb:36:c3:da:9b:b9:c9:c9:dc:58:b5:63:96:de:
d1:99:1d:44:2a:2a:c8:24:23:e4:2e:31:bb:71:48:1a:da:3e:
eb:c9:c1:99:eb:e7:bd:11:9b:7d:c3:79:31:87:d0:a9:87:6a:
fa:85:bf:a5:b6:95:95:d0:d1:87:10:8f:e2:0f:ce:5e:3c:1c:
83:6c:0c:ae:f7:09:72:5e:37:55:14:be:f9:50:b1:87:19:6b:
f8:de:14:b1:2f:8c:a2:3d:73:63:12:e7:99:8f:71:dc:a9:01:
26:2e:f0:da:be:3b:e9:74:ab:d0:e9:3a:96:91:34:80:53:b4:
0e:eb:c7:a4:0b:20:0e:e2:64:05:75:30:73:6b:e9:d2:82:4c:
9f:c9:20:21:31:86:57:ef:7b:5f:bb:28:e8:69:55:9b:09:ab:
24:c7:08:01:f5:46:e5:5b:94:d0:da:52:cf:e7:94:cb:9c:61:
c1:4c:9e:53:a7:e5:be:3f:d2:fe:36:81:b9:02:dc:e2:c5:38:
2b:02:0c:d1:91:50:99:6d:5e:c7:f5:b2:99:ea:46:98:33:2c:
50:12:fb:df:7a:77:42:aa:45:d8:f5:a4:15:68:4c:4b:72:4c:
c4:4b:2a:86:26:2d:01:30:8d:8f:96:da:ab:7b:1f:b1:36:cf:
a8:8e:e4:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:36 2026 by rpki-client