
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e2039383038.roa
File: 3130332e3232302e36302e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier: ig0VbLcqHiuOvyohwmjWpHEUrnPZeizj9UxnCfpup+M=
Subject key identifier: A5:44:10:1C:F9:0E:13:B1:46:A0:C7:B7:1D:78:10:0A:85:27:5A:17
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 40723883AB3A9073CE0CD09C4841CCD40B7314CF
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e2039383038.roa
Signing time: Thu 16 Jul 2026 01:50:01 +0000
ROA not before: Thu 16 Jul 2026 01:45:01 +0000
ROA not after: Thu 15 Jul 2027 01:50:01 +0000
asID: 9808
IP address blocks: 103.220.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:72:38:83:ab:3a:90:73:ce:0c:d0:9c:48:41:cc:d4:0b:73:14:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jul 16 01:45:01 2026 GMT
Not After : Jul 15 01:50:01 2027 GMT
Subject: CN=A544101CF90E13B146A0C7B71D78100A85275A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:4f:b2:eb:15:1c:5f:4c:a6:ab:af:96:35:
1a:cd:53:67:07:91:a8:92:be:3b:3a:91:d1:52:19:
0b:77:e8:2a:3e:c0:d5:48:72:b5:b6:c0:59:b4:f0:
9d:d0:92:7a:b9:03:aa:a2:f6:12:52:23:32:0d:b1:
3c:42:31:6a:30:dd:67:95:7b:bc:d5:1b:a0:bc:93:
4c:86:e1:24:fc:4c:9d:0a:42:2a:f8:e8:9e:ae:c3:
df:05:1f:bf:79:bb:b5:cc:90:8c:9d:80:18:8f:31:
60:0f:42:b4:e8:f6:ca:e5:7f:17:67:f0:66:ea:4b:
c0:8c:42:e9:02:88:12:76:5f:75:77:a4:1d:39:8c:
52:cf:d5:50:83:3a:aa:33:64:d0:77:0c:86:82:0b:
fa:2e:9c:51:1b:2b:33:00:45:04:d2:b5:53:f3:a4:
d6:59:ca:e9:bd:26:fc:5e:c3:50:45:84:e9:b3:e1:
e2:27:89:94:c9:7f:67:92:07:d6:71:87:02:74:63:
30:fc:d2:85:de:dd:99:46:4d:66:26:d7:52:62:14:
5a:d5:3b:61:3d:a0:6a:70:14:95:c6:0c:e4:8d:55:
6b:02:49:33:10:4a:b3:2d:ce:1e:b6:e6:9c:f5:67:
50:34:2c:46:83:5f:9f:57:f4:fb:8f:69:cc:cc:c9:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:44:10:1C:F9:0E:13:B1:46:A0:C7:B7:1D:78:10:0A:85:27:5A:17
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.60.0/22
Signature Algorithm: sha256WithRSAEncryption
06:a6:40:b6:50:72:ca:ee:8f:26:35:e2:c9:19:2b:3d:42:11:
c4:7e:8b:15:0d:77:53:17:7f:9a:3f:d5:76:4b:59:b0:ac:8e:
6f:15:65:78:ac:3c:a4:88:92:55:9f:c5:81:55:cd:7d:76:7e:
68:be:86:95:02:bd:94:a9:45:07:8d:0d:5d:25:75:b3:b9:de:
79:9c:e2:52:e1:0f:26:45:2b:49:ab:95:f2:ea:5e:1e:b9:8c:
d8:f2:ee:08:52:ea:03:95:8b:80:8f:0b:9f:55:f7:c9:99:0b:
38:7a:7d:a3:ab:67:3a:24:ab:94:cd:90:f7:ae:1c:cd:d8:62:
df:ad:5f:41:ad:d4:4b:f6:46:97:9d:97:ed:07:d5:18:1a:99:
e4:b8:55:83:15:60:59:fa:a2:79:41:61:eb:2f:50:31:23:7f:
e8:04:32:b1:37:50:6a:84:4f:a8:0c:a6:34:96:bf:c5:af:36:
a2:c3:c5:0b:22:cb:f9:68:f8:99:a4:b4:e7:7f:74:fa:40:71:
7b:2b:c6:90:30:e6:3e:51:eb:be:38:e1:f8:a9:af:0c:50:99:
86:c6:fb:40:33:6c:14:f7:99:24:9f:b7:4f:18:39:b1:8b:76:
9b:84:c9:0a:93:73:04:1b:a1:a9:c7:29:fe:71:4f:ad:f4:86:
56:e2:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:37 2026 by rpki-client