
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa
File: 3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: CfBgRS04K7VQSDmdLDK1/T0zyTXNs4vFBivuhUcxpf0=
Subject key identifier: 12:A2:7B:D4:EA:48:76:06:E4:50:11:2F:CC:DC:68:B2:36:0D:86:A8
Certificate issuer: /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial: 4BBDE70A7E20F015DC21E68FA0EA952DA4749A63
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa
Signing time: Sun 20 Sep 2026 14:39:16 +0000
ROA not before: Sun 20 Sep 2026 14:34:16 +0000
ROA not after: Sun 19 Sep 2027 14:39:16 +0000
asID: 9304
IP address blocks: 103.181.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 17:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:bd:e7:0a:7e:20:f0:15:dc:21:e6:8f:a0:ea:95:2d:a4:74:9a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Validity
Not Before: Sep 20 14:34:16 2026 GMT
Not After : Sep 19 14:39:16 2027 GMT
Subject: CN=12A27BD4EA487606E450112FCCDC68B2360D86A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:ee:7f:89:0c:64:30:c7:37:1b:6e:74:be:
d1:32:5b:9a:32:ea:da:87:e6:99:0e:d6:88:28:ab:
ec:73:53:59:73:d9:ed:3b:a4:59:1e:49:59:19:29:
d7:b1:55:e4:21:56:43:72:76:4c:3a:8f:38:5e:4d:
b3:64:72:96:12:e9:8c:94:ad:42:f6:3f:43:ff:67:
f1:6f:07:07:8f:99:4b:8c:dd:7a:97:a4:0b:2e:43:
10:28:95:19:a4:68:b6:03:aa:a7:63:6b:2f:d9:d9:
f5:3d:a4:16:1a:b4:89:aa:12:ff:93:06:5c:92:a3:
15:81:9a:4b:de:b4:c8:7f:52:96:45:d4:fa:60:d5:
85:fa:1d:86:b1:48:51:09:23:0f:44:f3:9c:fd:61:
a5:04:0e:53:9e:fc:21:1c:c6:cf:3d:fd:8d:a6:0a:
a4:4f:50:6e:1e:db:72:c9:63:50:0e:a7:14:1c:1c:
74:9e:c9:25:6e:1c:58:e8:e3:45:28:89:0d:82:1d:
f7:65:84:d8:47:af:e6:88:f9:7a:17:e7:28:be:e0:
b1:09:d9:8c:74:05:a5:5b:85:a4:13:d4:7d:f7:35:
ad:c6:8f:4e:6e:b9:a1:61:c0:7e:f2:1b:d5:96:8f:
f4:2d:d3:f0:92:95:e5:e4:3b:aa:ec:fb:85:27:b4:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:7B:D4:EA:48:76:06:E4:50:11:2F:CC:DC:68:B2:36:0D:86:A8
X509v3 Authority Key Identifier:
keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.164.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:20:cb:97:dd:69:ba:66:d6:64:33:2f:6f:3d:a5:03:1f:34:
05:3a:3a:f4:55:38:51:12:64:49:95:57:b6:c4:1d:00:4f:39:
35:b5:7f:4b:95:3d:7d:ef:79:c2:9b:18:4a:d8:e5:1c:50:2c:
38:21:16:94:78:4a:39:68:cd:df:93:f4:3f:3e:db:3e:80:17:
09:32:bd:1b:03:9f:a4:59:51:b7:79:83:b7:41:af:a3:18:05:
70:03:1a:d2:ca:ba:a9:d8:64:9f:93:8a:d9:42:df:50:f1:1a:
36:a0:8d:b9:24:f6:98:ee:c5:60:73:6e:13:1f:62:88:a9:f5:
a9:4f:8e:cc:3d:ff:3e:0f:54:ce:68:c8:90:69:77:71:6f:56:
91:cf:2c:29:f1:06:7e:df:b6:a1:66:38:39:93:8b:3c:99:ae:
0d:ee:9b:b6:2e:78:c0:3d:60:fa:45:5a:6b:8d:31:86:27:50:
96:3b:99:07:37:60:53:8a:4c:cf:df:d1:ce:fb:8c:e6:70:7f:
3b:ec:32:97:49:2a:e1:50:47:ee:85:8b:c2:2d:51:9d:d3:21:
b0:76:77:22:27:80:4f:f9:a7:19:68:28:fa:48:f3:e7:ca:6e:
26:67:09:5b:b4:17:48:64:55:b2:e9:b5:0b:5a:ab:25:92:23:
28:45:b5:d2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUS73nCn4g8BXcIeaPoOqVLaR0mmMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEyg3MjFDMzY2NzdG
NTlGRUVBOUI2NzA3QjMyMjUzRjMwNjJGREZDODk5MB4XDTI2MDkyMDE0MzQxNloX
DTI3MDkxOTE0MzkxNlowMzExMC8GA1UEAxMoMTJBMjdCRDRFQTQ4NzYwNkU0NTAx
MTJGQ0NEQzY4QjIzNjBEODZBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANA67n+JDGQwxzcbbnS+0TJbmjLq2ofmmQ7WiCir7HNTWXPZ7TukWR5JWRkp
17FV5CFWQ3J2TDqPOF5Ns2RylhLpjJStQvY/Q/9n8W8HB4+ZS4zdepekCy5DECiV
GaRotgOqp2NrL9nZ9T2kFhq0iaoS/5MGXJKjFYGaS960yH9SlkXU+mDVhfodhrFI
UQkjD0TznP1hpQQOU578IRzGzz39jaYKpE9Qbh7bcsljUA6nFBwcdJ7JJW4cWOjj
RSiJDYId92WE2Eev5oj5ehfnKL7gsQnZjHQFpVuFpBPUffc1rcaPTm65oWHAfvIb
1ZaP9C3T8JKV5eQ7quz7hSe0+ykCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQSonvU
6kh2BuRQES/M3GiyNg2GqDAfBgNVHSMEGDAWgBRyHDZnf1n+6ptnB7MiU/MGL9/I
mTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzAvNzIxQzM2
Njc3RjU5RkVFQTlCNjcwN0IzMjI1M0YzMDYyRkRGQzg5OS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvY2h3MlozOVpf
dXFiWndleklsUHpCaV9meUprLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF
BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEy
MTIxNjU1MzEzLzAvMzEzMDMzMmUzMTM4MzEyZTMxMzYzNDJlMzAyZjMyMzMyZDMy
MzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7WkMA0GCSqGSIb3DQEBCwUA
A4IBAQC2IMuX3Wm6ZtZkMy9vPaUDHzQFOjr0VThREmRJlVe2xB0ATzk1tX9LlT19
73nCmxhK2OUcUCw4IRaUeEo5aM3fk/Q/Pts+gBcJMr0bA5+kWVG3eYO3Qa+jGAVw
AxrSyrqp2GSfk4rZQt9Q8Ro2oI25JPaY7sVgc24TH2KIqfWpT47MPf8+D1TOaMiQ
aXdxb1aRzywp8QZ+37ahZjg5k4s8ma4N7pu2LnjAPWD6RVprjTGGJ1CWO5kHN2BT
ikzP39HO+4zmcH877DKXSSrhUEfuhYvCLVGd0yGwdnciJ4BP+acZaCj6SPPnym4m
ZwlbtBdIZFWy6bULWqslkiMoRbXS
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:02:14 2026 by rpki-client