
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa
File: 3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier: TUB4Lqbv7e8SdRbH40PVbwwCiWR5VNp6aUB2GMt1d4c=
Subject key identifier: 8D:DD:56:03:AF:C4:4E:A3:CD:65:97:B4:3F:96:66:B9:39:33:1D:DE
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 4CB71BA3EEDC418F18300AAFFAC19F7E558065FB
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa
Signing time: Wed 13 May 2026 05:31:43 +0000
ROA not before: Wed 13 May 2026 05:26:43 +0000
ROA not after: Wed 12 May 2027 05:31:43 +0000
asID: 4812
IP address blocks: 103.243.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b7:1b:a3:ee:dc:41:8f:18:30:0a:af:fa:c1:9f:7e:55:80:65:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: May 13 05:26:43 2026 GMT
Not After : May 12 05:31:43 2027 GMT
Subject: CN=8DDD5603AFC44EA3CD6597B43F9666B939331DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:0e:55:02:67:7a:d7:ac:65:f4:3b:b9:6b:
ad:3c:6e:18:8a:76:4e:d0:2d:fa:09:f0:27:f5:83:
02:87:89:18:ae:1b:f7:56:9a:5f:8a:a5:79:0c:fc:
fc:33:9f:37:c9:d1:72:74:d9:bc:9e:77:0a:4d:b1:
6f:69:c6:ff:d7:f5:84:2f:e8:4d:28:c9:c9:63:c3:
24:9d:e8:8b:49:d1:f3:28:03:3f:99:c2:1f:d0:b4:
f8:0f:a0:03:3d:aa:01:a3:85:d1:8c:98:fd:14:71:
e0:32:b7:e6:44:a1:bd:87:92:3a:38:4d:9b:f2:c1:
3c:c1:64:65:7c:02:e1:bb:2b:3d:a9:00:50:f2:44:
ab:65:e4:0a:15:65:fc:d4:c6:e3:52:ab:45:19:ae:
a4:78:e3:57:30:78:3d:00:84:71:95:93:e4:f3:5c:
2c:3c:04:28:b5:04:c4:b0:e1:ef:99:23:71:ab:6b:
4a:d9:a3:73:a3:38:0a:ee:55:74:8a:69:03:41:1c:
0d:71:48:d4:98:55:2c:51:ab:b4:d0:d0:6c:ba:d0:
4a:01:9c:84:5b:2c:91:8d:38:69:b4:8a:93:17:58:
af:05:78:59:cd:db:e2:20:b3:ee:68:eb:72:7f:12:
f3:f0:99:80:f2:89:16:0c:52:b8:b5:7c:42:c8:a2:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:56:03:AF:C4:4E:A3:CD:65:97:B4:3F:96:66:B9:39:33:1D:DE
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ef:56:c5:c0:9a:2b:10:40:c0:18:20:30:43:25:e9:40:05:
7d:02:82:9e:17:7e:76:7a:89:38:77:80:98:cc:53:c2:22:45:
7b:e9:d9:d5:e6:32:51:48:ff:03:a6:20:10:92:23:64:d5:e0:
c5:76:7f:19:87:bc:41:5e:25:96:94:d4:67:57:a2:1e:ac:0e:
c3:62:de:2a:89:b4:73:ab:ab:38:a1:68:27:3c:d0:77:74:81:
ee:77:66:9d:ab:74:44:cf:ad:0c:2b:26:df:b1:95:71:69:16:
bf:e7:e6:b4:e7:38:3b:2f:a1:c7:7c:bc:f8:fa:bd:89:32:79:
d0:76:34:eb:f0:5f:b3:56:92:82:0a:b6:30:d6:cd:4f:41:54:
6f:37:d4:b9:19:5e:b1:81:08:04:c6:33:5f:fc:f5:86:f6:7c:
14:bf:5b:01:5a:a9:bf:86:21:20:2b:7c:1e:a4:fc:a4:22:8e:
e3:23:d2:cd:8a:f5:3c:42:c9:0f:0e:37:9e:f7:0a:19:d5:21:
86:47:1a:07:af:e9:77:2b:de:0d:93:81:39:e3:be:d9:59:3e:
34:92:4e:a8:3d:9a:65:15:c7:51:81:a4:10:01:dd:72:91:bb:
12:f2:86:5b:fc:2b:05:d0:43:72:d0:57:1c:74:cf:05:1a:2a:
82:e1:1b:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:30 2026 by rpki-client