
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2034383337.roa
File: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=
Subject key identifier: 63:01:55:38:E9:A6:43:93:EF:11:9D:CE:6A:2B:A4:22:D4:9B:5D:44
Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894
Certificate serial: 5F7781ED1EA37108826400D861E5B00771ADD252
Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2034383337.roa
Signing time: Fri 29 May 2026 08:16:50 +0000
ROA not before: Fri 29 May 2026 08:11:50 +0000
ROA not after: Fri 28 May 2027 08:16:50 +0000
asID: 4837
IP address blocks: 103.28.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:77:81:ed:1e:a3:71:08:82:64:00:d8:61:e5:b0:07:71:ad:d2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894
Validity
Not Before: May 29 08:11:50 2026 GMT
Not After : May 28 08:16:50 2027 GMT
Subject: CN=63015538E9A64393EF119DCE6A2BA422D49B5D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:49:61:f1:25:cb:23:e9:dd:b8:a4:9c:14:
62:4e:0a:48:2a:d1:d7:66:0d:d1:59:77:a0:cf:4f:
c2:db:8c:e3:8c:6d:f0:66:ee:32:9a:a5:79:f4:06:
c0:63:ed:d2:ac:0c:73:39:74:d4:28:53:b0:07:65:
e5:2b:a6:de:9a:1d:5c:eb:de:89:7a:91:b5:3a:00:
c7:87:3b:1b:d1:ec:1e:d0:3f:37:c6:55:82:c5:19:
00:22:52:38:f1:ca:93:a8:fd:d8:90:d9:48:a1:28:
2d:c0:a0:82:19:34:4a:01:cc:08:6c:2b:52:8b:45:
42:8f:65:53:65:dc:e3:d7:c5:14:f1:00:2e:cb:fc:
5d:1d:5c:b2:8b:65:7f:d0:7c:85:63:03:0d:d3:b6:
53:32:01:a6:58:8d:8a:a6:10:cb:11:87:59:d8:44:
e4:5c:b2:4d:78:26:6a:03:87:d4:ac:7a:70:c7:9e:
99:67:8e:72:fc:96:0b:49:41:b5:29:bd:b2:f8:8d:
d3:6d:a5:58:85:bd:c1:59:41:b6:3c:3c:41:a7:81:
b5:36:9f:58:01:19:80:fb:d0:8d:b1:91:ac:0c:fd:
6b:d9:7d:e0:98:10:d1:e6:cd:52:bb:40:89:db:b5:
91:12:43:1e:c8:68:87:f5:fa:9c:9a:5c:cb:de:9a:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:55:38:E9:A6:43:93:EF:11:9D:CE:6A:2B:A4:22:D4:9B:5D:44
X509v3 Authority Key Identifier:
keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:2a:cb:a1:0b:05:15:a0:96:08:53:d1:06:50:ee:eb:af:97:
3b:1a:78:61:e5:6f:1f:ab:d1:88:18:cd:27:51:4e:32:6f:e0:
b9:0b:ae:0f:fc:ce:af:f5:d8:0e:ba:56:79:47:a5:5c:f6:53:
07:1c:54:d3:32:8c:7d:0c:bb:6f:f7:35:4e:78:af:67:40:bf:
f8:76:64:c3:e8:92:a7:28:e9:34:ad:1a:93:39:3a:31:35:2d:
d2:69:45:12:bc:dc:1f:5e:07:21:45:53:28:80:d4:46:ab:25:
fc:c4:36:f7:b2:e9:41:1a:e0:9e:dc:10:b9:de:79:40:cd:8b:
ff:66:bf:aa:ff:c9:fb:20:61:a4:a8:fe:cf:59:e9:1b:32:f0:
ef:db:64:89:74:3a:89:0d:44:75:4c:de:6d:b5:32:5d:83:0b:
6a:52:d2:7f:b0:60:2d:5a:d5:61:07:4e:f4:83:7e:2e:32:35:
79:90:0a:fc:1c:6b:e1:24:05:d1:8f:83:82:4b:2b:a1:2c:f6:
71:b4:94:f3:ff:48:9c:ed:5a:4e:4c:1f:47:1f:7c:9b:5b:d0:
ff:41:a6:6f:06:c6:7e:38:6e:cb:42:f0:0f:39:8d:94:b6:4d:
de:c0:54:b6:30:1e:91:19:78:77:9e:b1:2d:b4:7f:dc:bf:bb:
73:97:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:33 2026 by rpki-client