
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/3130332e3233392e36382e302f32322d3234203d3e2034383337.roa
File: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (raw, json)
Hash identifier: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=
Subject key identifier: 4A:BD:21:9E:2C:91:9E:CE:AC:68:78:2E:0F:F5:73:98:4C:A3:DE:E6
Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE
Certificate serial: 41FCD073432BE7A2102D098F80861A466CD42AA3
Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/3130332e3233392e36382e302f32322d3234203d3e2034383337.roa
Signing time: Thu 11 Jun 2026 01:16:14 +0000
ROA not before: Thu 11 Jun 2026 01:11:14 +0000
ROA not after: Thu 10 Jun 2027 01:16:14 +0000
asID: 4837
IP address blocks: 103.239.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl
rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 21:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fc:d0:73:43:2b:e7:a2:10:2d:09:8f:80:86:1a:46:6c:d4:2a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE
Validity
Not Before: Jun 11 01:11:14 2026 GMT
Not After : Jun 10 01:16:14 2027 GMT
Subject: CN=4ABD219E2C919ECEAC68782E0FF573984CA3DEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1b:3c:47:e4:8c:99:12:43:cc:53:78:9c:95:
c0:f3:2d:a2:fe:97:ad:48:48:58:d0:73:fb:5b:da:
02:b2:cf:c5:34:24:35:56:3b:bc:e2:f4:10:d0:1a:
98:0d:ae:e6:72:4f:cd:79:ba:9b:d0:3e:8b:a9:55:
80:c4:bc:89:11:6a:c2:2b:62:df:da:2b:5b:0a:41:
58:1e:4d:9d:b4:7d:4e:92:73:4d:b1:d5:b6:2c:4e:
5c:02:02:43:98:fb:ea:5b:d3:25:f6:de:b7:2f:a3:
3b:13:39:bb:6d:ea:b7:1c:46:4d:14:ba:75:0c:9b:
4e:3d:b6:dd:b4:f1:a5:6c:56:b6:e8:c8:64:e7:8c:
18:cd:72:78:0b:b1:2e:c1:75:fe:53:87:ad:e5:3a:
e9:ce:8a:76:48:73:7e:2b:fb:56:fb:99:10:67:38:
61:bc:68:b8:c8:d6:1a:56:91:58:8a:eb:36:8c:6a:
a1:cc:7a:63:49:84:8c:0f:ac:6e:16:91:59:e3:05:
4a:35:09:70:24:4b:71:e5:fd:3d:5c:c4:04:46:8f:
d0:d3:20:7a:48:9d:23:be:30:bb:51:3a:b0:12:85:
a7:d5:5f:63:da:23:5b:4a:28:c3:e6:ba:03:0e:e9:
5f:5b:d9:d8:8d:8e:6d:62:e5:98:32:c6:52:d9:bc:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:21:9E:2C:91:9E:CE:AC:68:78:2E:0F:F5:73:98:4C:A3:DE:E6
X509v3 Authority Key Identifier:
keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/3130332e3233392e36382e302f32322d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.68.0/22
Signature Algorithm: sha256WithRSAEncryption
13:cc:44:45:b2:12:5b:38:af:94:2d:79:4c:17:fc:b5:8a:39:
1e:a4:6d:a0:ad:a9:a4:7a:0c:31:44:20:07:4b:1c:64:f4:9f:
a3:b9:e4:d2:c1:06:d8:99:c4:e6:42:a6:24:5c:1a:56:4c:67:
43:df:7f:58:4f:d9:5e:ec:ab:03:9e:66:fa:ef:03:fa:b6:a3:
b5:d5:d0:88:9a:9c:8d:7a:bd:40:13:8e:c4:64:c3:0b:fc:93:
71:cc:ed:74:ae:e7:27:ae:c1:51:d0:b4:be:fc:48:12:2f:28:
16:24:97:9f:17:05:bb:ee:d9:c3:0e:0e:91:53:9a:c4:fa:b3:
90:0c:11:5c:8a:bc:87:4e:56:92:32:9a:9c:52:82:be:96:2f:
06:83:bb:61:00:bb:0d:3a:69:d4:b4:f7:0c:1a:78:f2:43:22:
6c:3c:70:80:e4:47:d3:60:54:12:49:3b:c5:35:66:f2:3f:05:
76:6e:4a:2b:90:83:35:59:07:76:a1:c6:5d:7c:76:3d:f7:2e:
30:ca:4d:e1:8e:1e:2a:87:ea:08:93:bb:dd:10:39:0d:a8:80:
5a:88:44:c9:63:b7:ff:17:16:c1:9b:72:c7:78:5d:02:57:63:
8d:f3:eb:58:4f:94:d1:eb:54:6e:18:9e:21:6d:cf:24:ee:1e:
6a:35:a1:3d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQfzQc0Mr56IQLQmPgIYaRmzUKqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1
MjMyMjZCRTAeFw0yNjA2MTEwMTExMTRaFw0yNzA2MTAwMTE2MTRaMDMxMTAvBgNV
BAMTKDRBQkQyMTlFMkM5MTlFQ0VBQzY4NzgyRTBGRjU3Mzk4NENBM0RFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2GzxH5IyZEkPMU3iclcDzLaL+
l61ISFjQc/tb2gKyz8U0JDVWO7zi9BDQGpgNruZyT815upvQPoupVYDEvIkRasIr
Yt/aK1sKQVgeTZ20fU6Sc02x1bYsTlwCAkOY++pb0yX23rcvozsTObtt6rccRk0U
unUMm049tt208aVsVrboyGTnjBjNcngLsS7Bdf5Th63lOunOinZIc34r+1b7mRBn
OGG8aLjI1hpWkViK6zaMaqHMemNJhIwPrG4WkVnjBUo1CXAkS3Hl/T1cxARGj9DT
IHpInSO+MLtROrAShafVX2PaI1tKKMPmugMO6V9b2diNjm1i5ZgyxlLZvH2PAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUSr0hniyRns6saHguD/VzmEyj3uYwHwYDVR0j
BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD
NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDkxOTEwMzIwNzIyNTQyNTk0LzAvMzEzMDMzMmUzMjMz
MzkyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfvRDANBgkqhkiG9w0BAQsFAAOCAQEAE8xERbISWzivlC15TBf8tYo5HqRt
oK2ppHoMMUQgB0scZPSfo7nk0sEG2JnE5kKmJFwaVkxnQ99/WE/ZXuyrA55m+u8D
+rajtdXQiJqcjXq9QBOOxGTDC/yTccztdK7nJ67BUdC0vvxIEi8oFiSXnxcFu+7Z
ww4OkVOaxPqzkAwRXIq8h05WkjKanFKCvpYvBoO7YQC7DTpp1LT3DBp48kMibDxw
gORH02BUEkk7xTVm8j8Fdm5KK5CDNVkHdqHGXXx2PfcuMMpN4Y4eKofqCJO73RA5
DaiAWohEyWO3/xcWwZtyx3hdAldjjfPrWE+U0etUbhieIW3PJO4eajWhPQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:35 2026 by rpki-client