
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33322e302f32342d3234203d3e2034383131.roa
File: 3130332e3232322e33322e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: D5crniKahJGIelOwSJRhsfjUaeQUHSsowSV74NYgj+A=
Subject key identifier: A4:52:46:08:E2:F1:3C:B3:83:72:15:8A:B0:2E:D1:CB:35:43:E9:78
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 557337D1EF909FE47FA3A12672798A036AC823E6
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33322e302f32342d3234203d3e2034383131.roa
Signing time: Thu 20 Aug 2026 07:09:55 +0000
ROA not before: Thu 20 Aug 2026 07:04:55 +0000
ROA not after: Thu 19 Aug 2027 07:09:55 +0000
asID: 4811
IP address blocks: 103.222.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 07:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:73:37:d1:ef:90:9f:e4:7f:a3:a1:26:72:79:8a:03:6a:c8:23:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: Aug 20 07:04:55 2026 GMT
Not After : Aug 19 07:09:55 2027 GMT
Subject: CN=A4524608E2F13CB38372158AB02ED1CB3543E978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:4c:07:c7:93:77:78:c0:42:69:ae:ad:b5:
25:c9:77:8e:66:3b:99:62:90:e9:48:6a:09:0c:e2:
fe:cb:99:18:52:58:96:eb:cb:59:6e:73:e5:10:d4:
0c:b1:fd:ac:22:ed:85:b3:78:43:40:fd:9c:4a:58:
92:73:6d:0f:75:de:ee:f5:b9:5b:84:b0:b6:06:e6:
14:e5:ea:5f:db:36:a0:9b:b4:e4:d2:18:9f:10:04:
a8:17:ac:9c:f1:aa:69:37:0e:a3:f9:d9:ba:3c:64:
54:fc:52:13:d1:f0:e8:73:a8:b7:fb:ef:95:e1:75:
76:12:56:df:46:3f:5c:a6:83:f6:57:0c:b1:a8:57:
e8:6f:40:70:35:41:10:a0:06:03:db:b7:83:e5:19:
d5:12:8d:0d:41:90:b6:b1:85:3f:ba:2f:7d:bb:68:
2d:6a:ca:6e:8b:77:66:56:95:1e:b1:f3:a1:18:b1:
04:50:f6:1a:03:62:12:7b:7c:f5:05:05:d4:ca:bb:
22:1b:9e:39:25:c5:80:d4:f4:74:26:43:47:2f:93:
06:25:12:77:60:06:6f:fa:48:85:24:5a:bb:a5:3b:
b8:db:fb:ab:74:34:c5:91:b0:74:5f:a6:61:ee:2f:
6a:1a:2d:5f:8c:96:65:53:4f:70:e9:f7:55:86:c0:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:52:46:08:E2:F1:3C:B3:83:72:15:8A:B0:2E:D1:CB:35:43:E9:78
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33322e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6f:08:5e:47:1a:2f:10:71:c7:35:88:9b:30:99:9e:6b:5e:
7e:6f:4c:bc:ce:4a:b8:bc:bd:2d:99:b3:16:1d:50:2f:9c:cc:
11:cc:da:c0:03:fd:a8:ea:66:f5:c8:b6:78:7c:5b:f0:42:63:
49:d8:3a:56:aa:93:2d:d6:c9:85:6b:09:80:18:4f:56:5e:86:
2e:7f:ce:bd:82:64:58:7c:87:56:fa:98:9d:1d:06:7c:63:f7:
61:c1:1d:55:78:10:01:7a:84:1f:30:8b:fd:c6:14:01:3d:60:
f1:73:c1:f3:0e:cd:44:87:8b:a9:5a:a9:82:84:d3:d6:0a:4f:
16:1b:42:d8:ba:75:a3:42:e9:b9:4d:c5:98:df:a9:21:d0:12:
04:de:99:17:8a:40:ee:f6:1c:b4:bf:d4:d8:a0:32:7c:70:93:
0c:f8:05:e4:28:af:76:07:58:fd:5c:3c:36:e0:61:ab:99:28:
db:2f:54:91:ab:0f:01:ed:9d:5e:21:ef:70:f3:f4:bb:80:1b:
77:28:1c:81:eb:f0:51:65:8a:89:81:df:b4:10:8d:71:93:de:
e1:2f:96:d3:c8:bc:30:67:bf:f5:67:d1:72:92:f4:cf:48:2f:
dc:ae:64:ab:d0:3c:8e:a1:79:95:c2:20:51:09:dd:93:2a:a4:
a5:20:eb:ab
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUVXM30e+Qn+R/o6EmcnmKA2rII+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3
NjlGREY4QjAeFw0yNjA4MjAwNzA0NTVaFw0yNzA4MTkwNzA5NTVaMDMxMTAvBgNV
BAMTKEE0NTI0NjA4RTJGMTNDQjM4MzcyMTU4QUIwMkVEMUNCMzU0M0U5NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9EwHx5N3eMBCaa6ttSXJd45m
O5likOlIagkM4v7LmRhSWJbry1luc+UQ1Ayx/awi7YWzeENA/ZxKWJJzbQ913u71
uVuEsLYG5hTl6l/bNqCbtOTSGJ8QBKgXrJzxqmk3DqP52bo8ZFT8UhPR8OhzqLf7
75XhdXYSVt9GP1ymg/ZXDLGoV+hvQHA1QRCgBgPbt4PlGdUSjQ1BkLaxhT+6L327
aC1qym6Ld2ZWlR6x86EYsQRQ9hoDYhJ7fPUFBdTKuyIbnjklxYDU9HQmQ0cvkwYl
EndgBm/6SIUkWrulO7jb+6t0NMWRsHRfpmHuL2oaLV+MlmVTT3Dp91WGwKbnAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUpFJGCOLxPLODchWKsC7RyzVD6XgwHwYDVR0j
BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1
OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzEzMDMzMmUzMjMy
MzIyZTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGfeIDANBgkqhkiG9w0BAQsFAAOCAQEAs28IXkcaLxBxxzWImzCZnmtefm9M
vM5KuLy9LZmzFh1QL5zMEczawAP9qOpm9ci2eHxb8EJjSdg6VqqTLdbJhWsJgBhP
Vl6GLn/OvYJkWHyHVvqYnR0GfGP3YcEdVXgQAXqEHzCL/cYUAT1g8XPB8w7NRIeL
qVqpgoTT1gpPFhtC2Lp1o0LpuU3FmN+pIdASBN6ZF4pA7vYctL/U2KAyfHCTDPgF
5CivdgdY/Vw8NuBhq5ko2y9UkasPAe2dXiHvcPP0u4AbdygcgevwUWWKiYHftBCN
cZPe4S+W08i8MGe/9WfRcpL0z0gv3K5kq9A8jqF5lcIgUQndkyqkpSDrqw==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client