
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3130332e34392e3137362e302f32342d3234203d3e2034383437.roa
File: 3130332e34392e3137362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: ajQJ6j9gJz58Pt34bat8WkxraIuEvfp95aG2jJ5f9t8=
Subject key identifier: 3F:76:D5:69:64:69:B0:B8:9D:6D:04:7B:3B:21:15:2F:0C:CB:8C:87
Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052
Certificate serial: 39DA92D4F61DF5ACEF2A1D44E288EE88CE3D4B58
Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3130332e34392e3137362e302f32342d3234203d3e2034383437.roa
Signing time: Thu 11 Jun 2026 01:00:02 +0000
ROA not before: Thu 11 Jun 2026 00:55:02 +0000
ROA not after: Thu 10 Jun 2027 01:00:02 +0000
asID: 4847
IP address blocks: 103.49.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl
rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:da:92:d4:f6:1d:f5:ac:ef:2a:1d:44:e2:88:ee:88:ce:3d:4b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052
Validity
Not Before: Jun 11 00:55:02 2026 GMT
Not After : Jun 10 01:00:02 2027 GMT
Subject: CN=3F76D5696469B0B89D6D047B3B21152F0CCB8C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:b5:50:ba:88:f3:f3:05:34:ef:c5:0a:b7:
df:fd:0f:0e:ff:56:65:0f:89:c6:d5:3e:73:74:01:
05:3d:17:f5:bd:4c:5a:61:c3:b9:71:6a:56:53:04:
7c:99:ed:a7:0b:ce:a1:4a:85:9a:38:46:23:a7:93:
54:e8:2e:56:fc:8f:a5:82:41:96:54:b2:b8:05:aa:
2a:ef:08:a4:02:f5:97:62:73:10:4a:e3:98:1d:56:
67:27:bb:1c:df:1f:6d:7a:2c:19:8a:4d:bc:7e:5c:
37:a3:35:85:e1:1d:ec:b1:6f:52:3d:7b:1c:5c:95:
1a:df:b7:9d:a8:cb:58:dc:68:b0:88:56:1d:3c:61:
98:9f:b7:35:9e:3b:72:e8:ae:7e:87:4e:19:2e:87:
d4:d9:e6:ba:f1:e3:89:14:c1:54:2f:53:5a:c3:de:
90:e6:ac:7b:b7:dd:a3:83:ca:40:e8:9b:67:cd:80:
d4:9c:8e:25:be:34:92:2e:13:e6:26:1a:10:b4:2b:
9d:49:f8:c4:bc:c4:b4:19:a1:61:8e:b3:c7:d5:71:
0c:43:98:62:a4:65:ce:af:aa:99:25:d2:f4:09:b7:
1c:01:c2:bc:aa:76:b8:41:64:3d:62:a0:ef:c3:84:
1f:68:8b:d0:d6:5c:00:fc:20:4c:79:ad:d5:da:ee:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:D5:69:64:69:B0:B8:9D:6D:04:7B:3B:21:15:2F:0C:CB:8C:87
X509v3 Authority Key Identifier:
keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3130332e34392e3137362e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:67:93:4f:c5:83:98:63:e1:32:55:5a:ae:a8:62:b1:92:9b:
fc:8d:cb:c5:1f:fb:3e:05:1e:75:ae:3b:f5:74:4d:30:70:5a:
d0:2b:f8:cd:c1:c5:30:1a:3b:08:e2:bd:48:dd:90:97:59:47:
7b:30:26:6d:e2:52:bc:5c:ee:0f:c7:6d:42:bd:c7:75:09:dd:
5d:1d:a9:45:e3:f2:40:08:9f:84:fb:72:29:8f:69:ea:f5:7c:
5e:35:93:45:73:b8:4c:f9:51:fd:f5:5f:74:34:6b:98:99:fb:
34:69:c4:f4:99:a2:96:95:f8:8b:9c:57:d8:7c:d8:ec:b4:29:
6e:ae:68:1e:6f:d3:d0:f5:a0:0d:60:7b:2c:be:c6:71:08:42:
2b:0e:bb:16:83:13:4d:c8:7a:77:69:e2:23:b9:40:80:05:a9:
21:85:bd:ea:48:f7:e3:5b:58:2f:96:a1:43:1b:71:9e:c0:8f:
21:a5:e3:12:d1:c7:16:91:6f:61:52:2f:ed:e4:27:da:22:c6:
5b:fd:b2:06:f3:6a:fe:0a:66:c6:47:f1:c0:f9:bd:44:d2:bc:
d3:61:ac:27:10:46:6b:9c:18:fe:54:bf:b5:fb:c6:be:5c:4d:
57:fa:7a:15:33:5c:ab:66:bf:36:c2:ac:30:31:fd:6e:31:9c:
4b:e0:fe:74
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOdqS1PYd9azvKh1E4ojuiM49S1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1
RUU4MjA1MjAeFw0yNjA2MTEwMDU1MDJaFw0yNzA2MTAwMTAwMDJaMDMxMTAvBgNV
BAMTKDNGNzZENTY5NjQ2OUIwQjg5RDZEMDQ3QjNCMjExNTJGMENDQjhDODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJ7VQuojz8wU078UKt9/9Dw7/
VmUPicbVPnN0AQU9F/W9TFphw7lxalZTBHyZ7acLzqFKhZo4RiOnk1ToLlb8j6WC
QZZUsrgFqirvCKQC9ZdicxBK45gdVmcnuxzfH216LBmKTbx+XDejNYXhHeyxb1I9
exxclRrft52oy1jcaLCIVh08YZiftzWeO3Lorn6HThkuh9TZ5rrx44kUwVQvU1rD
3pDmrHu33aODykDom2fNgNScjiW+NJIuE+YmGhC0K51J+MS8xLQZoWGOs8fVcQxD
mGKkZc6vqpkl0vQJtxwBwryqdrhBZD1ioO/DhB9oi9DWXAD8IEx5rdXa7g0TAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUP3bVaWRpsLidbQR7OyEVLwzLjIcwHwYDVR0j
BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG
NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTU4MDE4MTgyMzQ4ODAxLzAvMzEzMDMzMmUzNDM5
MmUzMTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcxsDANBgkqhkiG9w0BAQsFAAOCAQEApGeTT8WDmGPhMlVarqhisZKb/I3L
xR/7PgUeda479XRNMHBa0Cv4zcHFMBo7COK9SN2Ql1lHezAmbeJSvFzuD8dtQr3H
dQndXR2pRePyQAifhPtyKY9p6vV8XjWTRXO4TPlR/fVfdDRrmJn7NGnE9JmilpX4
i5xX2HzY7LQpbq5oHm/T0PWgDWB7LL7GcQhCKw67FoMTTch6d2niI7lAgAWpIYW9
6kj341tYL5ahQxtxnsCPIaXjEtHHFpFvYVIv7eQn2iLGW/2yBvNq/gpmxkfxwPm9
RNK802GsJxBGa5wY/lS/tfvGvlxNV/p6FTNcq2a/NsKsMDH9bjGcS+D+dA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:16 2026 by rpki-client