
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e31322e302f32322d3232203d3e203539303337.roa
File: 3130332e34362e31322e302f32322d3232203d3e203539303337.roa (raw, json)
Hash identifier: ywzwxdSlzCtlBPbJIW2oRBJRpuYa2If5IjjWIHmsM5Q=
Subject key identifier: 61:C3:9C:61:E5:09:B3:1C:7D:1D:F9:3A:7F:75:A0:2D:54:D2:68:CF
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 3E2086FB3920C0E765BEBA5510EF94CE603A6C74
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e31322e302f32322d3232203d3e203539303337.roa
Signing time: Wed 27 May 2026 06:39:05 +0000
ROA not before: Wed 27 May 2026 06:34:05 +0000
ROA not after: Wed 26 May 2027 06:39:05 +0000
asID: 59037
IP address blocks: 103.46.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:20:86:fb:39:20:c0:e7:65:be:ba:55:10:ef:94:ce:60:3a:6c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:34:05 2026 GMT
Not After : May 26 06:39:05 2027 GMT
Subject: CN=61C39C61E509B31C7D1DF93A7F75A02D54D268CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:b2:13:57:12:31:ba:de:ef:34:38:0a:4c:
ab:79:ad:6d:4a:b5:df:91:51:88:78:f7:fc:9b:2f:
03:12:24:8a:44:5a:63:13:82:47:61:3d:48:db:6c:
d8:34:ac:cc:f6:cf:a9:01:31:91:d4:ea:5d:71:91:
9d:2c:9f:f2:d3:20:cb:0f:bc:4f:6d:76:8f:96:ac:
47:9d:b4:49:cf:10:48:1f:e0:94:19:a4:14:13:91:
5f:83:cd:1d:30:63:f4:53:bd:2b:cd:ed:da:8f:85:
53:b7:0d:e7:e6:d4:06:58:16:c0:75:f0:67:71:95:
9c:a4:13:9d:aa:27:a6:f2:08:30:2f:45:3b:1a:79:
40:0d:64:e0:35:08:5a:03:8e:ee:1d:1f:56:4e:91:
06:45:6e:a0:cd:8e:99:ec:67:cf:e1:1b:8f:cf:b3:
61:3a:88:ef:6d:56:ec:f1:2a:f6:7d:3b:04:f6:13:
ba:1c:87:96:66:36:1c:db:06:6c:ca:9b:15:fa:51:
57:c0:c1:23:3c:f4:6b:96:78:fe:16:cc:a8:16:6f:
c9:e5:ff:ab:1e:a5:48:73:de:51:25:21:c0:a1:10:
75:d7:86:1e:1f:e3:0b:12:d8:0c:dc:63:44:9f:b3:
e3:c9:3e:a7:09:5a:35:45:07:60:7f:08:a8:03:60:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:9C:61:E5:09:B3:1C:7D:1D:F9:3A:7F:75:A0:2D:54:D2:68:CF
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e31322e302f32322d3232203d3e203539303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.46.12.0/22
Signature Algorithm: sha256WithRSAEncryption
43:2e:69:24:83:93:f0:60:f8:ec:5c:34:02:61:f0:b5:96:9c:
5c:4b:b3:b8:9b:bb:c0:81:f9:26:e8:9d:30:ea:30:44:7f:16:
5d:35:c5:1f:49:64:e8:65:79:dd:60:49:b5:91:3e:27:b1:79:
f5:6c:ca:07:ee:76:15:d7:2c:25:3a:00:91:bd:25:ef:ba:67:
f0:e1:3e:27:c6:27:c0:fc:a3:46:03:c7:89:a9:2e:8a:ff:b8:
7a:e5:b3:e8:2a:18:8a:fe:58:da:9e:73:09:bc:b8:c2:97:13:
c8:df:ca:ba:e1:9d:b1:3a:d2:00:cb:07:2a:86:a8:96:cf:c8:
aa:73:f8:38:8f:9d:d8:1c:57:eb:83:d2:5f:27:83:87:f8:a8:
49:c0:fb:1e:98:be:b2:cb:9e:cd:2d:0b:51:b7:04:a1:f0:9f:
9c:91:6f:9d:7f:eb:35:a9:51:eb:fe:27:24:af:ad:ce:be:ea:
ce:d5:56:64:2d:c7:d2:12:14:e5:d9:14:43:1f:bc:fe:8a:bb:
01:99:99:da:10:47:84:ba:94:4a:a9:56:da:b2:23:54:9f:3b:
6a:61:9a:41:b1:32:d0:d9:c7:e5:d8:0a:26:2a:3f:97:9d:32:
11:7c:6e:56:d9:e0:c9:cb:0a:1b:6a:ca:9a:5c:d9:81:1a:58:
19:e2:0d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:48 2026 by rpki-client