
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e37322e302f32312d3231203d3e203539303337.roa
File: 3130332e34362e37322e302f32312d3231203d3e203539303337.roa (raw, json)
Hash identifier: oKFr93oc522lAnBsLoH0ODIBsn4nvsSfOPo/OuULMAs=
Subject key identifier: A5:D0:2D:19:DC:F4:15:6B:CD:C9:79:D1:74:60:FA:14:19:9F:C3:80
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 74CA163F62BF04279CBCB8123D1C55DC7C054C69
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e37322e302f32312d3231203d3e203539303337.roa
Signing time: Wed 27 May 2026 06:56:11 +0000
ROA not before: Wed 27 May 2026 06:51:11 +0000
ROA not after: Wed 26 May 2027 06:56:11 +0000
asID: 59037
IP address blocks: 103.46.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ca:16:3f:62:bf:04:27:9c:bc:b8:12:3d:1c:55:dc:7c:05:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:51:11 2026 GMT
Not After : May 26 06:56:11 2027 GMT
Subject: CN=A5D02D19DCF4156BCDC979D17460FA14199FC380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:5e:5b:f8:09:93:c8:16:29:70:f8:ca:df:
8a:cd:7d:c8:c2:38:99:c4:54:e9:d7:07:6e:aa:27:
ec:e5:07:da:80:e1:05:73:50:f7:57:e3:a8:f3:0f:
be:74:a7:7d:08:38:ed:74:be:6a:8b:16:1c:26:f0:
de:ae:b5:1d:f5:f1:35:05:8d:69:ff:30:32:b5:99:
da:11:f2:77:85:1f:0b:ed:26:8a:b4:e4:62:af:86:
2a:50:48:cd:6a:1a:f9:fa:34:cc:22:97:e1:0a:dd:
6e:f7:f7:23:ff:12:0c:be:7b:bc:48:70:96:78:66:
ee:e6:0e:dd:31:fe:70:42:10:03:77:fc:d1:9c:11:
c8:b5:89:5e:54:6a:63:4c:e6:66:1d:b5:90:9a:71:
97:77:52:87:6b:b8:9f:e1:11:d5:d0:33:4c:98:54:
89:14:4b:d0:c0:3f:8e:1b:c4:fb:87:3f:df:30:d6:
be:24:57:c8:08:aa:73:de:f5:07:a3:4e:7e:2f:eb:
db:ce:8c:9d:36:e5:c1:13:aa:f1:25:73:ba:4e:bc:
b3:e0:d9:af:b7:ac:d1:da:7a:4c:82:11:18:c2:54:
ab:ad:4d:08:af:5b:19:88:35:45:47:1c:87:05:93:
fa:3a:36:89:55:fb:1a:0c:7d:3d:e3:56:a4:58:0d:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:2D:19:DC:F4:15:6B:CD:C9:79:D1:74:60:FA:14:19:9F:C3:80
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e37322e302f32312d3231203d3e203539303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.46.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:07:95:45:4b:db:89:82:9a:95:8b:6b:cf:aa:be:23:91:28:
30:db:85:fa:95:ac:be:f2:e8:0d:a3:d1:28:3d:95:32:f2:c9:
8a:bb:10:cc:52:b9:74:8b:05:e9:68:ba:76:ee:d8:72:15:d9:
e9:0c:f2:94:1c:bc:e8:fc:a2:4d:ec:81:78:8f:ba:4f:d9:94:
ef:a8:83:cc:d1:96:ce:c4:f8:d0:66:74:a2:43:05:e2:04:68:
f8:ef:1e:18:bf:fe:d4:b8:61:5e:51:31:6c:0f:8e:72:8f:70:
26:71:40:3e:7a:67:48:26:9d:eb:7a:0b:cc:cb:cd:0d:1a:5c:
28:f0:50:c3:60:62:e3:0e:91:23:a2:48:28:cc:2a:39:4e:92:
ba:7d:8b:5e:09:e9:ed:ea:aa:58:cf:2a:c9:52:2d:1f:02:17:
f2:8c:7f:eb:f4:f6:d1:7f:71:e2:44:28:c1:55:1d:b0:96:96:
4b:fa:06:aa:1d:d2:2e:06:e2:83:a7:f9:d6:e5:37:20:40:b5:
6b:bc:78:51:f2:e1:60:7e:95:f1:58:fd:a6:ec:3d:02:0e:14:
15:f6:c6:0b:e1:1e:3e:3b:9e:25:f8:f6:d4:19:ea:40:17:8f:
51:0d:2b:b5:67:a0:5e:c5:62:9e:75:05:e6:0e:56:56:01:4d:
a9:e6:28:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:52:17 2026 by rpki-client