
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134372e302f32342d3234203d3e203538383532.roa
File: 3130332e38352e3134372e302f32342d3234203d3e203538383532.roa (raw, json)
Hash identifier: wTPF3wn67HZ+cr+CVGr3T0ffcz5692BL7rs8NpZcmIQ=
Subject key identifier: AA:D1:85:C6:CE:40:FE:29:65:99:8E:3E:8E:8C:09:8A:CE:4D:99:4A
Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
Certificate serial: 6343E1F43C528B3B65829252334A68E06EA4772A
Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134372e302f32342d3234203d3e203538383532.roa
Signing time: Fri 29 May 2026 02:09:55 +0000
ROA not before: Fri 29 May 2026 02:04:55 +0000
ROA not after: Fri 28 May 2027 02:09:55 +0000
asID: 58852
IP address blocks: 103.85.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl
rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:43:e1:f4:3c:52:8b:3b:65:82:92:52:33:4a:68:e0:6e:a4:77:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
Validity
Not Before: May 29 02:04:55 2026 GMT
Not After : May 28 02:09:55 2027 GMT
Subject: CN=AAD185C6CE40FE2965998E3E8E8C098ACE4D994A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:6e:9d:5a:8d:57:bd:fa:6d:15:3f:6b:3b:
35:88:13:43:02:fe:06:fb:a9:10:c5:20:26:bd:a4:
33:3b:2e:aa:61:61:22:db:6d:4a:36:ea:bc:64:76:
e8:86:8d:6a:dc:72:5c:ba:4e:c1:5e:04:d2:7a:c0:
03:43:35:68:85:9a:92:da:7e:37:9b:04:e5:25:3c:
37:79:9c:66:3c:b4:ea:b1:60:10:2c:5d:f8:5e:c9:
0d:ff:c1:c4:89:ec:7f:08:c0:94:84:de:55:e8:0c:
9a:d7:4b:db:04:61:eb:9f:f5:4a:99:e0:f3:00:04:
58:d2:fa:75:29:09:1d:e5:9f:fa:10:05:d8:e5:c0:
ee:57:41:b3:61:fa:ef:5e:c7:89:9b:67:ad:16:49:
ca:cb:93:92:30:79:31:0c:4a:ea:86:56:7f:ef:c9:
3e:31:b1:ff:4c:6e:ec:fb:bd:0f:61:e4:3f:8a:8d:
5e:43:b1:4c:28:a5:f3:86:64:a5:d5:f8:f2:e0:a4:
43:b2:dc:f1:ba:5f:1a:cf:ae:08:78:e2:be:50:48:
06:a8:6b:28:6f:3e:29:36:6f:96:63:0b:fd:1c:1f:
b3:ff:ac:be:ff:8b:5c:6f:6f:2d:c7:05:5f:b2:c6:
cc:0d:9b:ca:4f:81:cd:0f:c5:cc:e1:e0:4f:d9:f1:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:85:C6:CE:40:FE:29:65:99:8E:3E:8E:8C:09:8A:CE:4D:99:4A
X509v3 Authority Key Identifier:
keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134372e302f32342d3234203d3e203538383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ba:66:d5:c1:62:d6:27:d7:5c:01:ac:42:15:80:89:2b:d9:
63:72:76:13:ba:c9:bf:b5:93:b6:2b:e7:58:06:0f:32:b1:2f:
77:0f:8a:11:e6:f5:60:b7:18:3f:d7:8d:10:a9:09:f8:c7:c5:
20:f6:bd:3a:24:cf:51:bb:a5:e4:6d:36:e7:65:0a:a6:ef:64:
05:29:a2:14:bb:a2:c2:6b:61:aa:5f:ae:de:82:ef:74:3a:7e:
8b:2b:34:85:8e:9d:61:82:d5:3b:ee:f0:2a:c2:69:be:50:50:
a6:d4:83:cf:0b:51:7c:6d:60:81:da:db:21:79:26:0f:ef:64:
64:84:2a:1d:6f:81:0f:65:0f:2a:63:06:44:68:c0:6d:a2:ce:
6c:ef:ec:32:d3:37:e5:e4:bf:e2:dd:d1:c9:1c:8a:c5:21:7a:
45:c9:65:81:47:79:a0:e2:00:6b:2a:28:61:2c:e2:0c:77:4a:
2a:cb:6a:76:1a:8b:b9:1a:46:0e:f4:c1:1f:07:a3:a1:64:49:
22:b9:4b:46:1c:f6:be:01:15:67:6f:60:52:a4:00:0b:d9:bb:
16:90:12:89:0c:fd:a3:42:da:6f:91:41:34:12:42:f2:f3:7f:
6f:de:77:b4:93:1a:88:46:8a:f1:f6:cb:96:95:34:6e:8b:b7:
bb:32:fb:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:52:43 2026 by rpki-client