
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa
File: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (raw, json)
Hash identifier: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=
Subject key identifier: 05:A1:8C:89:73:10:A8:BF:EF:F1:C4:83:A5:BE:47:EB:94:AE:93:35
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 1BEBCF24FDB2B71DE17A397B68944253B8AC2371
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa
Signing time: Fri 29 May 2026 06:39:03 +0000
ROA not before: Fri 29 May 2026 06:34:03 +0000
ROA not after: Fri 28 May 2027 06:39:03 +0000
asID: 9405
IP address blocks: 103.115.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:eb:cf:24:fd:b2:b7:1d:e1:7a:39:7b:68:94:42:53:b8:ac:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: May 29 06:34:03 2026 GMT
Not After : May 28 06:39:03 2027 GMT
Subject: CN=05A18C897310A8BFEFF1C483A5BE47EB94AE9335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:b0:36:fb:05:69:ef:2a:d4:9f:a9:9c:db:
6b:a0:fd:34:6e:17:4f:42:da:4c:15:e3:b6:fd:42:
8a:7a:7e:65:78:81:fa:85:b2:63:0f:c8:02:23:56:
d8:c0:1e:40:7c:a6:14:cd:4e:e9:d1:f8:41:de:82:
98:5f:d0:c2:05:cb:a8:ca:b2:20:ab:65:fd:63:4b:
fa:4e:fc:76:aa:72:84:40:07:e9:65:32:e1:89:a9:
08:0a:34:ac:01:26:8a:a5:72:bc:b5:0c:3f:15:12:
f0:0c:74:81:d9:eb:fb:20:2f:70:d8:eb:91:8d:f5:
fc:e8:90:14:d9:7c:c4:b7:5f:5c:bd:93:c2:f0:5d:
53:cc:4c:c4:9a:85:9c:ef:fc:c2:b2:12:9e:20:e4:
c4:72:26:87:b6:35:01:d5:ff:2d:dc:9c:79:36:10:
12:8d:4b:68:1b:45:3d:fe:9b:1d:da:2f:aa:70:02:
ea:f4:d7:66:c3:6a:93:82:32:77:e6:35:6a:6c:ff:
03:38:9e:27:d6:8e:f7:ed:c2:86:98:5e:33:97:a9:
af:da:25:7f:f3:67:48:1a:af:b3:f9:90:19:7c:08:
e0:37:10:45:41:e8:e6:f4:43:63:8e:95:15:06:af:
6b:f6:f5:0d:81:30:f8:52:a6:aa:0a:11:46:24:a5:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:8C:89:73:10:A8:BF:EF:F1:C4:83:A5:BE:47:EB:94:AE:93:35
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:42:82:85:6f:db:5a:d7:01:0a:3c:c0:b2:cf:3d:76:9c:37:
46:68:ff:99:17:44:7f:51:39:03:5d:5e:a5:d1:f5:00:86:c6:
68:fa:6c:86:f0:61:5b:64:01:94:8e:e9:c3:b9:7b:8b:65:f0:
9c:b3:76:35:d0:c1:2f:8a:8f:8a:d7:f8:20:bc:fb:5e:d4:bf:
1b:e5:3a:c5:a5:b3:21:b7:c3:e6:29:bb:fa:96:74:37:9b:7c:
d3:f5:b3:ad:1e:4c:09:48:2b:41:25:47:0a:ae:51:48:b7:a8:
48:87:25:41:04:31:cc:41:c0:63:e8:a2:8d:4a:c4:81:56:e8:
d8:49:13:ca:97:94:3a:83:c4:63:7d:8f:7e:22:0a:1d:f5:0e:
74:23:13:2f:57:36:a5:a8:70:c1:c5:5e:82:c4:af:5f:16:1c:
66:65:b2:70:a0:6d:e8:8b:87:2f:5e:83:8b:84:ce:f9:5d:c6:
67:17:22:74:f0:18:55:c5:37:77:9b:ed:56:8a:ba:1f:1e:d4:
6d:ce:68:ea:67:88:14:4e:de:01:79:3a:f1:e5:9d:8f:67:b4:
c1:5d:03:a1:27:60:8b:1e:31:1c:38:e9:64:33:59:3c:8c:3d:
a0:69:fe:c2:6f:25:b8:2b:74:1e:6e:35:4e:61:4e:73:15:f1:
b6:c5:aa:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:13 2026 by rpki-client