
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233332e302f32342d3234203d3e2034383437.roa
File: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=
Subject key identifier: 7C:47:5D:80:16:29:04:B3:AE:9F:7A:10:5E:D2:B6:BB:EB:22:F8:E8
Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE
Certificate serial: 3A559102DF055F3DFC503030A3EF4F55C0E85013
Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233332e302f32342d3234203d3e2034383437.roa
Signing time: Sat 30 May 2026 07:35:04 +0000
ROA not before: Sat 30 May 2026 07:30:04 +0000
ROA not after: Sat 29 May 2027 07:35:04 +0000
asID: 4847
IP address blocks: 103.48.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:55:91:02:df:05:5f:3d:fc:50:30:30:a3:ef:4f:55:c0:e8:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE
Validity
Not Before: May 30 07:30:04 2026 GMT
Not After : May 29 07:35:04 2027 GMT
Subject: CN=7C475D80162904B3AE9F7A105ED2B6BBEB22F8E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:d4:97:a2:a7:b2:c0:c2:28:22:51:93:1f:
5b:05:73:02:b2:d6:e7:d4:5e:f4:1c:f5:39:8b:58:
06:fb:34:90:6a:1e:9c:65:e1:62:1c:dc:ce:b8:e7:
b5:7a:22:95:85:e3:30:f4:0c:7f:3c:2b:06:10:86:
fa:89:bd:8b:46:bc:7f:67:e9:71:2f:02:e2:67:95:
40:f8:8f:05:1e:fa:4a:0b:b5:2a:b7:5b:e9:de:40:
13:6f:9c:f0:23:6d:7b:ae:42:72:0d:a9:13:e5:f3:
b6:4b:ce:f0:4c:9e:12:bc:16:b4:e1:4f:e8:01:4a:
81:a9:00:2b:84:8c:1b:fb:54:4d:d3:72:67:c4:40:
4c:c2:15:32:26:c5:8d:41:90:79:89:6c:ea:53:d2:
20:d5:8e:2a:b6:61:90:bb:cb:e2:4b:86:e5:0a:22:
2a:9c:16:ee:05:e4:54:51:2e:a3:bf:7c:dc:93:9b:
fb:51:19:f5:34:91:da:17:cc:1f:7d:54:04:fc:7d:
d0:3d:a2:64:d5:77:7b:f7:f2:a6:57:a6:37:44:89:
1c:07:e0:3c:63:47:bc:60:bb:3b:ce:09:ca:03:58:
05:30:31:f7:16:fc:fb:10:0d:3c:ac:60:0e:b7:05:
d8:b5:fc:d4:4a:09:fb:a1:38:c3:a6:df:d4:62:72:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:5D:80:16:29:04:B3:AE:9F:7A:10:5E:D2:B6:BB:EB:22:F8:E8
X509v3 Authority Key Identifier:
keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233332e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.48.233.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f4:0b:2d:8f:b9:17:82:69:cc:d2:71:85:95:40:2a:ac:d2:
db:3f:90:04:b3:d1:c9:ac:4a:2b:e1:83:46:a9:08:de:58:f6:
49:07:91:f6:78:6d:92:22:38:c5:bd:32:86:c2:80:73:a4:38:
08:17:8d:15:b5:07:c6:49:a9:5e:d9:f8:f8:26:ba:62:63:52:
89:ad:1d:ce:66:de:65:16:72:a6:d9:98:93:51:0b:f4:e4:fa:
1f:ff:4c:1f:2d:86:a1:93:29:a4:9f:6d:65:9b:4f:ce:fb:91:
9f:08:a4:44:20:7c:0d:a5:f6:5a:60:fd:a6:c0:93:1c:d5:b8:
49:f0:7d:ba:dd:b0:d8:83:cd:7c:76:ff:f2:2e:9d:2f:4f:66:
74:47:0f:9f:fb:d9:49:ac:6c:bb:15:ce:08:5a:b6:99:16:4d:
58:e3:8c:17:fa:a9:48:f1:d4:47:d4:dc:b4:ed:64:31:d7:7e:
6e:28:b6:57:d0:43:69:73:1e:5b:83:59:fb:66:ef:14:75:3a:
ca:49:94:56:16:b9:59:21:38:62:6c:0a:6a:e4:e7:85:4f:71:
52:04:e7:ca:aa:27:cc:40:40:ee:9d:cd:5d:81:d3:42:b9:9e:
58:37:7f:ae:ca:89:47:68:24:63:b0:db:1e:d8:a6:25:8c:b1:
82:65:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:09 2026 by rpki-client