
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203137363231.roa
File: 3130332e3230322e3130302e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier: mt0g0h+HJqdY8L8n/sE8B5v4UeH8ywYkCs/HCgcL0mg=
Subject key identifier: 5A:E2:F8:2C:96:DD:12:88:7F:17:C6:BD:4B:EE:D4:11:B8:AC:21:01
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 53DABABB435A8FCC928FA4EDA1DEFD75071A43F1
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203137363231.roa
Signing time: Thu 11 Jun 2026 15:58:29 +0000
ROA not before: Thu 11 Jun 2026 15:53:29 +0000
ROA not after: Thu 10 Jun 2027 15:58:29 +0000
asID: 17621
IP address blocks: 103.202.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 16:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:da:ba:bb:43:5a:8f:cc:92:8f:a4:ed:a1:de:fd:75:07:1a:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:53:29 2026 GMT
Not After : Jun 10 15:58:29 2027 GMT
Subject: CN=5AE2F82C96DD12887F17C6BD4BEED411B8AC2101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:43:24:d1:3c:80:0b:49:d4:41:03:7c:f1:
8a:ce:90:0a:1f:be:05:b8:2b:53:82:ea:6c:32:d7:
d9:21:09:cc:a3:39:d6:13:9c:b8:55:58:88:24:fd:
aa:ce:20:d2:68:69:b0:3b:79:e6:32:fc:6f:d6:80:
14:a5:f7:17:38:ba:cf:63:12:66:ca:f4:38:ce:08:
b6:64:64:64:04:8f:fc:57:d2:9c:28:2b:33:91:55:
e8:11:3d:f2:48:a5:66:c8:c1:cf:a3:8c:84:93:06:
ed:ff:88:ed:53:df:ec:1b:a3:8f:a2:52:9b:a2:b5:
c6:64:f4:ae:ea:32:bb:ca:63:9a:92:a8:1a:3c:d2:
e5:d7:2d:5a:3d:e0:3d:cb:ed:0a:f0:a9:c6:b9:f0:
33:f9:ea:11:14:6f:3b:8d:61:96:44:88:1d:41:bb:
ec:2d:d5:b6:8d:7c:d6:8c:5e:73:51:f5:55:82:46:
2a:8a:45:b6:57:72:d9:96:14:14:40:9f:6f:1e:24:
20:28:06:6c:13:a6:cb:87:bc:0d:f5:d9:23:f4:6d:
79:e0:66:0e:77:9d:a6:c6:29:6a:2c:cc:21:9d:bd:
07:ca:d2:d4:ae:e6:c7:18:c4:e3:90:d8:b1:1b:00:
97:7b:25:2a:31:b2:df:a0:79:3d:c2:98:29:76:01:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:F8:2C:96:DD:12:88:7F:17:C6:BD:4B:EE:D4:11:B8:AC:21:01
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:9f:40:ac:57:dd:bb:2a:74:9a:33:d4:40:be:89:d1:07:f1:
89:9b:b6:e7:28:63:37:39:d4:43:9c:b2:a3:86:52:8e:23:44:
43:17:a6:c2:6d:47:f9:e4:de:27:95:6f:5e:30:84:45:db:b1:
c6:c5:89:83:e9:b2:88:3c:00:15:93:9e:d6:9c:9c:33:3c:83:
2c:30:2d:dc:84:9d:83:46:c4:68:18:38:45:b7:68:9a:2b:f8:
a9:b5:4d:6e:1a:68:4f:24:20:87:08:84:06:39:09:03:07:c0:
83:45:47:1f:a5:6e:50:7a:d8:67:56:86:ec:28:41:b7:fa:c5:
ee:04:5b:f9:16:75:9e:1d:44:41:6a:b7:b4:69:5c:95:f8:8f:
a5:b4:81:8b:73:ff:17:35:ae:7c:68:d3:b6:9d:95:a8:85:e3:
6b:a4:e3:20:e8:0f:92:9d:6c:a8:06:1c:66:58:61:eb:75:99:
1c:04:dd:b7:d3:5e:34:05:bc:65:4a:f2:cf:e1:25:20:c9:87:
ed:41:72:b7:c2:ac:c6:2a:d3:28:32:0c:2c:31:53:4f:2c:78:
33:00:b6:31:79:b6:f0:f5:8c:af:76:f5:c8:a1:88:44:e7:5e:
43:e5:e4:3f:c1:53:49:f5:81:4c:8a:7e:10:cd:c9:b5:84:7c:
46:b6:d5:bb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUU9q6u0Naj8ySj6Ttod79dQcaQ/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTUzMjlaFw0yNzA2MTAxNTU4MjlaMDMxMTAvBgNV
BAMTKDVBRTJGODJDOTZERDEyODg3RjE3QzZCRDRCRUVENDExQjhBQzIxMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwkMk0TyAC0nUQQN88YrOkAof
vgW4K1OC6mwy19khCcyjOdYTnLhVWIgk/arOINJoabA7eeYy/G/WgBSl9xc4us9j
EmbK9DjOCLZkZGQEj/xX0pwoKzORVegRPfJIpWbIwc+jjISTBu3/iO1T3+wbo4+i
UpuitcZk9K7qMrvKY5qSqBo80uXXLVo94D3L7Qrwqca58DP56hEUbzuNYZZEiB1B
u+wt1baNfNaMXnNR9VWCRiqKRbZXctmWFBRAn28eJCAoBmwTpsuHvA312SP0bXng
Zg53nabGKWoszCGdvQfK0tSu5scYxOOQ2LEbAJd7JSoxst+geT3CmCl2AQyFAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUWuL4LJbdEoh/F8a9S+7UEbisIQEwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy
MzAzMjJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfKZDANBgkqhkiG9w0BAQsFAAOCAQEAo59ArFfduyp0mjPUQL6J
0QfxiZu25yhjNznUQ5yyo4ZSjiNEQxemwm1H+eTeJ5VvXjCERduxxsWJg+myiDwA
FZOe1pycMzyDLDAt3ISdg0bEaBg4Rbdomiv4qbVNbhpoTyQghwiEBjkJAwfAg0VH
H6VuUHrYZ1aG7ChBt/rF7gRb+RZ1nh1EQWq3tGlclfiPpbSBi3P/FzWufGjTtp2V
qIXja6TjIOgPkp1sqAYcZlhh63WZHATdt9NeNAW8ZUryz+ElIMmH7UFyt8KsxirT
KDIMLDFTTyx4MwC2MXm28PWMr3b1yKGIROdeQ+XkP8FTSfWBTIp+EM3JtYR8RrbV
uw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:09 2026 by rpki-client