
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa
File: 3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier: SMjmAhcI5p+kI7KIiJkHRDID7qOb7G4+6Vt8qsbyPCc=
Subject key identifier: 28:69:A7:22:D9:F9:49:0B:3B:BF:71:4D:CF:DA:90:9E:F2:06:F0:5B
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 61C92254D1E65419410A0C6B75A3713E23E77A38
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa
Signing time: Thu 11 Jun 2026 16:00:02 +0000
ROA not before: Thu 11 Jun 2026 15:55:02 +0000
ROA not after: Thu 10 Jun 2027 16:00:02 +0000
asID: 17621
IP address blocks: 103.202.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 16:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c9:22:54:d1:e6:54:19:41:0a:0c:6b:75:a3:71:3e:23:e7:7a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:55:02 2026 GMT
Not After : Jun 10 16:00:02 2027 GMT
Subject: CN=2869A722D9F9490B3BBF714DCFDA909EF206F05B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:30:eb:d1:9b:61:0b:22:8e:6b:00:07:9d:
9b:0a:44:54:2f:50:c7:80:be:c0:be:e0:29:c4:64:
08:df:ed:4e:56:19:54:39:1e:22:9a:7d:88:03:6a:
ac:fa:26:3d:85:ff:08:88:b5:d5:e3:95:5f:1f:27:
87:d6:db:00:ec:ac:5b:2e:7f:94:fc:11:1e:2c:92:
38:05:50:bf:3d:b0:36:f8:ac:ac:95:45:a3:8f:01:
79:70:35:90:a9:3f:03:80:78:17:5b:ea:dd:fb:e9:
2c:11:a5:34:1b:f3:5e:24:b0:4a:9f:de:a3:26:a4:
74:7a:b0:17:35:ac:3b:2b:13:f6:2b:a2:42:b0:a3:
55:1a:ea:71:b8:15:03:35:5b:2b:a1:cd:c9:2d:d0:
e7:4e:6f:37:0e:84:88:7c:3b:42:70:ca:2a:fb:9d:
15:bf:30:d9:49:ab:28:69:28:24:ea:79:19:54:2c:
ed:d1:1c:d8:85:4e:b3:b1:81:93:2a:88:f5:9f:30:
a4:d3:03:8c:7b:24:30:f3:2b:d5:a3:a6:f5:41:08:
dc:ee:d5:99:74:84:3a:24:f1:d0:d8:e4:2a:6a:27:
eb:58:c1:4c:e7:f4:04:b1:00:27:53:90:76:74:43:
81:6a:52:54:9b:ea:08:57:ea:31:fb:e6:fd:41:a3:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:A7:22:D9:F9:49:0B:3B:BF:71:4D:CF:DA:90:9E:F2:06:F0:5B
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:1a:ae:81:73:03:f3:cc:3f:7b:b4:3f:bd:c1:1e:28:72:db:
c2:81:7a:87:9c:30:6d:ee:a7:31:6f:10:11:40:ee:bb:6e:93:
51:8b:77:47:da:73:b7:eb:f1:99:e7:8e:15:89:5c:a0:a7:4c:
03:08:27:4e:b1:18:32:09:6f:a9:5f:95:51:e8:cc:bd:55:4e:
e1:6f:ee:e6:ad:25:4f:8e:8a:0d:c0:f0:65:eb:56:01:78:89:
aa:9f:03:4e:06:67:01:6c:3c:24:00:b3:b9:f4:3d:d3:d9:db:
fa:4c:e5:ca:cd:66:43:b5:9d:60:a9:68:d7:44:04:f8:94:7b:
7a:b5:86:f9:62:e9:8d:73:61:8c:4b:cc:1a:dd:3e:f3:7b:5d:
e6:cd:dd:2d:c9:8e:ae:c5:ce:1f:2c:30:bd:8b:5a:4c:59:8a:
71:e4:5d:a6:ba:db:ea:b4:e0:6f:03:a4:56:73:f5:18:21:6b:
dc:ab:ad:cf:f5:8e:c6:30:35:db:16:27:79:25:84:23:81:ef:
91:e6:a4:e1:fa:b3:22:df:40:39:9f:4a:44:54:27:2f:97:eb:
0c:c7:89:15:de:d2:f1:99:76:d4:4d:71:ad:58:4c:16:1c:09:
86:9e:0f:b4:df:72:8d:ed:fc:85:a1:36:84:c1:79:4f:8d:3d:
5d:6e:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:20 2026 by rpki-client