
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa
File: 3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier: HcUe0sJDdntavmUQHBO/YLIpXlX7zOGpCns9PqkHNBE=
Subject key identifier: 9A:6B:70:50:2A:4F:D1:1E:49:6A:78:6E:5F:5A:90:24:FC:61:3A:D2
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 78CFD4E44606259D3A9E234F1301370C81E2AB96
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa
Signing time: Thu 11 Jun 2026 16:00:53 +0000
ROA not before: Thu 11 Jun 2026 15:55:53 +0000
ROA not after: Thu 10 Jun 2027 16:00:53 +0000
asID: 17621
IP address blocks: 103.202.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 16:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cf:d4:e4:46:06:25:9d:3a:9e:23:4f:13:01:37:0c:81:e2:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: Jun 11 15:55:53 2026 GMT
Not After : Jun 10 16:00:53 2027 GMT
Subject: CN=9A6B70502A4FD11E496A786E5F5A9024FC613AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:61:0f:5e:c4:27:94:be:6c:ed:41:7f:50:
58:ad:c6:ce:dd:d6:01:ec:87:48:ba:9c:8d:fb:37:
8e:da:f8:14:ef:f4:bb:ae:79:07:22:87:b2:91:e3:
9a:4d:e0:25:34:f5:93:cb:b8:bd:46:64:3b:1b:5a:
ba:c5:17:cf:4d:c8:87:99:de:82:fa:c6:9d:47:ed:
3c:ea:fe:58:d0:c4:56:52:0e:9a:9e:ba:35:e5:77:
79:f0:b6:87:ff:33:3b:df:0b:6b:fb:5b:a2:74:0a:
6c:18:6b:1d:6a:4d:73:32:0d:98:83:80:d5:8e:94:
21:19:32:a5:28:0a:e8:f2:aa:a7:c1:3a:06:d5:9f:
30:37:43:f8:95:cc:be:45:11:7e:5d:ab:16:41:b1:
d3:3c:41:4d:fb:b3:b2:75:98:e0:9b:58:be:19:56:
e9:a0:26:36:64:ba:b3:47:38:dd:26:67:f9:07:62:
2e:3a:ee:6d:98:0f:a0:ea:73:53:f1:b2:11:5c:62:
f8:e8:e5:f2:71:f7:f0:ff:f7:93:08:d7:ed:49:37:
52:f9:0c:a7:64:9b:20:ab:6d:2f:09:b2:88:b2:62:
96:a9:7e:aa:66:2c:67:8f:74:9f:7e:11:12:10:68:
0a:77:34:c2:8e:90:ad:16:f0:96:a4:ad:67:56:fd:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:70:50:2A:4F:D1:1E:49:6A:78:6E:5F:5A:90:24:FC:61:3A:D2
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.202.124.0/22
Signature Algorithm: sha256WithRSAEncryption
96:db:a1:31:d5:6b:19:bf:29:f9:fd:f8:1d:dd:ae:ac:a2:a2:
d5:2b:f8:b4:87:4f:4b:9e:a2:ee:c8:6e:52:d1:94:0f:c3:fe:
c4:eb:82:1a:15:6c:be:a1:87:d2:11:71:54:49:c4:aa:47:9f:
3d:4e:87:ec:96:ea:36:e7:56:f3:8c:4a:fb:43:ae:a4:8e:a4:
ae:9e:e0:fd:e2:7d:16:14:58:1e:fc:34:a2:2b:b2:ff:3c:2e:
6b:df:30:e1:b0:96:77:b5:74:59:e4:13:2f:4f:10:47:b4:67:
8a:37:7d:61:87:0f:86:8e:84:0d:b5:5e:6e:b7:91:b0:73:f5:
b4:c6:05:0a:c5:34:57:3f:aa:1b:16:f5:45:5e:86:be:d4:6f:
4f:7b:53:c5:77:86:42:ea:ac:4a:b2:3f:07:41:29:89:78:d3:
19:22:a3:a9:59:1d:65:44:de:2c:19:2a:1d:22:f5:07:51:f2:
f8:6c:50:50:e6:8f:ad:47:be:4d:38:45:70:dc:b8:52:ca:f6:
d5:de:e2:ed:0c:64:b0:b0:1c:71:8a:d3:6d:3e:f3:52:b2:00:
ee:96:81:ec:d5:0b:ff:24:18:8d:47:95:6a:e9:b7:fc:75:91:
8d:47:57:83:08:64:36:51:92:34:3d:ab:c4:df:fe:ce:88:6f:
b4:0e:40:8f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUeM/U5EYGJZ06niNPEwE3DIHiq5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU1NTNaFw0yNzA2MTAxNjAwNTNaMDMxMTAvBgNV
BAMTKDlBNkI3MDUwMkE0RkQxMUU0OTZBNzg2RTVGNUE5MDI0RkM2MTNBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxGEPXsQnlL5s7UF/UFitxs7d
1gHsh0i6nI37N47a+BTv9LuueQcih7KR45pN4CU09ZPLuL1GZDsbWrrFF89NyIeZ
3oL6xp1H7Tzq/ljQxFZSDpqeujXld3nwtof/MzvfC2v7W6J0CmwYax1qTXMyDZiD
gNWOlCEZMqUoCujyqqfBOgbVnzA3Q/iVzL5FEX5dqxZBsdM8QU37s7J1mOCbWL4Z
VumgJjZkurNHON0mZ/kHYi467m2YD6Dqc1PxshFcYvjo5fJx9/D/95MI1+1JN1L5
DKdkmyCrbS8JsoiyYpapfqpmLGePdJ9+ERIQaAp3NMKOkK0W8JakrWdW/YVnAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUmmtwUCpP0R5JanhuX1qQJPxhOtIwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy
MzAzMjJlMzEzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfKfDANBgkqhkiG9w0BAQsFAAOCAQEAltuhMdVrGb8p+f34Hd2u
rKKi1Sv4tIdPS56i7shuUtGUD8P+xOuCGhVsvqGH0hFxVEnEqkefPU6H7JbqNudW
84xK+0OupI6krp7g/eJ9FhRYHvw0oiuy/zwua98w4bCWd7V0WeQTL08QR7Rnijd9
YYcPho6EDbVebreRsHP1tMYFCsU0Vz+qGxb1RV6GvtRvT3tTxXeGQuqsSrI/B0Ep
iXjTGSKjqVkdZUTeLBkqHSL1B1Hy+GxQUOaPrUe+TThFcNy4Usr21d7i7QxksLAc
cYrTbT7zUrIA7paB7NUL/yQYjUeVaum3/HWRjUdXgwhkNlGSND2rxN/+zohvtA5A
jw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:11 2026 by rpki-client