
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3130332e3233382e3134342e302f32322d3232203d3e2034383038.roa
File: 3130332e3233382e3134342e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: HrBOoNOx+6D3AD7JilE3a8XEOyOBdFaMzoATxQ0NoCY=
Subject key identifier: 4A:76:1E:59:BC:5E:FA:21:82:03:4E:1D:73:63:55:5B:87:4A:92:39
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 0C280E237ACA4782A1A0E4DC5E2AF01563A551D6
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3130332e3233382e3134342e302f32322d3232203d3e2034383038.roa
Signing time: Mon 08 Jun 2026 10:23:05 +0000
ROA not before: Mon 08 Jun 2026 10:18:05 +0000
ROA not after: Mon 07 Jun 2027 10:23:05 +0000
asID: 4808
IP address blocks: 103.238.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:28:0e:23:7a:ca:47:82:a1:a0:e4:dc:5e:2a:f0:15:63:a5:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 8 10:18:05 2026 GMT
Not After : Jun 7 10:23:05 2027 GMT
Subject: CN=4A761E59BC5EFA2182034E1D7363555B874A9239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:7e:a6:fa:f9:ec:f3:f7:f0:c5:43:c0:83:
68:a7:b2:43:67:87:b5:5e:69:83:b6:8a:94:ba:bc:
ee:2f:8c:da:cf:29:ef:e3:99:67:21:fa:d2:be:86:
17:be:00:27:31:cc:2f:6a:ff:24:0d:90:99:c0:e8:
21:cd:01:9d:5c:26:5e:23:db:d1:94:69:67:00:51:
ac:43:63:15:ef:d0:50:0d:61:2d:01:1c:fc:5d:21:
f9:62:f8:6a:d1:f7:e1:90:2f:77:59:5b:25:6a:7c:
76:79:09:e3:68:bf:ec:2c:06:76:10:c7:8e:39:c6:
52:e5:bf:2d:69:4d:30:f3:6b:62:d2:9c:55:60:b4:
e2:82:99:e7:64:a1:1c:3a:1a:50:c4:91:f6:dd:0e:
22:6a:d2:f4:36:80:92:ab:00:1f:f0:56:a8:77:ad:
a5:90:29:0f:78:71:30:1b:37:63:15:d1:55:3f:d8:
7b:75:52:9c:41:22:c4:c6:68:99:cc:2b:87:ad:eb:
e8:7a:ce:1a:24:60:ed:b1:7e:08:4f:66:12:f9:45:
a0:70:3c:b5:1b:2a:68:9c:e9:8d:b2:0a:7e:8b:c2:
81:66:c1:b7:ab:31:bd:2d:7b:0e:5d:3f:89:43:7a:
d9:7b:f9:b3:93:fd:1d:9b:de:ea:c8:08:b1:81:dc:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:76:1E:59:BC:5E:FA:21:82:03:4E:1D:73:63:55:5B:87:4A:92:39
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3130332e3233382e3134342e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.144.0/22
Signature Algorithm: sha256WithRSAEncryption
02:ae:85:5a:71:fe:a5:e7:41:08:60:ac:c3:8e:69:6b:27:9e:
a7:aa:8c:a4:1f:d2:b9:7d:c7:db:70:1d:93:d9:0f:29:14:57:
e1:a4:5b:ab:15:a2:e6:3b:42:f6:92:73:ab:09:a9:7c:7b:c6:
2a:bc:fa:cc:6f:25:18:db:fe:7f:14:71:6b:be:f8:54:1c:58:
97:7a:ce:b2:ad:93:9b:2e:93:9d:4a:07:29:b4:c0:e0:8e:83:
c3:3b:4f:b3:17:d3:0a:20:65:0c:66:62:0a:8f:3f:48:88:32:
56:e8:e0:02:db:56:3a:a2:09:05:95:73:92:b5:f2:38:96:e7:
cd:cc:fe:f9:01:87:61:eb:80:6e:9b:aa:ce:89:f6:80:14:5e:
75:8e:ca:99:35:d3:49:22:a2:67:69:e1:45:71:03:a1:ae:e8:
8e:04:f4:83:86:9a:79:8b:09:4e:df:d1:13:aa:f6:91:9d:74:
46:44:f7:3d:bb:45:72:e9:4b:70:a9:e0:80:07:eb:15:86:4c:
dc:d5:a1:ea:09:d8:d7:40:ee:70:08:39:bf:6a:be:32:6f:07:
cb:72:51:02:10:0d:77:c3:cd:f6:3f:19:3f:c7:46:f9:19:70:
1b:b6:e9:37:94:eb:e3:0f:a8:04:12:a7:ed:5a:05:7d:3a:cb:
06:23:c9:d8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDCgOI3rKR4KhoOTcXirwFWOlUdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MDgxMDE4MDVaFw0yNzA2MDcxMDIzMDVaMDMxMTAvBgNV
BAMTKDRBNzYxRTU5QkM1RUZBMjE4MjAzNEUxRDczNjM1NTVCODc0QTkyMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/36m+vns8/fwxUPAg2inskNn
h7VeaYO2ipS6vO4vjNrPKe/jmWch+tK+hhe+ACcxzC9q/yQNkJnA6CHNAZ1cJl4j
29GUaWcAUaxDYxXv0FANYS0BHPxdIfli+GrR9+GQL3dZWyVqfHZ5CeNov+wsBnYQ
x445xlLlvy1pTTDza2LSnFVgtOKCmedkoRw6GlDEkfbdDiJq0vQ2gJKrAB/wVqh3
raWQKQ94cTAbN2MV0VU/2Ht1UpxBIsTGaJnMK4et6+h6zhokYO2xfghPZhL5RaBw
PLUbKmic6Y2yCn6LwoFmwberMb0tew5dP4lDetl7+bOT/R2b3urICLGB3HoNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUSnYeWbxe+iGCA04dc2NVW4dKkjkwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNzU3NTQzNzUzMTI4MzQ3Ny8wLzMxMzAzMzJlMzIz
MzM4MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfukDANBgkqhkiG9w0BAQsFAAOCAQEAAq6FWnH+pedBCGCsw45payee
p6qMpB/SuX3H23Adk9kPKRRX4aRbqxWi5jtC9pJzqwmpfHvGKrz6zG8lGNv+fxRx
a774VBxYl3rOsq2Tmy6TnUoHKbTA4I6DwztPsxfTCiBlDGZiCo8/SIgyVujgAttW
OqIJBZVzkrXyOJbnzcz++QGHYeuAbpuqzon2gBRedY7KmTXTSSKiZ2nhRXEDoa7o
jgT0g4aaeYsJTt/RE6r2kZ10RkT3PbtFculLcKnggAfrFYZM3NWh6gnY10DucAg5
v2q+Mm8Hy3JRAhANd8PN9j8ZP8dG+RlwG7bpN5Tr4w+oBBKn7VoFfTrLBiPJ2A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:49 2026 by rpki-client