
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35322e302f32322d3232203d3e2034383437.roa
File: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=
Subject key identifier: E8:01:97:30:FD:61:3F:B7:57:07:7C:AF:55:51:B2:7A:EA:80:54:37
Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
Certificate serial: 4EBF68470DAEA1E2B6AB57C00568E2B27894DCA8
Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35322e302f32322d3232203d3e2034383437.roa
Signing time: Thu 21 May 2026 07:59:20 +0000
ROA not before: Thu 21 May 2026 07:54:20 +0000
ROA not after: Thu 20 May 2027 07:59:20 +0000
asID: 4847
IP address blocks: 103.118.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl
rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:bf:68:47:0d:ae:a1:e2:b6:ab:57:c0:05:68:e2:b2:78:94:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
Validity
Not Before: May 21 07:54:20 2026 GMT
Not After : May 20 07:59:20 2027 GMT
Subject: CN=E8019730FD613FB757077CAF5551B27AEA805437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:47:e4:b3:b7:07:12:fc:60:ab:53:be:f5:
75:d0:98:c0:aa:e1:b4:54:b8:34:30:3d:12:48:ca:
c0:64:d4:ef:92:fb:75:35:72:51:43:99:90:9e:82:
7b:6f:c0:9c:09:48:01:7e:1e:ee:12:d7:6b:a9:26:
2b:e9:c0:58:7b:a1:d1:10:44:56:97:ba:09:32:c6:
8a:1c:c8:8f:61:f3:e1:67:d5:24:c8:f3:c6:cd:2c:
33:79:48:77:5d:10:52:fd:dd:15:89:ac:70:91:05:
47:57:12:39:32:fc:71:1a:98:fe:d1:76:dc:de:a3:
8c:a8:8d:c6:c2:f0:d3:fd:55:be:d9:f6:59:9a:ee:
77:c2:4f:b3:d5:b2:17:66:3d:ad:65:66:ef:80:14:
f7:5f:df:64:57:c0:79:74:7f:29:e5:3c:bd:19:76:
fb:6b:a8:5d:60:d0:1b:2f:4b:77:f0:3b:c4:23:7f:
dc:ac:5f:65:89:98:08:25:9b:d2:38:35:6b:f7:5c:
62:7f:bd:df:c8:e7:82:ae:e8:de:e2:ee:9d:d7:b1:
f6:c9:ca:51:ad:ee:50:67:ad:7e:65:35:e5:b7:6e:
03:ec:11:8e:e6:54:11:c7:05:1b:a8:b2:55:10:0e:
02:8c:0f:e2:ff:f4:78:e2:97:e6:38:b9:a1:e2:06:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:97:30:FD:61:3F:B7:57:07:7C:AF:55:51:B2:7A:EA:80:54:37
X509v3 Authority Key Identifier:
keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35322e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.52.0/22
Signature Algorithm: sha256WithRSAEncryption
57:a6:64:53:54:c8:7d:26:35:a8:11:1c:47:ef:82:31:8d:51:
ea:1b:58:99:ed:93:18:87:20:3f:91:63:bd:59:42:dc:bd:29:
71:fb:cf:8b:2d:a8:d1:90:c1:61:ea:d0:bc:42:0d:28:34:79:
72:d8:ed:92:58:ec:b2:2d:ac:ef:60:0d:41:2f:73:d4:ef:b2:
bc:dc:03:a8:79:32:64:f8:3e:8b:d2:fc:30:b1:37:bc:c9:1b:
37:19:5c:8f:92:f8:cd:b4:23:df:e7:35:1b:9c:47:bd:81:d1:
c1:be:77:14:9c:fd:d5:fa:ec:2b:15:9a:57:de:b1:dc:43:d6:
e1:d2:06:3d:c3:b5:2e:6d:66:53:16:02:3e:95:3d:5c:3a:77:
39:6b:b3:4b:13:de:10:88:13:1d:cc:9b:72:a5:09:3d:c2:e6:
0b:21:6a:c3:bc:f4:58:c9:52:79:a2:59:ad:4b:4b:9b:05:d5:
e1:9c:8d:03:0c:24:8d:12:7f:e7:a2:81:48:93:bb:75:e4:91:
b1:c7:37:da:e8:f6:93:1d:a1:74:d8:a8:b8:d7:b3:f5:ee:a4:
a4:3d:f5:72:64:27:c1:7c:aa:ba:b6:90:c3:ef:24:57:04:e6:
ca:bb:42:de:8d:24:7c:36:df:9b:d4:01:cf:4f:4b:8a:3e:f5:
ed:bf:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:52:14 2026 by rpki-client