
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35342e302f32342d3234203d3e2034383038.roa
File: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=
Subject key identifier: A2:A0:4D:3F:B4:0A:C8:1E:95:6D:BD:41:A7:A5:2C:E1:30:EE:82:7B
Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
Certificate serial: 03781685A80F00D5B419C7C557357E6490B76BBD
Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35342e302f32342d3234203d3e2034383038.roa
Signing time: Thu 21 May 2026 07:57:43 +0000
ROA not before: Thu 21 May 2026 07:52:43 +0000
ROA not after: Thu 20 May 2027 07:57:43 +0000
asID: 4808
IP address blocks: 103.118.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl
rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:78:16:85:a8:0f:00:d5:b4:19:c7:c5:57:35:7e:64:90:b7:6b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
Validity
Not Before: May 21 07:52:43 2026 GMT
Not After : May 20 07:57:43 2027 GMT
Subject: CN=A2A04D3FB40AC81E956DBD41A7A52CE130EE827B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:58:e8:0f:f5:39:61:db:85:34:a5:7b:4b:
d5:2d:61:0f:32:45:02:07:20:dc:61:64:3c:33:ab:
55:64:c6:45:81:ca:11:c1:70:40:e2:5a:45:e2:94:
03:00:10:55:0e:42:68:39:54:cd:45:93:54:26:11:
9b:6d:7c:36:04:fc:bd:d8:f9:75:47:ad:c5:ac:5f:
77:1f:7f:a3:ce:ee:a6:ed:95:00:e8:72:29:3f:a9:
fe:2d:cb:65:cb:35:4f:c9:23:43:c9:6b:e6:83:52:
0c:0d:fb:3e:ae:df:46:47:5e:46:6d:c3:8d:f6:53:
7e:20:76:83:7c:83:0c:54:f9:46:53:81:8a:8c:ae:
33:fe:de:b6:9a:40:c5:e0:e2:5b:09:45:df:a7:22:
f2:61:f1:21:1b:53:79:3f:4b:eb:5d:57:a0:c0:7c:
48:04:88:9c:d7:6d:06:10:78:52:2a:67:01:bc:91:
70:fc:64:b0:53:bf:46:6a:34:cf:7c:d0:67:f9:cf:
53:0d:af:bd:1e:fc:d5:4d:77:1d:0c:6d:b5:2b:55:
64:b0:6e:19:3c:11:22:d2:e4:3f:4b:95:3b:ad:a8:
a5:bc:2a:8f:fa:21:2e:13:1e:86:ff:96:fd:71:3d:
2b:f6:58:4b:03:9c:59:df:8a:5a:11:98:58:79:9c:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A0:4D:3F:B4:0A:C8:1E:95:6D:BD:41:A7:A5:2C:E1:30:EE:82:7B
X509v3 Authority Key Identifier:
keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35342e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.54.0/24
Signature Algorithm: sha256WithRSAEncryption
06:48:7d:00:c6:8a:58:2a:eb:f1:d9:64:ed:58:8a:24:3c:2f:
eb:50:80:5a:52:33:a4:ce:43:e7:02:d2:59:3e:c7:70:d1:a5:
55:31:5f:c8:ec:17:76:50:58:f3:67:76:08:71:22:7e:98:21:
63:74:21:e2:de:58:54:4e:ad:bc:49:ad:38:bf:68:57:c8:90:
7b:95:90:1b:0b:f1:40:56:41:70:5c:69:8f:48:db:7c:ea:6a:
ea:0e:e6:03:9f:9d:4d:e3:72:32:36:3d:47:ed:3b:e1:03:f2:
2f:c4:73:a8:6a:e1:b4:a5:14:0d:ab:c3:ce:c2:7b:6e:6a:3c:
f4:77:24:0f:cc:6a:ba:1e:c1:1e:ee:44:5d:73:07:14:54:d3:
d8:d8:12:5c:5b:7e:6a:b2:cb:20:76:53:fb:97:75:eb:92:07:
8e:e8:56:62:78:0a:91:28:5b:4a:93:e1:7c:6e:3a:4f:4e:e5:
b9:eb:a3:37:a9:cb:32:a4:b9:e5:55:33:76:7c:ef:5e:62:f6:
01:c8:0d:d4:59:5b:28:e5:8d:64:b8:94:97:43:dd:17:4f:72:
8e:29:f6:87:75:9f:07:45:80:6d:b8:a3:8f:7b:7e:12:05:dd:
98:b6:57:10:dc:87:5b:5d:a0:5f:5f:cf:a0:62:c1:fc:77:fc:
24:fa:ea:a4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUA3gWhagPANW0GcfFVzV+ZJC3a70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw
RUNEQ0RGODAeFw0yNjA1MjEwNzUyNDNaFw0yNzA1MjAwNzU3NDNaMDMxMTAvBgNV
BAMTKEEyQTA0RDNGQjQwQUM4MUU5NTZEQkQ0MUE3QTUyQ0UxMzBFRTgyN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcFjoD/U5YduFNKV7S9UtYQ8y
RQIHINxhZDwzq1VkxkWByhHBcEDiWkXilAMAEFUOQmg5VM1Fk1QmEZttfDYE/L3Y
+XVHrcWsX3cff6PO7qbtlQDocik/qf4ty2XLNU/JI0PJa+aDUgwN+z6u30ZHXkZt
w432U34gdoN8gwxU+UZTgYqMrjP+3raaQMXg4lsJRd+nIvJh8SEbU3k/S+tdV6DA
fEgEiJzXbQYQeFIqZwG8kXD8ZLBTv0ZqNM980Gf5z1MNr70e/NVNdx0MbbUrVWSw
bhk8ESLS5D9LlTutqKW8Ko/6IS4THob/lv1xPSv2WEsDnFnfiloRmFh5nJyxAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUoqBNP7QKyB6Vbb1Bp6Us4TDugnswHwYDVR0j
BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy
RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4NTk2MTA5MTgzMjg3MzE1LzAvMzEzMDMzMmUzMTMx
MzgyZTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGd2NjANBgkqhkiG9w0BAQsFAAOCAQEABkh9AMaKWCrr8dlk7ViKJDwv61CA
WlIzpM5D5wLSWT7HcNGlVTFfyOwXdlBY82d2CHEifpghY3Qh4t5YVE6tvEmtOL9o
V8iQe5WQGwvxQFZBcFxpj0jbfOpq6g7mA5+dTeNyMjY9R+074QPyL8RzqGrhtKUU
DavDzsJ7bmo89HckD8xquh7BHu5EXXMHFFTT2NgSXFt+arLLIHZT+5d165IHjuhW
YngKkShbSpPhfG46T07lueujN6nLMqS55VUzdnzvXmL2AcgN1FlbKOWNZLiUl0Pd
F09yjin2h3WfB0WAbbijj3t+EgXdmLZXENyHW12gX1/PoGLB/Hf8JPrqpA==
-----END CERTIFICATE-----
Generated at Fri May 29 23:49:59 2026 by rpki-client