
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e35362e302f32322d3232203d3e203538353139.roa
File: 3130332e3232302e35362e302f32322d3232203d3e203538353139.roa (raw, json)
Hash identifier: SbUX1LdpKn0uCIj+EVZcsAfOwjyeJW7igJZMkmidqas=
Subject key identifier: DB:99:AE:72:16:D9:CF:FF:C8:E9:F3:C8:2B:F1:D5:4A:32:1D:C1:BA
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 1C349D6D25FC383D973AB1C66A6EA0E343627D08
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e35362e302f32322d3232203d3e203538353139.roa
Signing time: Thu 02 Jul 2026 03:38:03 +0000
ROA not before: Thu 02 Jul 2026 03:33:03 +0000
ROA not after: Thu 01 Jul 2027 03:38:03 +0000
asID: 58519
IP address blocks: 103.220.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:34:9d:6d:25:fc:38:3d:97:3a:b1:c6:6a:6e:a0:e3:43:62:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jul 2 03:33:03 2026 GMT
Not After : Jul 1 03:38:03 2027 GMT
Subject: CN=DB99AE7216D9CFFFC8E9F3C82BF1D54A321DC1BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:97:6b:9e:b2:0a:f9:15:b8:45:ea:ab:fa:
cf:93:b2:b4:09:c7:84:5e:3a:09:e7:f8:0a:5e:ca:
2e:ae:71:87:db:20:be:b7:ed:c9:89:22:ef:d6:a4:
a9:3f:dd:fd:bb:ee:5b:24:92:3b:a9:03:ba:c0:d3:
c5:88:be:35:2b:72:96:b9:04:e3:30:d3:71:27:35:
27:ac:ee:54:95:93:ba:83:e9:c2:d8:b8:66:2e:b3:
20:66:cf:eb:67:eb:e3:b9:93:9e:5c:f0:cc:8c:4e:
b8:32:9b:e4:cf:e0:ef:e9:52:57:0c:0f:b9:e5:9d:
ca:b4:7f:c9:5d:fb:bd:18:4c:b4:63:bd:2a:13:74:
55:1a:7b:45:0d:b9:5b:c0:e2:02:b2:db:05:0a:d9:
50:b1:e7:6d:96:8a:12:0f:ae:aa:af:ed:38:15:b7:
9a:3f:fc:5f:20:44:d9:69:0a:38:ae:15:71:4a:18:
3e:4a:58:4d:76:23:c2:cd:53:f1:27:87:04:ae:71:
0f:f9:74:55:6b:fc:6c:c9:b8:7b:ea:51:4f:0f:70:
c5:4e:7e:d7:b8:fd:68:7e:9e:c7:74:a3:17:22:6a:
7b:fe:86:75:98:a8:f4:b3:ed:8d:56:d1:cd:48:b1:
bf:4f:6c:61:b8:1b:23:3b:42:4e:34:f0:9c:bf:47:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:99:AE:72:16:D9:CF:FF:C8:E9:F3:C8:2B:F1:D5:4A:32:1D:C1:BA
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e35362e302f32322d3232203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ab:3a:ef:f0:fc:6c:32:55:39:bb:f6:d5:2d:cd:b7:61:72:
ef:72:70:e4:b2:31:e9:87:b4:89:fd:36:56:4e:cd:6a:bb:18:
97:f7:db:9f:d7:b5:69:e8:21:9a:83:68:a3:38:e8:13:9b:75:
30:a2:a3:9c:bc:24:10:89:82:bf:8f:de:32:de:16:14:3a:a3:
c3:ee:57:3c:d4:a0:a2:c2:25:94:f0:cb:41:9a:b0:b5:e7:82:
68:7b:2c:15:e7:62:46:2a:1c:ef:32:59:49:4b:f9:78:5e:5e:
1d:d1:37:2f:bc:86:68:56:e2:35:18:20:fd:f5:58:d9:c6:14:
67:ef:14:1b:84:65:39:3f:c9:1b:57:83:b5:a0:42:bc:47:aa:
9e:08:ae:4e:f1:2c:8a:d9:d7:49:af:ed:f7:fd:92:5a:d2:ff:
0d:5a:6e:0f:92:47:ac:8b:fe:f3:b2:f4:7f:34:40:7f:8b:ee:
b6:28:7b:b3:4a:7c:ca:1d:35:2c:8c:25:56:63:de:ee:2b:4b:
e0:4e:c5:fe:b0:06:76:5d:f9:01:0d:7d:49:a1:d3:d0:4c:54:
9a:12:65:1a:37:67:cd:91:66:5e:d3:6c:8e:8b:c9:d2:a6:48:
eb:e6:3e:ca:45:53:93:5a:fa:ec:24:bf:83:1a:8e:0e:d0:e0:
db:09:9f:de
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:10 2026 by rpki-client