
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa
File: 3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (raw, json)
Hash identifier: f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=
Subject key identifier: 8C:98:9F:B4:18:D6:95:B5:94:C4:59:D0:81:6F:E8:0F:B7:29:DF:DE
Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
Certificate serial: 07128544675469969B4E3AEB59496D75A98DAB52
Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa
Signing time: Tue 26 May 2026 10:20:45 +0000
ROA not before: Tue 26 May 2026 10:15:45 +0000
ROA not after: Tue 25 May 2027 10:20:45 +0000
asID: 137746
IP address blocks: 103.135.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl
rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:12:85:44:67:54:69:96:9b:4e:3a:eb:59:49:6d:75:a9:8d:ab:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
Validity
Not Before: May 26 10:15:45 2026 GMT
Not After : May 25 10:20:45 2027 GMT
Subject: CN=8C989FB418D695B594C459D0816FE80FB729DFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:78:04:89:5b:c7:a6:58:ee:55:92:e7:04:
e3:57:68:49:f7:e0:18:06:9d:e6:3a:b8:93:c2:82:
cb:7d:d1:34:f3:10:92:b5:62:c5:f6:fd:b4:26:ee:
cf:e4:42:7f:25:46:8c:bd:79:4b:c5:fb:af:bd:56:
bb:3a:44:4d:5a:63:76:a2:fb:67:0f:33:0b:61:27:
30:c6:7f:66:af:41:e8:bc:e2:ac:8f:9a:eb:cb:73:
43:d9:f9:8f:6d:f3:41:1e:8b:da:bc:e2:db:1f:de:
94:07:0a:a6:39:b3:47:d4:1d:94:62:47:02:7d:b7:
93:d1:b8:a8:4b:78:3d:10:04:8f:18:79:4a:c0:c4:
f4:56:be:70:00:8d:25:85:78:60:5e:12:ad:28:5b:
bd:ad:85:54:8f:61:f4:ce:df:14:7f:d2:9c:4e:b0:
3d:7b:13:b3:0c:96:c6:d7:0f:59:91:09:86:fd:a9:
72:d3:09:33:6d:97:0b:df:14:c7:e3:00:28:e1:e1:
34:2d:b8:50:de:63:6b:71:06:f3:43:fd:69:b1:51:
41:2b:40:82:67:cb:50:25:22:13:a2:d2:12:cd:db:
10:a7:85:c4:5a:b2:d8:eb:38:7f:a1:8e:83:d1:4d:
46:68:d1:a2:18:7b:f7:9e:bf:36:0c:a3:a9:13:99:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:98:9F:B4:18:D6:95:B5:94:C4:59:D0:81:6F:E8:0F:B7:29:DF:DE
X509v3 Authority Key Identifier:
keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1e:0e:16:02:29:d9:b8:d2:f0:d6:c8:ef:5f:98:af:e2:dc:
9a:54:f7:59:1b:c7:fd:60:88:21:83:d5:4d:23:da:65:55:bb:
29:83:d2:b1:38:98:ab:d0:a5:73:32:76:68:58:12:6f:24:f8:
23:a4:e5:6c:04:b6:e8:fc:b9:93:fc:b8:52:20:00:43:d4:d7:
3d:be:b2:28:06:38:24:73:af:b8:1f:01:01:95:23:de:8e:8a:
51:4e:9e:d6:f2:b0:d3:8a:85:68:08:87:4a:16:44:c0:29:c0:
7d:d7:15:87:de:8a:01:00:0f:f1:37:56:01:1c:fa:8c:91:ec:
1c:f0:f8:f8:a3:bf:db:a9:3a:fc:ee:5f:ca:57:c6:6d:d3:05:
16:c0:31:0a:bc:7a:5d:dd:ee:9b:1d:be:ec:e9:e0:7d:05:ba:
71:43:91:ba:0d:a7:96:0a:84:e0:f1:f8:7c:be:3a:78:d7:5a:
cb:21:44:99:a9:f7:0e:82:7e:6c:c9:54:49:ac:31:b3:19:ab:
ec:b1:c1:7e:15:0e:74:f8:8d:dc:cb:6b:b1:38:f1:21:65:11:
a0:35:e4:54:39:54:99:0a:75:04:64:18:2e:b4:00:a1:fb:67:
3c:84:c6:58:66:ad:61:c9:e2:8f:bf:d4:fd:69:3c:d7:80:f7:
d6:aa:28:ef
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUBxKFRGdUaZabTjrrWUltdamNq1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4
RjIxN0NGNzAeFw0yNjA1MjYxMDE1NDVaFw0yNzA1MjUxMDIwNDVaMDMxMTAvBgNV
BAMTKDhDOTg5RkI0MThENjk1QjU5NEM0NTlEMDgxNkZFODBGQjcyOURGREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjXgEiVvHpljuVZLnBONXaEn3
4BgGneY6uJPCgst90TTzEJK1YsX2/bQm7s/kQn8lRoy9eUvF+6+9Vrs6RE1aY3ai
+2cPMwthJzDGf2avQei84qyPmuvLc0PZ+Y9t80Eei9q84tsf3pQHCqY5s0fUHZRi
RwJ9t5PRuKhLeD0QBI8YeUrAxPRWvnAAjSWFeGBeEq0oW72thVSPYfTO3xR/0pxO
sD17E7MMlsbXD1mRCYb9qXLTCTNtlwvfFMfjACjh4TQtuFDeY2txBvND/WmxUUEr
QIJny1AlIhOi0hLN2xCnhcRastjrOH+hjoPRTUZo0aIYe/eevzYMo6kTmUM1AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUjJiftBjWlbWUxFnQgW/oD7cp394wHwYDVR0j
BBgwFoAUpofqMP2elbC7Rm2t8OJ6+Y8hfPcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTU1MjQzMzIyMzQzNDI1OS8wL0E2ODdFQTMwRkQ5RTk1QjBCQjQ2NkRBREYwRTI3
QUY5OEYyMTdDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTExNTUyNDMzMjIzNDM0MjU5LzAvMzEzMDMzMmUz
MTMzMzUyZTMxMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzQz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeHwzANBgkqhkiG9w0BAQsFAAOCAQEADh4OFgIp2bjS8NbI
71+Yr+LcmlT3WRvH/WCIIYPVTSPaZVW7KYPSsTiYq9ClczJ2aFgSbyT4I6TlbAS2
6Py5k/y4UiAAQ9TXPb6yKAY4JHOvuB8BAZUj3o6KUU6e1vKw04qFaAiHShZEwCnA
fdcVh96KAQAP8TdWARz6jJHsHPD4+KO/26k6/O5fylfGbdMFFsAxCrx6Xd3umx2+
7OngfQW6cUORug2nlgqE4PH4fL46eNdayyFEman3DoJ+bMlUSawxsxmr7LHBfhUO
dPiN3MtrsTjxIWURoDXkVDlUmQp1BGQYLrQAoftnPITGWGatYcnij7/U/Wk814D3
1qoo7w==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:55 2026 by rpki-client