
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e34382e302f32322d3232203d3e2034383337.roa
File: 3130332e3231342e34382e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: wpwMVqYTLbP68yao2fYoXKN2+eMRU0R4Vc9UHj1IA7A=
Subject key identifier: 36:69:20:3D:2E:37:AE:5E:9D:4C:B1:88:7F:C3:06:7B:83:0D:E7:B4
Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial: 67F3C22C185B2866E9E5935774502B8009D3950D
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e34382e302f32322d3232203d3e2034383337.roa
Signing time: Thu 25 Jun 2026 05:57:29 +0000
ROA not before: Thu 25 Jun 2026 05:52:29 +0000
ROA not after: Thu 24 Jun 2027 05:57:29 +0000
asID: 4837
IP address blocks: 103.214.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f3:c2:2c:18:5b:28:66:e9:e5:93:57:74:50:2b:80:09:d3:95:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Validity
Not Before: Jun 25 05:52:29 2026 GMT
Not After : Jun 24 05:57:29 2027 GMT
Subject: CN=3669203D2E37AE5E9D4CB1887FC3067B830DE7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:0b:9f:38:5f:24:e5:a4:24:83:91:9d:99:
c6:52:86:b9:e0:41:2d:63:04:4d:74:a9:76:d0:0c:
d7:14:7d:e2:71:a0:b9:44:f5:48:ea:7a:0c:73:90:
83:c6:7f:3b:52:a5:18:2e:6a:0f:0c:a1:5f:a5:9e:
9e:0b:90:65:b0:0d:b6:92:bb:79:fa:a1:99:d9:56:
a3:05:26:2f:ad:4b:09:6c:41:91:2f:88:67:2e:46:
ba:7b:e0:f2:75:61:9c:93:73:59:e9:e1:95:fb:8f:
78:fc:e9:b9:f7:4e:fb:f0:20:b1:13:04:e2:6e:e8:
6d:05:1f:fd:fd:1c:60:ba:56:87:b6:f2:c3:19:78:
8b:09:82:86:df:e6:fd:b5:71:0a:67:8b:dc:be:1b:
aa:e1:c5:2d:6c:6b:de:3e:4b:86:cb:08:f8:ea:51:
bc:13:5b:8c:72:f0:1c:7b:9d:d6:41:70:99:50:de:
d6:fa:28:aa:23:7c:bf:4c:4e:98:81:04:d0:2a:06:
e8:ed:ac:ed:8d:15:b5:b6:b7:43:ef:b3:3f:ae:a2:
e1:5f:4b:c7:12:26:cb:26:54:53:74:b5:79:69:01:
1e:97:fd:87:6a:df:1d:cd:83:99:b3:7b:5e:39:f5:
e7:4a:87:82:b5:12:a2:a8:4d:c9:e8:f1:8a:ec:46:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:20:3D:2E:37:AE:5E:9D:4C:B1:88:7F:C3:06:7B:83:0D:E7:B4
X509v3 Authority Key Identifier:
keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e34382e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.48.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:24:48:2d:90:9f:e6:8e:a7:a4:f8:06:ba:4a:57:9b:24:b0:
91:91:9b:b7:56:0f:c1:84:2d:df:40:b1:ba:11:4c:c3:a3:62:
1a:c5:34:08:be:9e:fe:ac:80:c7:43:99:7d:c6:42:0d:22:eb:
8f:67:89:62:48:80:94:e0:ef:f8:0e:f9:0c:fa:08:a1:ce:37:
d4:da:c3:61:9e:fe:a6:0e:f1:37:d1:28:86:f2:ca:01:b8:38:
b4:43:fd:b5:0d:35:4d:7e:e2:92:00:35:1e:da:d6:9f:e0:c6:
11:e4:b2:5f:a2:b6:22:b5:c1:a4:be:e1:fe:d3:97:cc:db:0c:
df:46:32:d1:27:b9:a4:3c:f1:b8:bb:2b:10:c7:52:dd:01:c0:
25:65:e4:65:7f:c3:67:f6:89:6e:82:f1:be:ae:4c:9a:46:85:
8f:d1:06:4e:43:47:f4:4a:55:83:05:0c:bb:53:03:99:04:c3:
9e:d5:b1:46:96:ec:87:5c:e0:94:91:79:36:5c:0d:ae:5d:e4:
ab:81:db:45:22:55:bb:6b:9f:ed:4b:e6:75:e5:2d:77:25:6e:
9c:4e:48:ff:11:dd:a8:45:b9:6a:95:3f:ca:7e:d9:69:d6:27:
02:8d:35:92:88:b0:53:29:c9:9c:af:e3:f5:48:a9:f4:1a:ed:
00:34:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:51 2026 by rpki-client