
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3130332e3233352e35362e302f32322d3232203d3e2030.roa
File: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=
Subject key identifier: 39:1A:DE:13:D5:71:6F:DF:32:C6:1A:56:56:89:CB:5D:C4:56:8F:C8
Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
Certificate serial: 46A4093000B3B66E8A75E3AC380F547001D6E5A2
Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3130332e3233352e35362e302f32322d3232203d3e2030.roa
Signing time: Thu 28 May 2026 07:57:00 +0000
ROA not before: Thu 28 May 2026 07:52:00 +0000
ROA not after: Thu 27 May 2027 07:57:00 +0000
asID: 0
IP address blocks: 103.235.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl
rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 05:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a4:09:30:00:b3:b6:6e:8a:75:e3:ac:38:0f:54:70:01:d6:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
Validity
Not Before: May 28 07:52:00 2026 GMT
Not After : May 27 07:57:00 2027 GMT
Subject: CN=391ADE13D5716FDF32C61A565689CB5DC4568FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:ed:a6:f3:c3:42:b5:25:a2:35:24:b8:0a:
70:14:de:17:1b:f3:1a:96:db:0a:06:71:5f:e1:d4:
7b:e4:f3:7d:ff:4c:67:e4:c7:d3:72:17:03:54:d3:
f2:6d:c7:57:b3:ac:43:15:98:15:72:49:1c:61:fa:
0e:d7:aa:e8:7e:df:fc:65:68:1a:5d:42:5d:94:37:
f3:37:e0:fa:da:14:fd:02:40:29:b3:07:b6:b7:d4:
d4:00:42:04:e6:e1:00:dd:26:e6:ce:25:ed:0f:09:
e8:d2:82:ab:98:93:28:2b:ea:fa:f1:fa:bc:07:b7:
56:25:71:ce:e0:10:be:be:8b:26:97:ea:d1:94:ac:
44:d9:6f:fb:f7:10:c4:53:fc:79:d5:3d:54:4e:62:
45:69:b2:cc:48:77:d2:e5:c9:53:70:70:54:bd:cf:
6a:bb:9a:06:e1:55:10:6d:0e:7d:3a:3c:80:d1:aa:
80:77:bd:18:d9:6c:33:04:b7:4c:66:01:1a:85:6e:
79:c1:49:6e:f1:a9:30:77:17:65:c1:77:e4:04:d5:
7f:a2:88:e1:66:10:49:bf:8b:37:f6:ab:35:5c:b9:
f8:a5:97:61:f7:c4:5c:43:e3:8b:8c:51:d4:95:36:
0f:a9:ad:06:b4:92:c6:03:31:6d:90:dd:56:36:69:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:DE:13:D5:71:6F:DF:32:C6:1A:56:56:89:CB:5D:C4:56:8F:C8
X509v3 Authority Key Identifier:
keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3130332e3233352e35362e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.56.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:79:3c:6f:87:63:8a:d1:98:4e:28:6e:cf:7c:72:b2:71:17:
57:6a:ec:5b:5c:d8:62:c0:be:37:f6:d1:3e:d7:b9:61:dd:be:
53:3a:c5:26:ce:53:29:15:28:0a:64:d7:fb:c9:a8:51:b6:8e:
85:b5:ac:2f:3a:63:99:40:04:fc:ad:d1:fe:0c:3f:64:8c:52:
bb:fc:9b:9f:af:05:72:84:bf:2b:44:df:40:a6:b2:1a:29:b9:
69:96:58:2b:91:67:40:40:57:1c:dd:4e:00:5b:94:dd:06:c4:
10:b2:4a:14:cf:20:64:5b:72:80:cd:8d:29:f3:d9:87:81:62:
f0:6b:6f:dc:19:b6:da:22:eb:1c:3c:18:27:9c:a7:1a:89:30:
c1:3f:6c:c8:98:26:c5:49:b5:5d:9d:c3:79:18:19:37:a0:54:
d8:36:c5:fb:b2:1a:e4:8a:4d:61:5b:98:20:0b:51:74:f4:a2:
59:d8:76:55:3c:56:c0:53:90:43:0f:0f:5b:5f:7b:e1:c2:2f:
60:c2:14:c0:7f:41:82:f0:45:77:c5:8d:38:96:d6:f1:f6:20:
31:21:49:36:f9:4b:c5:d4:80:07:0e:d5:fe:38:d9:5c:fc:e5:
e7:68:01:44:b9:aa:60:0e:ba:5a:5e:66:ae:60:7f:9c:37:89:
94:f0:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:53 2026 by rpki-client