
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/3130332e3132332e342e302f32322d3232203d3e2034383337.roa
File: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=
Subject key identifier: 06:32:74:C8:B5:F7:67:B7:0E:7F:60:42:80:1E:D7:F0:2A:90:60:85
Certificate issuer: /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Certificate serial: 0FE79657CE4AFAAE1CF53FFB23C3A3F26E76357E
Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/3130332e3132332e342e302f32322d3232203d3e2034383337.roa
Signing time: Wed 03 Jun 2026 04:57:18 +0000
ROA not before: Wed 03 Jun 2026 04:52:18 +0000
ROA not after: Wed 02 Jun 2027 04:57:18 +0000
asID: 4837
IP address blocks: 103.123.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e7:96:57:ce:4a:fa:ae:1c:f5:3f:fb:23:c3:a3:f2:6e:76:35:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Validity
Not Before: Jun 3 04:52:18 2026 GMT
Not After : Jun 2 04:57:18 2027 GMT
Subject: CN=063274C8B5F767B70E7F6042801ED7F02A906085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:9d:be:39:8b:db:58:ba:f8:04:ae:53:8e:
51:96:2a:c1:39:1e:b1:8c:cc:97:df:2b:fd:19:c4:
9d:11:8e:65:ff:e2:d1:b4:61:d7:6b:34:59:60:1b:
f2:1e:cb:12:aa:4b:27:c3:12:eb:1f:1e:4b:3d:1c:
16:71:c2:b4:4b:c2:cf:3d:fc:48:3a:0b:d9:2c:03:
72:1c:e0:f9:46:c4:3d:52:e9:35:f1:73:e7:58:9d:
41:30:21:8d:29:d7:23:3f:ec:fe:65:3f:ce:8c:e7:
7f:a1:5a:ae:22:c7:15:05:a2:b1:b6:97:0e:e5:a6:
13:93:d2:89:85:cc:42:de:0e:4b:db:98:77:c7:5a:
a3:3a:4c:f9:f3:4d:cc:1b:66:c9:09:d6:bd:14:9b:
98:95:9b:bd:36:18:ef:18:29:2f:8e:3d:f9:f3:77:
35:c8:58:b2:34:ee:ec:15:c5:22:93:29:c0:bc:f0:
ed:42:d7:f0:ac:f2:75:9a:01:a4:d9:22:c3:28:ad:
98:74:02:de:40:52:bd:2e:43:24:d9:68:bf:24:ad:
ed:43:fe:73:36:00:31:c0:ed:a0:7a:df:c9:18:15:
ba:79:0d:bb:b8:ba:33:c4:7e:aa:11:23:c0:a0:6a:
de:de:5f:43:90:4d:30:c6:d2:f0:7b:ae:ed:4e:d6:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:32:74:C8:B5:F7:67:B7:0E:7F:60:42:80:1E:D7:F0:2A:90:60:85
X509v3 Authority Key Identifier:
keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/3130332e3132332e342e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.4.0/22
Signature Algorithm: sha256WithRSAEncryption
26:53:f0:2c:6f:ab:3a:6d:bb:db:b7:1d:c5:e1:fc:80:83:a2:
f7:47:2a:bc:63:ff:fa:a4:c8:13:ee:ce:1a:51:e2:a9:a5:ef:
c2:c0:e9:c7:1b:5b:75:74:9a:1b:15:a0:92:ee:6a:0c:10:be:
1d:9c:aa:51:d6:ae:98:ac:f0:b8:a9:45:b6:61:a1:b3:28:37:
b0:91:dd:da:74:bb:24:f8:1e:48:1f:74:96:b5:60:12:50:a5:
47:7d:2c:40:92:b1:e7:df:04:b5:3d:9e:a9:da:7e:10:10:48:
bb:f3:8c:76:30:57:8a:7e:c8:4e:c5:92:ff:34:e1:3a:7b:fa:
0e:24:e8:e0:e1:54:6c:bb:c2:f7:d8:92:8a:24:25:68:3b:e7:
8b:b5:5e:70:3b:39:21:c0:82:e9:20:ee:a4:e0:0c:bd:ec:fd:
93:2c:1d:35:6b:44:73:d7:88:6e:4b:1c:db:84:11:3b:a5:16:
53:65:aa:84:c2:22:8b:47:97:cb:0b:78:22:39:d2:4b:35:d2:
b9:3b:07:7b:e5:8e:d1:1a:b5:ac:25:de:c1:82:d3:fd:e8:cc:
88:79:75:f9:6d:57:18:c2:74:4f:2b:67:d7:a8:cc:c1:c0:cd:
6f:9d:e5:37:43:bb:6a:31:74:88:90:73:0e:24:58:19:32:af:
dd:54:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client