
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa
File: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (raw, json)
Hash identifier: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=
Subject key identifier: D9:D1:AF:32:B2:FB:5D:53:EA:01:D2:D4:9B:2F:BD:C4:50:DF:7D:1F
Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4
Certificate serial: 5D99DA070C2E84C3792F6BA002A41FF7970A4F32
Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa
Signing time: Fri 29 May 2026 03:37:25 +0000
ROA not before: Fri 29 May 2026 03:32:25 +0000
ROA not after: Fri 28 May 2027 03:37:25 +0000
asID: 138195
IP address blocks: 103.138.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl
rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:99:da:07:0c:2e:84:c3:79:2f:6b:a0:02:a4:1f:f7:97:0a:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4
Validity
Not Before: May 29 03:32:25 2026 GMT
Not After : May 28 03:37:25 2027 GMT
Subject: CN=D9D1AF32B2FB5D53EA01D2D49B2FBDC450DF7D1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:12:cc:35:20:2d:e7:33:5d:7f:b3:fb:c1:
53:17:0a:88:94:c8:ff:65:35:ab:90:0c:d5:4c:1f:
fa:7e:64:fe:16:f6:9f:98:79:87:ab:c5:59:dc:3b:
cf:3c:1a:d6:8e:df:ad:9f:ca:23:14:f2:5f:bf:6b:
a2:19:e8:bc:6d:5b:88:d7:cb:6d:e5:9f:18:d3:63:
1d:0d:11:74:a6:91:e0:b4:bf:49:96:5c:57:8f:4e:
7e:b4:ff:d9:c6:92:90:ed:5a:f0:6f:a5:44:9a:62:
55:98:14:12:7b:9f:f1:e5:aa:45:96:70:08:5d:2d:
80:3f:c8:a3:28:24:e7:72:a2:cd:18:dd:50:dc:52:
a4:3e:f9:6f:23:4e:f4:b1:6a:bd:c8:75:a0:c9:62:
a3:9a:ca:04:df:b9:c0:89:c4:a5:1c:83:71:96:ac:
e3:40:63:a6:da:48:8c:24:bc:bc:e7:2d:3a:0f:ab:
48:02:62:94:70:fd:f1:c6:16:86:d5:23:b5:e3:a5:
04:a5:5e:29:2e:b1:13:f6:2d:a3:25:64:9b:39:6b:
b5:4b:e5:cc:9b:d0:bb:b9:be:7f:81:37:c8:c7:dd:
22:c4:39:46:c8:9d:a7:bc:9e:7f:73:b3:5c:77:e6:
47:a6:ba:42:96:1a:dc:12:0d:26:26:1d:da:d7:48:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D1:AF:32:B2:FB:5D:53:EA:01:D2:D4:9B:2F:BD:C4:50:DF:7D:1F
X509v3 Authority Key Identifier:
keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.13.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:bb:e0:17:8e:59:5d:c2:b9:da:9f:94:c7:19:e9:40:37:4c:
cc:ae:d4:dd:c8:87:75:ad:69:0b:8e:20:fd:3c:20:4a:04:9b:
8d:c6:60:57:af:b1:76:35:de:7d:98:99:37:f9:75:a4:7e:d3:
7e:a1:97:b6:ea:94:54:c8:25:d7:69:9f:63:a1:c6:01:d3:37:
f6:7f:c3:f9:66:b5:0b:bb:9a:0a:4e:9f:5e:e6:b4:2f:fc:2e:
ea:04:90:73:9d:14:44:b1:49:fa:33:2d:03:9b:75:cf:31:78:
36:05:45:c8:a5:26:22:f1:4d:83:d0:f5:9e:d5:08:c1:cd:39:
44:52:b5:81:fe:15:da:64:52:16:29:7e:b3:11:2e:85:d0:84:
0b:70:f1:0d:29:d0:0d:a1:96:be:50:0b:49:d0:e3:8c:dc:18:
ca:cd:d3:a3:b0:72:29:2b:f5:06:f8:7b:63:80:39:b6:09:80:
5e:21:97:02:bb:ea:ba:28:36:e6:3f:0f:92:19:bd:4f:37:ec:
bf:e8:df:5a:53:fd:a6:2c:d9:8c:bd:a5:9e:7b:65:82:4f:17:
f5:3f:a4:e4:75:2c:8a:fe:60:1c:ac:e4:f5:9b:37:87:7f:5c:
8d:86:63:db:29:bc:aa:1b:67:b5:b3:1f:c0:23:de:42:02:1f:
22:e7:2a:ce
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXZnaBwwuhMN5L2ugAqQf95cKTzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy
OTEyMTBBNDAeFw0yNjA1MjkwMzMyMjVaFw0yNzA1MjgwMzM3MjVaMDMxMTAvBgNV
BAMTKEQ5RDFBRjMyQjJGQjVENTNFQTAxRDJENDlCMkZCREM0NTBERjdEMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TxLMNSAt5zNdf7P7wVMXCoiU
yP9lNauQDNVMH/p+ZP4W9p+YeYerxVncO888GtaO362fyiMU8l+/a6IZ6LxtW4jX
y23lnxjTYx0NEXSmkeC0v0mWXFePTn60/9nGkpDtWvBvpUSaYlWYFBJ7n/HlqkWW
cAhdLYA/yKMoJOdyos0Y3VDcUqQ++W8jTvSxar3IdaDJYqOaygTfucCJxKUcg3GW
rONAY6baSIwkvLznLToPq0gCYpRw/fHGFobVI7XjpQSlXikusRP2LaMlZJs5a7VL
5cyb0Lu5vn+BN8jH3SLEOUbInae8nn9zs1x35kemukKWGtwSDSYmHdrXSIa/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU2dGvMrL7XVPqAdLUmy+9xFDffR8wHwYDVR0j
BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz
Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC8zMTMwMzMyZTMx
MzMzODJlMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODMxMzkzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeKDTANBgkqhkiG9w0BAQsFAAOCAQEAq7vgF45ZXcK52p+Uxxnp
QDdMzK7U3ciHda1pC44g/TwgSgSbjcZgV6+xdjXefZiZN/l1pH7TfqGXtuqUVMgl
12mfY6HGAdM39n/D+Wa1C7uaCk6fXua0L/wu6gSQc50URLFJ+jMtA5t1zzF4NgVF
yKUmIvFNg9D1ntUIwc05RFK1gf4V2mRSFil+sxEuhdCEC3DxDSnQDaGWvlALSdDj
jNwYys3To7ByKSv1Bvh7Y4A5tgmAXiGXArvquig25j8Pkhm9Tzfsv+jfWlP9pizZ
jL2lnntlgk8X9T+k5HUsiv5gHKzk9Zs3h39cjYZj2ym8qhtntbMfwCPeQgIfIucq
zg==
-----END CERTIFICATE-----
Generated at Fri May 29 23:55:22 2026 by rpki-client