
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33332e302f32342d3234203d3e2034383337.roa
File: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=
Subject key identifier: CF:E6:5D:C2:3E:5F:DB:48:5F:24:7E:A1:1E:58:10:2F:F3:39:07:E5
Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial: 088F46E568DB4C9FF12CA3EAE6EC2A0699E7E598
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33332e302f32342d3234203d3e2034383337.roa
Signing time: Fri 29 May 2026 06:36:47 +0000
ROA not before: Fri 29 May 2026 06:31:47 +0000
ROA not after: Fri 28 May 2027 06:36:47 +0000
asID: 4837
IP address blocks: 103.8.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8f:46:e5:68:db:4c:9f:f1:2c:a3:ea:e6:ec:2a:06:99:e7:e5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Validity
Not Before: May 29 06:31:47 2026 GMT
Not After : May 28 06:36:47 2027 GMT
Subject: CN=CFE65DC23E5FDB485F247EA11E58102FF33907E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:a6:01:80:c6:24:62:e2:21:20:95:b3:59:
cb:ec:7a:c2:bd:3b:90:60:1a:20:63:46:01:f7:f5:
1b:b7:2c:f1:66:ac:ca:17:11:7c:40:6a:ed:ab:91:
51:e8:fa:3f:ae:fa:c6:dd:13:6d:1d:84:fe:bc:71:
c9:98:77:d8:27:14:f9:4c:d3:9b:b5:a4:66:bd:30:
14:16:9b:91:0a:ea:f3:7d:34:ce:da:1f:61:54:38:
d0:80:7c:50:7f:68:ff:78:39:3e:bb:05:90:7b:37:
47:dc:de:cd:03:32:c6:8f:1b:15:cb:1c:b7:8b:cd:
58:01:e7:fd:e7:15:6f:89:e8:19:2c:99:1d:86:1d:
fa:da:50:59:94:8e:44:9f:ac:5d:65:1f:06:0e:fc:
2f:ff:dc:24:48:5f:e7:4f:2c:44:cd:fd:ef:de:b7:
fb:3d:1b:9c:9b:68:40:b7:50:a6:0e:af:33:68:39:
58:e0:f0:c5:6c:f6:44:53:57:2b:50:f4:18:6e:d5:
9a:73:90:6d:31:ec:f4:96:07:35:91:f4:43:75:07:
90:42:48:8a:e9:a4:84:00:81:38:e7:3e:49:03:41:
2c:58:7e:f8:40:64:5e:ee:bd:39:60:30:61:c1:07:
ec:9f:94:07:53:78:a4:da:d2:b6:9a:a4:32:23:2a:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:5D:C2:3E:5F:DB:48:5F:24:7E:A1:1E:58:10:2F:F3:39:07:E5
X509v3 Authority Key Identifier:
keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33332e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.33.0/24
Signature Algorithm: sha256WithRSAEncryption
04:38:ce:f4:34:9b:4e:3f:f2:5d:83:2f:5e:69:f9:f4:73:ae:
6f:15:9b:cc:f3:ac:ef:af:34:f1:49:63:34:a4:39:48:ce:72:
4c:9d:60:2b:8f:07:b7:65:2d:76:7a:af:69:18:4c:0b:81:8f:
11:c8:32:65:b7:b0:74:89:00:ae:24:dd:ef:4a:3d:19:93:56:
96:79:de:01:b7:7c:83:e8:7c:f2:7f:29:ed:ef:36:35:f8:38:
43:ab:0e:f1:f4:5a:73:68:9d:9c:ba:93:20:cb:44:bb:36:53:
9a:3d:25:8a:a4:60:28:a9:a6:08:1d:0f:0a:9b:a7:1f:aa:0a:
6e:48:47:13:1f:bd:5c:57:ff:57:aa:5d:df:e1:0b:54:ec:cb:
53:6c:e1:ef:87:86:ed:e0:bb:d8:68:c8:21:64:18:a6:37:6e:
8f:8c:44:06:4b:df:80:0e:dd:f1:e8:4f:f7:4a:2c:14:80:d4:
08:59:5f:75:aa:5c:cf:ae:7c:dd:5e:a0:38:0e:74:d8:6e:cc:
28:c6:06:1f:d0:88:63:d3:32:98:74:e8:e7:13:4d:14:d2:bc:
49:df:15:81:1e:d5:27:8f:e4:af:ce:95:a2:13:cb:49:17:5f:
3b:ad:44:7d:b3:64:ba:e2:39:f8:84:9d:20:9a:8a:b4:49:dd:
45:c9:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:25 2026 by rpki-client