
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33352e302f32342d3234203d3e2034383337.roa
File: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=
Subject key identifier: A2:11:C7:AC:0A:28:7A:23:F4:4F:73:95:52:E6:40:F6:E0:AF:1F:E1
Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial: 3AAE71C769633E5C6E257AD652B11943B35AB695
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33352e302f32342d3234203d3e2034383337.roa
Signing time: Fri 29 May 2026 06:36:47 +0000
ROA not before: Fri 29 May 2026 06:31:47 +0000
ROA not after: Fri 28 May 2027 06:36:47 +0000
asID: 4837
IP address blocks: 103.8.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ae:71:c7:69:63:3e:5c:6e:25:7a:d6:52:b1:19:43:b3:5a:b6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Validity
Not Before: May 29 06:31:47 2026 GMT
Not After : May 28 06:36:47 2027 GMT
Subject: CN=A211C7AC0A287A23F44F739552E640F6E0AF1FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:6f:2a:b3:3f:9a:26:df:4c:d9:c3:f7:7e:
30:23:9a:09:a2:7c:36:c7:b0:d6:cf:16:4f:6e:90:
de:73:42:76:dd:bf:75:c0:43:39:44:65:08:6e:74:
b8:ae:8c:75:6c:dc:51:5e:cc:84:7c:06:a3:b9:4f:
dc:09:a4:5d:c1:d8:13:7e:ff:ab:45:2c:94:ff:f5:
f6:f1:6a:e2:61:a1:8a:35:e4:9e:4a:71:7d:be:3f:
46:07:0f:5c:ba:4e:62:f0:ad:58:a4:99:6a:e8:c0:
17:0a:a9:94:7b:17:93:a4:52:ec:47:ca:d3:e5:1b:
c1:61:36:57:1e:f4:ce:ff:fd:3f:36:01:8c:d1:67:
3d:61:07:8f:ed:00:cb:c4:16:b9:48:ab:98:e5:73:
3d:2a:8a:b5:6c:d9:7f:08:81:49:88:ab:90:e5:36:
9a:cc:1a:9e:2e:cc:15:a7:a2:5d:a8:11:bf:31:9e:
60:8f:44:f6:4e:33:a5:a5:c3:b7:92:de:2a:c9:00:
11:a7:29:b4:3b:3e:06:b1:31:9c:e5:80:49:1f:ac:
0d:78:34:5e:87:00:27:69:fb:b6:98:5b:2c:df:da:
60:10:85:bf:d0:7b:a1:e9:d9:af:6f:99:4a:85:de:
44:f8:7e:cf:9c:3a:ac:84:e1:bd:55:0d:4b:7a:cc:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:C7:AC:0A:28:7A:23:F4:4F:73:95:52:E6:40:F6:E0:AF:1F:E1
X509v3 Authority Key Identifier:
keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33352e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:46:a2:c0:7f:59:83:f8:e6:ca:a0:45:9e:5e:a9:0f:b7:0f:
4c:60:61:14:d2:72:a4:f5:a6:fb:99:73:d9:58:7f:dd:cc:1c:
c6:e7:e4:a1:a9:43:c3:0b:45:52:6a:8d:11:c7:88:0c:9f:ec:
e5:51:c3:dd:53:cf:dc:29:36:ba:03:04:a3:39:1d:73:3c:92:
cd:b5:ca:2e:94:87:23:9c:ee:1f:66:43:ff:6c:51:1e:58:e5:
77:16:66:bd:9f:de:8b:ff:cb:6b:42:a8:48:2f:98:1c:e7:b0:
c2:a3:e3:12:72:ba:29:59:5b:b2:1f:9c:97:b2:2f:f3:3c:69:
a7:aa:58:5a:a9:ab:fd:f6:0c:c5:dc:35:3e:12:a8:00:bf:f7:
4f:35:44:53:9c:08:97:a3:bd:7d:78:af:27:e4:de:24:37:96:
92:e6:60:05:bb:ab:46:a3:62:8f:92:f6:3a:3f:55:3a:6f:4a:
9a:fb:8e:31:3a:39:cb:81:e5:8b:40:2e:bb:79:c5:9a:53:ce:
a4:40:66:15:a9:30:7f:09:b7:3c:9b:61:8f:39:5e:cd:c6:1a:
f4:ff:81:1c:fe:ab:cb:fa:ac:7c:76:6a:e8:db:99:cf:6b:3e:
5a:0b:17:36:67:e7:89:ec:f2:97:c1:95:94:09:70:28:46:b6:
bf:88:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:34 2026 by rpki-client