
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3135322e32382e302f32332d3234203d3e2034383437.roa
File: 3130332e3135322e32382e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier: m0yBKFLgQHJWGlzZbLcdAwWCXZdiOiqPQ/l/zQQrh18=
Subject key identifier: 8F:05:D8:69:2E:38:6B:02:DF:98:99:B6:BB:84:94:93:0A:2E:B5:3D
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 42D21E0EBAE3B58371BBFE189D0EAB1630FD89C6
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3135322e32382e302f32332d3234203d3e2034383437.roa
Signing time: Fri 29 May 2026 13:34:05 +0000
ROA not before: Fri 29 May 2026 13:29:05 +0000
ROA not after: Fri 28 May 2027 13:34:05 +0000
asID: 4847
IP address blocks: 103.152.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d2:1e:0e:ba:e3:b5:83:71:bb:fe:18:9d:0e:ab:16:30:fd:89:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: May 29 13:29:05 2026 GMT
Not After : May 28 13:34:05 2027 GMT
Subject: CN=8F05D8692E386B02DF9899B6BB8494930A2EB53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:c7:ac:f7:cf:fe:d3:3f:40:0c:a4:6e:10:
5f:64:a8:bf:84:50:9e:b4:75:e7:e9:3a:41:8a:72:
e2:0d:e3:80:59:ff:37:a0:6d:7e:90:c2:d8:ca:42:
1d:0b:14:de:31:0a:d3:a2:3e:36:9b:7b:12:1f:72:
12:8d:63:3a:4a:e5:20:4e:70:ab:4d:57:84:20:65:
c5:78:3f:9d:f7:2c:e5:07:7c:b4:c0:83:0f:46:07:
02:0f:38:ce:ca:0e:36:2b:d2:50:b4:8b:ab:c7:0d:
89:48:f5:de:b0:ad:31:69:00:7d:9a:16:cb:a0:3a:
aa:d2:8d:6b:e4:12:92:7f:c0:cd:dd:ce:98:ed:3f:
8a:0c:2f:8e:9c:87:b1:3a:c2:80:76:a6:f3:a2:28:
51:45:7f:f9:46:5c:9a:85:43:64:a8:eb:01:12:0a:
ef:5a:fa:de:b4:3a:f6:e8:95:3c:ef:f3:28:0c:3e:
d1:85:92:10:7f:95:fc:43:35:ea:50:6b:f4:f4:66:
24:1d:f7:ec:1d:03:25:06:7d:21:56:c6:2b:2f:7e:
b9:20:8b:db:db:1a:88:6b:8e:50:b1:b8:41:10:50:
f7:a3:37:ce:2a:51:1e:0e:a3:62:1c:8f:05:8d:41:
1a:88:f6:74:28:44:4e:eb:27:26:4b:19:bd:04:9c:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:D8:69:2E:38:6B:02:DF:98:99:B6:BB:84:94:93:0A:2E:B5:3D
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3135322e32382e302f32332d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.28.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:3b:32:b7:ea:42:59:41:3f:a9:bf:db:ca:60:97:5e:7f:6c:
00:07:06:1a:bb:3c:2a:ff:5e:cb:23:0e:f3:79:d0:05:83:16:
90:7a:95:44:5f:4d:59:35:36:5c:c2:31:e7:c5:86:4d:40:55:
a2:24:10:5e:94:a6:a0:ee:e4:c5:92:c1:d2:52:4e:f4:fd:17:
61:fb:20:b9:20:2b:8f:8e:e0:52:a1:d7:61:e2:52:ec:79:80:
a3:0b:e4:f1:0d:8c:31:c6:bc:ac:b1:05:7a:42:5d:b6:d6:1a:
68:32:8f:62:1a:60:96:6b:0b:fd:1d:2c:74:0d:35:fa:3d:06:
c9:4d:61:88:bc:54:2e:11:55:97:bd:3e:e6:9c:53:73:f4:45:
b8:bf:cc:f5:96:88:73:85:1a:88:ad:9e:a9:6f:9a:a7:40:fa:
40:1e:98:13:0c:47:d6:a5:5f:7b:ad:b1:63:04:7c:02:56:c0:
21:09:da:dd:e3:de:28:b8:7a:d1:bb:2e:01:e8:70:ba:77:c3:
f9:f5:ac:47:60:b6:81:8b:7b:33:07:69:b4:e4:37:89:09:cf:
f5:1a:2f:be:62:f7:bb:5b:9f:fd:e5:43:8a:cf:c0:96:d1:b4:
6b:8e:63:4c:fd:ad:c4:5f:6e:3d:a1:57:81:1b:fe:d6:f5:fa:
10:f3:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:55 2026 by rpki-client