
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3139322e3133322e302f32322d3234203d3e2034383038.roa
File: 3130332e3139322e3133322e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier: +Uw2E0aDU4D7/DiopvNUPpVC941o31rnPHZMKmRNEnI=
Subject key identifier: 03:AF:42:05:CB:B6:F7:3B:FA:AC:A3:28:8B:41:10:DB:3A:DD:44:93
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 1D433F7001A6CC8B32DB45C83AE74BB674C73404
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3139322e3133322e302f32322d3234203d3e2034383038.roa
Signing time: Fri 29 May 2026 13:28:38 +0000
ROA not before: Fri 29 May 2026 13:23:38 +0000
ROA not after: Fri 28 May 2027 13:28:38 +0000
asID: 4808
IP address blocks: 103.192.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:43:3f:70:01:a6:cc:8b:32:db:45:c8:3a:e7:4b:b6:74:c7:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: May 29 13:23:38 2026 GMT
Not After : May 28 13:28:38 2027 GMT
Subject: CN=03AF4205CBB6F73BFAACA3288B4110DB3ADD4493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:07:00:49:99:b1:6f:6f:e2:4c:f3:7b:9a:
82:49:e8:19:66:83:d4:79:22:77:17:66:35:38:3b:
4b:ff:15:e5:f5:b7:ae:3c:0e:dc:dc:48:5a:bc:e6:
20:c0:a1:8a:5d:b2:37:50:15:03:7b:7c:8a:99:6c:
6a:0d:76:2d:ea:52:32:85:d7:23:16:30:f0:1e:10:
4c:cb:01:c8:01:98:8e:00:88:26:36:1c:4a:46:8c:
6a:60:4c:42:bc:39:51:9a:8f:ce:3c:bf:a6:9e:9a:
89:0c:bf:3b:11:34:54:58:d3:a7:fe:0d:78:30:3d:
b6:bc:de:08:80:ae:d3:de:6a:2b:11:99:ff:c2:ae:
1d:a6:99:96:24:77:da:00:33:cc:92:aa:dd:75:be:
44:6b:ae:37:9f:cd:62:50:9d:8d:3a:08:16:fb:55:
77:dc:50:e2:0b:10:ef:f2:42:33:d2:2c:c8:91:8d:
19:a4:0a:af:ba:f2:5d:05:90:08:3b:7a:03:cd:75:
7f:e3:69:80:0a:68:26:63:9a:95:33:48:4d:9d:06:
e7:e6:98:b2:77:78:cf:26:ab:f1:4e:b6:95:92:e9:
7d:67:5d:d4:af:b2:0d:cd:a0:25:93:37:e9:ae:bd:
06:69:79:6e:bc:fd:39:bb:b8:87:8c:57:0c:15:e6:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:42:05:CB:B6:F7:3B:FA:AC:A3:28:8B:41:10:DB:3A:DD:44:93
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3139322e3133322e302f32322d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.192.132.0/22
Signature Algorithm: sha256WithRSAEncryption
87:1c:b8:4c:1f:9c:7b:01:70:8b:9f:cc:44:08:55:1a:f1:1c:
3f:fe:b3:22:10:43:f0:dd:69:55:d8:7c:a0:84:df:41:5c:2e:
47:17:dd:8b:39:54:d1:5b:94:85:e4:ad:32:46:d7:b4:1f:81:
42:35:6b:e6:e7:e5:3b:6d:45:51:3e:52:11:7d:56:a4:e8:8d:
6c:2d:93:91:89:fc:da:94:48:ac:f2:db:13:cd:6a:b4:22:f4:
44:e5:b9:16:fe:51:d2:c7:99:f5:bb:bc:0e:a7:16:b4:a8:8d:
f7:7c:52:1a:72:3c:83:64:6c:4e:1e:a4:82:6f:c7:ea:ef:a1:
7c:42:7c:65:30:0f:40:ed:76:86:a5:10:98:8e:44:50:07:0c:
08:2d:82:a5:5f:89:82:cf:ca:0a:d0:d3:2a:41:84:8c:a0:37:
2d:f9:d7:90:1c:5f:6b:34:7b:de:7f:51:e9:f0:d9:2c:ec:e2:
51:09:e3:e1:66:f0:7a:77:41:95:69:20:2b:17:d7:59:8d:ee:
54:40:d6:2c:31:e7:8d:96:4e:60:a8:e1:9b:d5:28:e3:8a:5e:
5f:ac:e9:a4:5b:ef:64:0a:f2:36:6f:3e:8f:cc:09:12:f1:0c:
c7:bb:7b:6a:34:5b:38:af:b4:81:10:f5:44:6c:e7:45:cb:c3:
a2:9f:22:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:11 2026 by rpki-client