
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e34382e302f32322d3234203d3e2034383437.roa
File: 3130332e3231332e34382e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier: WhzZSLbsgt33HENC5Jdo8E3uINhsiQYYcA7VVDPcNZE=
Subject key identifier: 6B:EB:1E:11:A2:4E:80:10:33:64:4F:DA:79:6C:A4:5B:8C:0C:ED:20
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 622D27F83C0F1F1C460333F016198E8859AA8E3D
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e34382e302f32322d3234203d3e2034383437.roa
Signing time: Fri 29 May 2026 13:30:33 +0000
ROA not before: Fri 29 May 2026 13:25:33 +0000
ROA not after: Fri 28 May 2027 13:30:33 +0000
asID: 4847
IP address blocks: 103.213.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2d:27:f8:3c:0f:1f:1c:46:03:33:f0:16:19:8e:88:59:aa:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: May 29 13:25:33 2026 GMT
Not After : May 28 13:30:33 2027 GMT
Subject: CN=6BEB1E11A24E801033644FDA796CA45B8C0CED20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:33:d8:dc:74:a9:dc:ff:41:bb:e9:de:24:
57:2c:cd:e3:96:49:cb:9a:c5:27:d4:68:19:27:f3:
9a:b1:74:82:8e:79:4e:51:ca:3c:12:a1:0c:fc:86:
c4:bd:f2:a8:87:f2:e2:55:76:6c:ff:4b:43:60:93:
11:24:48:9c:8d:09:d8:17:ab:5e:30:7f:73:88:cb:
6e:90:28:0d:30:02:16:15:f6:21:60:1e:0f:f0:4e:
eb:1a:de:3c:bf:31:05:bf:d9:1d:00:6b:03:1f:17:
0c:f8:26:65:50:4f:f1:cc:40:b3:c0:ca:55:e9:c3:
37:e7:3e:e1:cb:44:39:e2:02:61:93:c6:df:c8:d3:
a5:96:18:ac:a0:0c:68:10:1b:e5:f1:4f:c8:0f:63:
d3:bd:43:6c:c2:c8:94:14:11:e9:29:33:f3:79:34:
5e:70:72:cb:54:18:c5:46:d1:ae:d3:95:74:62:0f:
a9:ee:63:56:a9:1e:c8:9b:28:b4:fd:dc:8f:e5:6d:
d4:bb:4f:00:f2:ce:d8:32:d5:d8:33:eb:ed:dd:ec:
b2:b6:b6:c1:7d:77:8d:0b:35:7b:d0:65:04:7d:a7:
c5:21:03:22:2a:79:c6:86:14:07:4a:57:2a:d0:b0:
b0:11:ff:4a:7c:8d:32:f1:4a:79:ce:a7:0c:05:0e:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:1E:11:A2:4E:80:10:33:64:4F:DA:79:6C:A4:5B:8C:0C:ED:20
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e34382e302f32322d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:8d:1b:f9:15:53:44:ab:1f:92:de:0b:99:26:3e:a9:72:da:
1d:fb:cc:c9:d6:a8:58:86:f9:8b:a1:55:8c:48:82:86:71:b7:
f0:a6:6d:ca:94:8c:96:ac:36:d4:28:43:b3:46:eb:db:0d:ed:
e3:91:fc:d6:98:0c:60:4c:cb:16:9e:e7:65:18:7f:4b:12:dd:
3b:19:03:c3:05:28:ce:3b:ba:76:9a:58:45:33:b7:42:6d:9f:
d7:d5:57:9b:99:0a:75:ca:8d:3d:57:f9:1c:21:f0:8d:99:71:
4b:c2:ff:2f:b1:59:45:d0:ff:0f:1f:2b:d2:d4:c7:2c:63:ad:
27:6c:a9:f9:7c:48:ba:61:7f:fc:cd:15:6b:ac:f5:dd:e5:60:
86:18:47:d4:c8:6d:89:71:a3:fc:28:59:ba:50:77:69:59:6a:
79:b3:e1:39:42:17:00:f9:f2:c9:fc:7c:d3:dc:8e:38:fd:3b:
eb:c8:35:14:32:f2:2f:c1:9e:76:68:c9:a0:35:00:1b:29:4c:
1d:e7:5a:b3:59:69:bf:c3:f1:50:5c:be:a7:4c:66:6e:a4:2a:
5a:49:96:fb:2f:09:e3:be:4d:36:9f:38:02:93:6f:87:13:1e:
85:67:bc:8e:60:3a:ce:ab:6d:de:13:67:11:86:2c:3a:82:98:
41:e6:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:21 2026 by rpki-client