
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35322e302f32322d3234203d3e2034383437.roa
File: 3130332e3231332e35322e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier: Hwt8DAgZHe4MlBVlxCJmfShZAYGGr9+hUzaMvEhjSwA=
Subject key identifier: 06:98:A7:53:52:9D:6C:5B:0D:78:D3:EF:EE:FE:C4:1B:04:E3:74:EA
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 0D682B073B5E57ABC190900C0F3B1063128CA3DB
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35322e302f32322d3234203d3e2034383437.roa
Signing time: Fri 29 May 2026 13:30:48 +0000
ROA not before: Fri 29 May 2026 13:25:48 +0000
ROA not after: Fri 28 May 2027 13:30:48 +0000
asID: 4847
IP address blocks: 103.213.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:68:2b:07:3b:5e:57:ab:c1:90:90:0c:0f:3b:10:63:12:8c:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: May 29 13:25:48 2026 GMT
Not After : May 28 13:30:48 2027 GMT
Subject: CN=0698A753529D6C5B0D78D3EFEEFEC41B04E374EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:55:b6:08:a2:f3:20:2e:0d:c0:fa:e0:e6:
5c:4b:48:f6:81:60:ed:4b:44:14:4f:28:68:0d:01:
72:74:50:da:5d:e8:ee:dd:cc:7e:7e:02:28:ac:22:
b2:1a:92:21:84:11:2b:f9:4f:c2:22:ba:c6:58:e0:
53:11:8d:8b:11:99:4a:b1:16:a1:91:c8:9d:58:64:
10:ab:cd:0b:22:72:d3:63:bd:a4:38:fe:d6:56:a1:
25:91:f8:a1:2c:9f:db:06:a3:70:f6:60:5c:b5:64:
29:a4:36:65:76:8c:08:84:df:97:ec:eb:97:e4:f9:
31:86:8c:bf:9a:fc:4b:58:69:31:10:87:93:99:ed:
96:17:ba:cd:10:a7:58:84:30:84:09:d4:41:0c:c2:
d3:2c:64:e5:57:e0:ae:91:e6:5a:e4:d9:04:db:70:
ee:83:d9:d7:d2:db:5b:31:a0:21:0b:1d:56:59:5b:
cf:25:33:de:57:66:42:ef:43:85:03:70:9f:df:b6:
65:79:5d:53:6a:bd:5d:d4:a9:f1:0e:85:47:7b:e8:
ee:1b:be:3a:36:c8:39:c5:96:db:9b:89:e7:9f:3c:
50:3d:89:26:dd:63:22:f8:21:73:90:3d:70:51:75:
58:b4:e9:60:9e:cb:ed:52:91:d9:d2:df:1b:9b:ca:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:98:A7:53:52:9D:6C:5B:0D:78:D3:EF:EE:FE:C4:1B:04:E3:74:EA
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35322e302f32322d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.52.0/22
Signature Algorithm: sha256WithRSAEncryption
98:16:b4:4a:b1:a8:c8:56:0f:da:c8:66:ea:63:d1:12:15:95:
1e:10:91:b3:e5:11:dd:11:7d:f2:d4:fd:76:f0:09:1f:29:96:
00:7d:91:89:db:e8:8d:c6:bf:05:f3:ea:fa:b1:3d:8e:91:aa:
d0:8e:b3:7e:5e:cb:2e:7f:47:f1:ef:88:7c:78:01:d5:13:86:
e1:7f:b6:4c:8f:ce:7a:de:8d:e7:49:dc:5c:0e:84:bd:3d:c0:
5d:e7:ca:b9:67:db:c4:4e:c2:75:1f:cb:86:7b:4c:49:d7:8f:
41:7b:e0:dd:0a:ce:17:31:5b:f7:f1:0d:9c:5c:81:3c:c6:62:
17:74:ae:74:40:d0:2e:31:b6:7e:8e:d5:7a:c7:e5:2d:6b:ed:
45:11:6d:ac:98:f8:d1:2c:25:4c:af:38:f3:32:5e:c0:3d:53:
0c:7c:89:28:91:53:5e:16:df:22:62:ba:ed:e7:36:62:e0:81:
1e:81:55:e1:48:3d:f5:25:1c:b9:2e:80:84:27:b0:2e:9f:93:
af:7b:35:8a:4e:75:ae:28:22:b0:6b:79:46:f8:43:0f:a2:87:
49:1d:b4:66:4e:99:7a:6a:5b:89:75:9c:c1:32:1a:2f:7a:3b:
db:84:5f:d4:c9:d7:7e:a6:37:4f:7c:3f:01:7f:03:8f:65:ce:
e6:69:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:29 2026 by rpki-client