
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa
File: 3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: xpqOhMnC+yZFY8Dqga1ahMPMw6HFSCOyIMs92Rdc+Qw=
Subject key identifier: FA:0A:09:02:82:DE:1C:36:B0:33:D7:95:37:EF:EE:70:AD:74:57:E6
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 100CF5630BE2B059C823423DC0C11B2ED5CAB378
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:06:51 +0000
ROA not before: Thu 04 Jun 2026 09:01:51 +0000
ROA not after: Thu 03 Jun 2027 09:06:51 +0000
asID: 4847
IP address blocks: 103.219.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0c:f5:63:0b:e2:b0:59:c8:23:42:3d:c0:c1:1b:2e:d5:ca:b3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:01:51 2026 GMT
Not After : Jun 3 09:06:51 2027 GMT
Subject: CN=FA0A090282DE1C36B033D79537EFEE70AD7457E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:5e:2a:41:7e:28:58:4e:ae:12:8f:42:40:
a8:1b:6d:75:73:75:11:ff:77:b7:bd:7d:51:dc:68:
38:9e:69:4b:8e:c9:7e:41:e5:2b:a3:58:66:5d:a2:
5d:66:e0:f6:6b:71:11:66:a1:a4:2a:1e:8b:2d:5e:
68:e7:3d:eb:b9:af:02:f7:c4:9a:9f:69:b0:6e:34:
52:ee:4e:7e:20:be:c5:e6:09:bc:0e:98:0e:54:53:
fe:d0:ba:4d:32:4d:88:bd:57:69:5d:84:25:2b:dc:
a8:54:94:9e:91:1c:fe:c3:96:b3:82:76:d5:ce:41:
ea:a2:ca:10:a0:41:c1:11:7e:53:04:20:35:8e:08:
12:b5:81:62:06:be:d5:79:af:3d:a3:0e:c5:09:e9:
b7:d9:ed:3e:58:8b:88:95:bc:01:e0:20:5e:f0:b6:
6e:ca:a2:43:18:da:1a:65:37:3d:91:47:06:b7:f8:
1c:de:6f:72:f0:5b:d1:67:4c:74:73:87:2f:9f:c8:
e9:8c:83:ee:53:7c:69:6d:21:a9:8e:bc:90:25:f9:
e1:d2:2e:88:b4:cd:01:ca:9a:fc:81:dc:e3:fa:86:
26:67:87:5f:d1:a0:20:46:9c:1e:91:61:b9:36:27:
27:a4:97:7e:30:57:17:d1:a9:83:48:96:11:a7:31:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:09:02:82:DE:1C:36:B0:33:D7:95:37:EF:EE:70:AD:74:57:E6
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.186.0/24
Signature Algorithm: sha256WithRSAEncryption
12:96:39:95:32:a2:d2:0d:56:15:6a:57:79:64:af:f3:1e:9d:
04:0d:5c:ee:bc:db:87:ad:1b:27:10:2a:c0:f1:ee:bc:fc:f8:
a3:c6:4a:9e:e9:7d:82:04:b5:e5:8f:f6:60:48:4e:99:c9:1e:
8a:71:b2:85:dd:81:72:f6:10:b1:3f:b6:28:ab:fd:94:c6:4a:
6e:74:e3:a7:fc:d9:82:c4:e4:23:e5:82:17:b4:b3:75:f8:df:
f8:40:47:1a:bb:59:f6:41:56:f4:02:7e:27:c4:e4:db:fa:5f:
53:9c:bf:7d:9a:d7:cf:71:64:e9:da:2a:dd:2e:89:e6:99:dc:
f0:e7:ff:2d:14:f7:9b:c9:6a:a5:bd:3c:fc:34:eb:9a:47:d0:
ad:6e:04:93:88:a7:5c:f5:59:cd:7b:37:32:94:8c:d3:7e:f0:
9d:22:0d:84:53:df:08:2a:a1:55:94:5c:7a:9c:b1:27:db:48:
cc:19:25:6a:1c:69:13:7b:60:6b:c8:6b:0b:c2:fe:34:b2:f4:
fe:ec:1e:36:a0:a7:f5:34:22:79:49:2a:89:8e:c9:3c:d3:cb:
7a:9a:04:c1:ac:19:53:6b:6a:01:42:4b:4d:f8:bf:d5:d4:15:
56:dd:5c:f1:04:3b:05:af:10:92:10:c4:8d:ab:5e:6f:ac:6f:
54:ac:f4:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:21 2026 by rpki-client