
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32342d3234203d3e2034383437.roa
File: 3130332e38352e3136342e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: nPXnQRV6IFZAKjC4ZJeWxAN8CD95TDprXJ4H9oMUteI=
Subject key identifier: 01:CA:F9:AC:C4:62:0D:47:B0:D9:EA:6F:FB:67:5E:6F:3D:18:AB:EC
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 6FE2DD65A8C74CD048BFE6131B50B0823D510100
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:13:59 +0000
ROA not before: Thu 04 Jun 2026 09:08:59 +0000
ROA not after: Thu 03 Jun 2027 09:13:59 +0000
asID: 4847
IP address blocks: 103.85.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e2:dd:65:a8:c7:4c:d0:48:bf:e6:13:1b:50:b0:82:3d:51:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:08:59 2026 GMT
Not After : Jun 3 09:13:59 2027 GMT
Subject: CN=01CAF9ACC4620D47B0D9EA6FFB675E6F3D18ABEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:a7:55:ee:b1:10:94:2c:d2:40:0f:ac:ad:
2b:e9:7f:e7:c2:b7:8c:53:a7:92:33:bf:b4:f2:ef:
e9:d0:b5:ef:ce:bf:95:f3:7d:6d:45:7b:1e:c6:8d:
58:e6:d2:e4:99:a4:ae:7d:e0:85:43:9b:19:6c:0c:
45:21:e1:21:63:90:42:98:23:55:bd:13:dc:69:87:
ed:47:7f:90:d3:d0:3d:0d:68:cc:0b:fa:7d:54:45:
4f:27:a8:f4:bd:31:2e:5b:16:74:6f:85:ae:ef:0a:
cb:35:18:8d:88:04:51:49:98:6d:08:cb:b5:b0:37:
46:5a:17:f1:62:62:55:ef:65:97:c1:2f:65:7f:8e:
e1:1e:81:9c:56:29:fc:46:3b:a7:44:94:e4:c2:cf:
82:4d:ca:34:13:52:37:fa:34:e1:13:98:f8:cd:fd:
2c:a9:87:fd:c3:7f:c8:f5:e3:e0:09:ed:1d:3f:70:
c2:14:49:22:a6:93:44:30:9e:76:5a:1e:8f:dd:50:
fe:a5:c3:cb:92:54:0e:da:9d:d6:30:e1:89:3e:50:
2f:5b:21:aa:b8:ea:95:a3:77:90:13:5c:d0:47:62:
dc:44:de:70:d2:a6:84:ff:b9:58:34:83:2e:79:e5:
e2:a4:b8:6d:9b:df:f1:b0:3c:7a:bf:24:ee:67:59:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:F9:AC:C4:62:0D:47:B0:D9:EA:6F:FB:67:5E:6F:3D:18:AB:EC
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:48:a5:1d:0e:e6:d2:10:ad:1b:6d:6e:cd:52:51:c3:18:b8:
65:09:c9:05:42:dc:05:b2:d8:42:43:89:6b:ba:9e:bc:3c:4a:
eb:81:0b:c0:5f:c7:6a:3d:af:b0:f2:5e:56:14:1b:6e:63:05:
d2:a0:96:be:58:22:bf:2d:a7:57:16:e9:5f:55:86:16:38:9b:
b5:1c:5e:9d:02:14:8a:93:bd:02:5a:4f:7d:f7:75:e9:b5:b4:
18:95:ae:d1:28:5f:0a:9e:e3:27:e6:98:2c:db:59:62:4e:b4:
52:5a:53:43:08:d4:bc:26:e3:8f:66:1a:3c:8a:dd:c9:32:e7:
41:63:12:59:bf:0a:d7:ec:c6:a6:a6:7d:90:e5:bf:47:47:92:
c2:c7:25:98:0e:df:fe:7e:38:13:30:b3:f9:9a:54:a6:dd:4a:
cb:81:db:43:40:62:76:64:6b:22:af:61:59:6c:bb:39:e7:83:
e8:1e:46:f2:16:3c:df:0d:f7:ff:c3:3b:20:dc:b3:72:49:20:
17:e3:c2:01:76:a5:8f:f3:e9:3a:1e:db:cd:8d:6f:81:99:36:
95:0f:d5:10:11:23:d2:dd:61:20:34:38:0a:d2:44:9d:e4:7b:
e4:12:cb:21:aa:58:fd:49:16:d6:d4:f3:0e:5e:8e:86:57:32:
4d:ce:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:15 2026 by rpki-client