
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136382e302f32342d3234203d3e2034383437.roa
File: 3130332e38352e3136382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: 3UYiZmU27Pi5XfWl1zpCvTM3B598OqYMM2Rq3SnjR3A=
Subject key identifier: 31:88:AF:6B:3C:D8:21:CF:02:B4:90:00:4C:75:02:A6:A3:36:38:DA
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 31081942FF80E92E54A6B6BD7551794CBCF232F3
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136382e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:16:07 +0000
ROA not before: Thu 04 Jun 2026 09:11:07 +0000
ROA not after: Thu 03 Jun 2027 09:16:07 +0000
asID: 4847
IP address blocks: 103.85.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:08:19:42:ff:80:e9:2e:54:a6:b6:bd:75:51:79:4c:bc:f2:32:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:11:07 2026 GMT
Not After : Jun 3 09:16:07 2027 GMT
Subject: CN=3188AF6B3CD821CF02B490004C7502A6A33638DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:33:dd:3f:dc:20:18:3b:e3:1b:66:fb:d0:
e3:9c:27:f3:34:d9:96:55:c9:4b:4e:39:cb:ec:45:
d6:e7:46:58:02:b0:ba:f2:a3:92:9c:3e:91:b0:88:
e7:9a:f7:be:1f:93:46:e4:c9:6a:dc:49:1c:bc:eb:
1d:01:ad:cf:14:8e:d2:30:2a:ac:f1:ec:19:0f:b4:
ac:32:d7:ec:4b:3d:e5:ab:d7:e9:ed:5b:b1:69:b2:
7b:e4:0b:e4:16:3b:c7:e9:66:f7:9c:ed:57:c8:91:
78:8b:0d:68:d9:bd:69:98:79:66:ea:76:90:ba:c4:
95:a3:2c:b7:a4:c5:9b:1c:85:a7:ad:75:1d:ec:4f:
c6:a7:2c:e3:f2:94:01:cc:91:69:41:56:12:9d:41:
32:6d:cd:3e:92:df:ba:68:51:3a:8d:e8:d4:58:e5:
85:22:f9:0b:a0:65:8c:db:8b:5a:8e:89:1d:70:3a:
2f:27:78:f9:36:7e:4b:ce:5c:e0:f4:c9:78:6a:25:
4b:b4:ba:b0:e0:bf:32:ea:44:36:0f:0e:6c:e0:fe:
17:fb:d7:e2:97:45:fc:b1:a3:dc:07:fa:aa:fc:f9:
7e:b6:bd:ba:b6:e7:e5:3b:44:54:63:20:33:4b:35:
5f:e3:50:3d:ae:cc:fc:ef:64:76:fd:20:ec:67:f4:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:88:AF:6B:3C:D8:21:CF:02:B4:90:00:4C:75:02:A6:A3:36:38:DA
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136382e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.168.0/24
Signature Algorithm: sha256WithRSAEncryption
14:48:2e:89:ed:09:1a:19:47:ea:50:8b:81:7f:34:c5:8d:d0:
7d:1c:61:ae:78:6c:c4:ae:34:53:43:c1:7e:bc:4f:1e:55:a2:
f3:b6:ac:96:66:af:31:e8:5d:4d:b6:0f:b1:8f:13:60:17:69:
d8:27:70:b1:03:04:48:f1:53:4b:fa:bc:4a:2b:fa:56:6e:68:
d6:88:f3:7f:33:5d:bf:a9:0f:6b:b2:c3:0e:00:93:cc:86:72:
8f:40:34:82:4e:d1:9c:2c:29:bc:4c:d0:a9:89:fb:b9:a5:b4:
56:81:d1:c7:1d:63:a0:88:f3:d5:1c:96:00:39:4f:01:93:23:
28:a8:c1:7c:2e:f3:8b:cb:bc:ea:31:41:7d:3e:ee:f9:ba:67:
e4:34:64:10:3f:ba:ee:ed:de:62:eb:8f:81:01:db:76:70:a2:
3a:09:d0:83:52:ff:f1:c2:28:60:45:91:73:39:b5:b9:0b:05:
a1:60:3b:6b:80:6c:8f:42:fa:09:bd:f0:a3:d4:07:ba:95:8c:
46:e2:62:f1:bf:6e:72:1f:57:99:30:69:6c:d3:41:9e:d9:04:
29:a1:87:f5:4d:e7:09:61:21:fd:d7:da:ec:ba:40:f8:f4:03:
48:a4:7d:74:1c:2c:1a:db:0b:b5:f0:5c:b4:c9:37:26:37:72:
29:19:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:11 2026 by rpki-client