
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137302e302f32332d3234203d3e2034383437.roa
File: 3130332e38352e3137302e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier: A4Tnd++81ABktSlHjwyzmoet6C33n0vf4/jTLfB5zx0=
Subject key identifier: AF:A0:51:C0:77:F1:EA:69:8B:3B:1B:62:53:77:27:02:4D:FD:56:94
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 57904AC67EB8BDA398CB66E1529EFED447F9D783
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137302e302f32332d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:16:37 +0000
ROA not before: Thu 04 Jun 2026 09:11:37 +0000
ROA not after: Thu 03 Jun 2027 09:16:37 +0000
asID: 4847
IP address blocks: 103.85.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:90:4a:c6:7e:b8:bd:a3:98:cb:66:e1:52:9e:fe:d4:47:f9:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:11:37 2026 GMT
Not After : Jun 3 09:16:37 2027 GMT
Subject: CN=AFA051C077F1EA698B3B1B62537727024DFD5694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:86:07:ab:dc:fc:90:ff:e4:e1:0c:bc:47:
b3:f5:72:91:44:2b:66:91:a7:e6:83:2e:ce:11:8a:
c0:c9:79:51:3a:e0:7f:c4:e2:ff:37:e0:9c:9b:56:
00:8c:e9:42:2d:1f:e9:ce:1e:07:18:41:13:5f:f2:
82:31:9b:a1:e6:cd:07:e2:51:20:8d:5e:44:64:0f:
5a:dd:ee:d5:0f:92:e7:5c:0a:3b:f0:9e:80:0d:db:
b9:5f:28:37:70:cf:52:5f:f2:cf:90:3b:c9:8f:a8:
45:8d:3d:c8:ba:87:79:29:cd:31:06:d2:08:a3:88:
0a:8f:07:5a:26:b9:54:7d:2f:df:6c:52:53:49:49:
9f:55:30:73:02:47:05:07:bc:2e:09:8f:73:15:62:
e4:af:84:e7:01:69:15:c0:82:41:98:df:1a:1b:cb:
d7:86:b4:4a:31:a3:75:1c:7e:ff:6b:37:80:fb:d0:
03:df:49:4c:8d:c2:38:a8:44:03:12:82:de:27:9c:
22:21:b6:96:fe:95:9e:a6:90:2c:0b:9a:f2:cb:f0:
67:0b:15:50:df:17:42:5e:21:28:de:c6:9f:e1:c9:
7c:f1:2a:1d:c7:cb:9f:b3:c7:5c:be:a5:19:f6:1f:
91:3f:ae:a4:c6:0d:74:95:29:98:39:83:fd:73:2c:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:51:C0:77:F1:EA:69:8B:3B:1B:62:53:77:27:02:4D:FD:56:94
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137302e302f32332d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.170.0/23
Signature Algorithm: sha256WithRSAEncryption
09:ad:e9:e2:3d:b5:7b:32:9a:c6:a7:f2:00:39:44:a1:58:58:
91:82:a7:5d:e7:57:38:34:53:7c:88:b4:68:1f:43:0f:90:a5:
f7:d5:f0:8f:55:53:fe:9b:33:c2:1f:00:5c:54:f3:5d:b7:0e:
e8:26:5f:14:ca:9d:d1:62:1f:b4:bc:b2:4f:f4:2e:e8:de:8d:
be:a6:87:aa:83:fc:09:fb:c3:a5:bf:94:95:91:25:89:10:8d:
00:bb:a9:a2:92:12:75:c4:9c:aa:bd:f3:cb:e1:79:0c:c0:d7:
86:7e:6e:f7:79:b0:ae:0e:02:39:de:0f:24:7b:80:c7:e2:f3:
cd:96:00:27:d9:24:03:1a:01:34:dd:b2:24:a0:ef:5c:83:92:
a7:e9:fd:93:17:fe:54:b0:84:a0:58:92:c6:aa:cd:43:dc:36:
e9:71:53:6d:d7:e7:5e:1e:0c:28:ae:12:0f:80:56:9c:b6:ca:
8b:ce:fa:bd:94:9d:53:c5:b5:63:93:bc:13:58:d2:bf:ef:9e:
65:c4:c2:96:bd:f4:3d:67:bc:a7:a3:5d:0b:e9:19:91:81:fe:
70:13:7a:56:aa:28:33:6a:d4:88:c7:95:e4:ac:0a:76:58:c4:
de:f1:1f:86:85:6d:0c:7c:12:72:03:d0:b5:2c:6a:83:76:18:
83:e9:be:ab
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUV5BKxn64vaOYy2bhUp7+1Ef514MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA2MDQwOTExMzdaFw0yNzA2MDMwOTE2MzdaMDMxMTAvBgNV
BAMTKEFGQTA1MUMwNzdGMUVBNjk4QjNCMUI2MjUzNzcyNzAyNERGRDU2OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+oYHq9z8kP/k4Qy8R7P1cpFE
K2aRp+aDLs4RisDJeVE64H/E4v834JybVgCM6UItH+nOHgcYQRNf8oIxm6HmzQfi
USCNXkRkD1rd7tUPkudcCjvwnoAN27lfKDdwz1Jf8s+QO8mPqEWNPci6h3kpzTEG
0gijiAqPB1omuVR9L99sUlNJSZ9VMHMCRwUHvC4Jj3MVYuSvhOcBaRXAgkGY3xob
y9eGtEoxo3Ucfv9rN4D70APfSUyNwjioRAMSgt4nnCIhtpb+lZ6mkCwLmvLL8GcL
FVDfF0JeISjexp/hyXzxKh3Hy5+zx1y+pRn2H5E/rqTGDXSVKZg5g/1zLDSdAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUr6BRwHfx6mmLOxtiU3cnAk39VpQwHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNzI0MzMxNzM1MDIzNjMzLzAvMzEzMDMzMmUzODM1
MmUzMTM3MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdVqjANBgkqhkiG9w0BAQsFAAOCAQEACa3p4j21ezKaxqfyADlEoVhYkYKn
XedXODRTfIi0aB9DD5Cl99Xwj1VT/pszwh8AXFTzXbcO6CZfFMqd0WIftLyyT/Qu
6N6NvqaHqoP8CfvDpb+UlZEliRCNALupopISdcScqr3zy+F5DMDXhn5u93mwrg4C
Od4PJHuAx+LzzZYAJ9kkAxoBNN2yJKDvXIOSp+n9kxf+VLCEoFiSxqrNQ9w26XFT
bdfnXh4MKK4SD4BWnLbKi876vZSdU8W1Y5O8E1jSv++eZcTClr30PWe8p6NdC+kZ
kYH+cBN6VqooM2rUiMeV5KwKdljE3vEfhoVtDHwScgPQtSxqg3YYg+m+qw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:46 2026 by rpki-client