
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32332d3234203d3e2034383437.roa
File: 3130332e38352e3137322e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier: dC7/vYpWIv2Q4Mvy8udMXS2oUSJguHRKxGB1BaMrj9k=
Subject key identifier: 04:48:9A:58:D8:2F:EE:A2:7A:E5:03:B4:C2:8D:51:86:B5:BE:7A:67
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 6F1E9C0DE0E04EB6C0C9E131BE4F30B21D6972DF
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32332d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:20:01 +0000
ROA not before: Thu 04 Jun 2026 09:15:01 +0000
ROA not after: Thu 03 Jun 2027 09:20:01 +0000
asID: 4847
IP address blocks: 103.85.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1e:9c:0d:e0:e0:4e:b6:c0:c9:e1:31:be:4f:30:b2:1d:69:72:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:15:01 2026 GMT
Not After : Jun 3 09:20:01 2027 GMT
Subject: CN=04489A58D82FEEA27AE503B4C28D5186B5BE7A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:25:6c:8e:c5:6e:c8:39:be:77:78:e7:20:
0f:99:e2:91:20:b2:52:b2:44:12:98:b9:d5:3e:60:
96:f0:1f:ad:a4:ef:57:db:a4:a6:d7:46:79:e7:2b:
75:67:3e:84:ae:20:e8:7c:39:c1:93:6a:8b:d0:07:
88:e9:c2:56:c4:7e:26:6b:72:4d:18:fd:9f:e9:25:
b8:20:5b:12:34:03:2e:04:b0:91:7c:ff:51:db:97:
77:29:ea:d6:6b:64:e9:51:df:14:73:6d:5d:9f:81:
5c:13:64:5d:90:bc:d8:df:0b:69:7e:e0:8b:4c:8f:
2c:ff:09:6b:b6:27:15:be:19:e4:26:6c:1d:fb:77:
8e:da:ca:a0:b4:c2:34:15:24:85:62:04:c1:07:e1:
eb:dd:59:de:1c:a4:ea:04:0e:e4:c3:6f:a8:be:83:
34:55:64:e8:06:3c:71:22:68:4b:70:2c:20:16:4e:
15:54:4e:bd:7d:8f:4d:04:a4:de:de:a7:97:7f:47:
84:3f:2d:61:0a:b7:b4:f3:2e:68:1c:31:0a:9c:0b:
ec:2e:05:c1:fe:30:e0:28:65:24:5b:c0:98:a7:f2:
3f:e6:a9:13:1e:2c:a8:3a:62:21:2e:b9:83:e4:17:
04:23:9c:c8:cb:c4:67:12:b7:8d:e9:b5:11:52:24:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:48:9A:58:D8:2F:EE:A2:7A:E5:03:B4:C2:8D:51:86:B5:BE:7A:67
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32332d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.172.0/23
Signature Algorithm: sha256WithRSAEncryption
05:d5:cd:37:71:77:45:00:1a:f2:71:17:bb:20:b9:ba:6c:9f:
1d:2c:bd:7b:3c:bb:cf:e5:d9:79:d0:c3:09:4d:aa:2a:36:6b:
e6:2b:fa:84:fd:d0:ed:ae:73:5f:1a:d9:bf:c3:49:f9:ec:2a:
3b:2e:7a:23:3b:95:4f:6a:b6:18:56:be:50:3c:98:09:41:9a:
f7:e2:31:62:35:cd:fa:a5:e6:75:db:f1:9b:83:d6:dc:2e:d9:
e0:b6:d1:22:6f:97:9e:a6:f1:27:83:d0:37:ce:28:be:2d:23:
80:70:d9:45:d4:3d:66:4c:03:6f:7d:0d:c1:5f:3d:64:17:74:
ce:dd:9d:65:09:cf:9c:fa:c1:06:ee:f7:0f:56:fd:82:e9:54:
37:b9:b4:19:2f:ba:66:f4:3b:ec:b1:28:0d:6d:de:29:6d:a2:
38:63:ae:ac:13:f3:0f:21:79:f2:62:f8:e8:4b:11:03:c5:66:
f9:fc:a1:f8:64:b0:ae:84:74:23:98:39:40:48:c7:4d:b9:fa:
03:8f:4b:f1:c9:08:c2:4c:9f:59:a1:71:ad:de:af:ad:73:49:
ce:e5:59:23:82:b0:9c:3e:32:85:7a:70:fb:f2:c0:7e:69:ad:
13:20:6a:95:a7:bd:c2:5c:3c:91:6c:62:7f:fe:34:9c:a4:20:
86:97:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:52 2026 by rpki-client