
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137382e302f32332d3234203d3e2034383437.roa
File: 3130332e38352e3137382e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier: OlA+/y/kWxlVxM5iMUlsT7Y0j8zEwKoQg4DRg5ZZzkg=
Subject key identifier: 4D:99:9E:DE:72:C3:BE:9A:A9:FF:A9:35:12:0F:AE:F6:A4:3E:E3:68
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 6E2092A18F3D7428BFE4C9FF414A6F9CF20E70E2
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137382e302f32332d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:22:32 +0000
ROA not before: Thu 04 Jun 2026 09:17:32 +0000
ROA not after: Thu 03 Jun 2027 09:22:32 +0000
asID: 4847
IP address blocks: 103.85.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:20:92:a1:8f:3d:74:28:bf:e4:c9:ff:41:4a:6f:9c:f2:0e:70:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:17:32 2026 GMT
Not After : Jun 3 09:22:32 2027 GMT
Subject: CN=4D999EDE72C3BE9AA9FFA935120FAEF6A43EE368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:43:e8:87:35:f5:19:fa:8c:b4:95:e5:7c:
13:60:45:df:ba:77:62:61:d2:8f:61:2d:31:19:d0:
11:f3:2a:a5:63:91:43:18:78:71:7b:95:4d:03:97:
7f:12:02:45:63:f4:4b:8f:8e:56:50:7d:aa:71:52:
73:ec:17:61:17:dc:27:03:31:93:61:5f:4b:1f:f1:
53:e7:25:bf:8b:31:71:06:a0:77:c9:1e:d7:c8:1b:
ec:89:2e:6b:d8:98:e4:ad:6d:7e:d0:3e:cd:56:a1:
bc:78:0c:36:b2:61:38:e4:2f:5a:78:f8:33:29:e3:
44:c3:dc:97:02:4e:0b:64:96:a9:8d:99:47:45:16:
5b:a9:b9:5f:5d:db:85:d8:ba:99:8a:04:2e:5a:41:
f6:34:da:e5:13:62:d9:77:f9:3d:3f:c6:61:dc:0a:
6f:59:6b:9a:4e:83:fe:e3:90:42:b0:e2:13:ec:28:
33:99:43:3c:cf:98:ff:c2:69:43:a2:4f:0b:6b:e8:
45:74:87:53:f1:b2:fc:5c:15:b2:c8:97:db:41:f2:
ad:db:c7:56:35:58:e0:fd:8f:49:93:e4:41:66:b0:
3d:71:56:e3:1e:9b:e1:37:29:ac:ad:53:a1:c5:ba:
c4:cd:bb:75:b9:8a:51:ec:ce:6b:a8:e3:ca:ee:8b:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:9E:DE:72:C3:BE:9A:A9:FF:A9:35:12:0F:AE:F6:A4:3E:E3:68
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137382e302f32332d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.178.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:46:22:06:b5:c3:da:8c:ae:4b:f2:63:ce:8d:28:87:89:e8:
2f:4d:07:c0:2e:68:ae:2e:4d:a7:cb:48:fb:29:97:be:d5:a8:
b8:3b:6c:f9:0a:87:f4:34:5d:b3:ef:b0:84:60:28:18:e6:66:
3e:32:2a:66:14:de:93:d0:40:f9:6f:dd:d4:3e:00:0f:a2:c0:
ea:86:69:06:50:21:83:a6:c1:99:a6:df:87:02:94:fa:57:10:
13:99:c9:18:ab:07:2b:0f:12:30:dc:03:37:ca:04:f7:e1:75:
be:aa:aa:38:d3:a9:61:1e:66:21:78:f7:53:88:2a:88:21:66:
70:55:b8:00:06:ae:3c:58:04:f5:ed:7d:74:b8:25:46:0a:7e:
d7:e3:b3:21:07:02:45:e7:87:70:67:48:e5:51:cd:a7:11:74:
2b:2c:9d:59:df:2d:3a:1c:11:89:82:1a:77:aa:c9:f4:8c:27:
a6:2a:8e:6e:27:92:4c:70:83:12:07:4b:3b:df:da:1b:96:95:
08:6b:27:4a:45:e4:27:53:81:f6:59:22:ba:e9:18:f1:69:76:
b1:c0:ae:59:cd:b7:87:74:7e:0c:5b:ef:59:95:f1:07:ca:a3:
5c:32:fd:d1:44:73:4e:20:f1:1e:32:f1:26:5f:38:58:f6:ef:
84:cb:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client