
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39302e3138392e302f32342d3234203d3e2034383437.roa
File: 3130332e39302e3138392e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: b+yniwcf3V+qSt8gop3GAEuIIg3yM12YuSrzD0+QvhI=
Subject key identifier: 7C:22:05:4C:DC:37:FC:42:48:B9:47:C2:78:8B:13:14:67:11:97:35
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 1EAC4885904CAB28BC8868FF5EFB65F174ADAE2E
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39302e3138392e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 08:58:24 +0000
ROA not before: Thu 04 Jun 2026 08:53:24 +0000
ROA not after: Thu 03 Jun 2027 08:58:24 +0000
asID: 4847
IP address blocks: 103.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ac:48:85:90:4c:ab:28:bc:88:68:ff:5e:fb:65:f1:74:ad:ae:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:53:24 2026 GMT
Not After : Jun 3 08:58:24 2027 GMT
Subject: CN=7C22054CDC37FC4248B947C2788B131467119735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:87:06:8a:c2:96:c5:d0:3d:87:2f:1d:ac:
6c:65:b4:ab:fd:ed:b2:5c:05:46:b1:28:45:97:47:
91:5f:1f:2c:80:2e:42:95:8f:a7:9a:c1:ac:df:97:
57:1f:48:d9:2e:d1:42:52:55:dd:83:13:16:df:f8:
4e:0d:2c:05:bd:82:f8:a0:dc:61:dc:aa:09:a2:ac:
1a:28:30:c1:67:ec:9c:c7:9c:60:b2:c8:02:c4:33:
23:ca:9a:f2:1b:7b:bd:ae:fa:73:e2:f0:3c:08:66:
10:9b:c0:33:e1:ba:aa:c1:fa:4a:39:fd:37:7a:3e:
47:30:8f:ac:76:33:ac:26:e7:0e:5d:5b:e8:ec:b7:
6d:db:90:11:3d:b3:c1:b8:c2:7c:7e:82:b3:7d:53:
c9:b4:f1:26:91:16:2f:1f:67:89:4a:58:67:24:b3:
d5:d0:80:47:4b:c8:85:23:e1:e3:0d:e8:a4:0b:db:
e2:6d:bf:76:0a:a0:a6:cb:20:f7:5d:68:9c:92:2f:
65:c6:f0:da:10:07:08:31:42:43:ce:3c:0b:cc:66:
55:d1:b4:4f:1c:d6:0b:99:dc:dd:d9:e6:1c:94:e6:
47:01:dd:96:81:46:c3:07:0d:73:a1:0b:63:ed:27:
89:dc:eb:36:94:21:4d:7a:bf:90:2e:bd:33:3c:e4:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:22:05:4C:DC:37:FC:42:48:B9:47:C2:78:8B:13:14:67:11:97:35
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39302e3138392e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ef:dd:13:21:9b:8b:a6:ef:22:80:c8:8c:32:4c:4a:5a:6a:
76:d6:46:94:d5:9a:8a:c8:bf:60:6f:19:98:f1:f0:c8:5b:ae:
19:05:51:a0:8d:6e:95:b5:f7:12:74:a2:50:42:09:b6:d4:ca:
25:ab:f8:ac:76:9c:5d:13:ec:61:6c:8f:95:65:20:1f:a7:7c:
3d:d7:1c:94:57:ba:dc:21:ab:95:d1:b8:1e:7d:bf:7d:98:d2:
be:76:b5:e0:fa:23:53:63:44:5a:bd:1c:5a:14:64:1c:51:f1:
56:9a:81:4d:26:56:79:dd:9a:9b:e4:d6:66:2a:ab:dd:50:33:
05:73:c6:7b:37:48:af:70:bc:15:02:de:11:bf:51:54:00:95:
1b:82:2e:cc:8f:ce:e1:2c:01:0c:1a:8a:75:88:1f:c7:b3:90:
e8:66:52:c4:40:6d:79:63:6d:46:cc:42:62:94:14:64:a4:98:
21:fc:dc:94:ad:bd:bc:6e:ee:a1:2c:a3:a2:aa:dc:a2:63:5c:
7e:f1:6b:6c:a9:2b:61:17:82:29:8b:eb:7b:40:da:33:15:dd:
c2:03:28:b5:fb:bb:06:85:05:19:19:c5:15:0e:db:30:bf:3e:
bf:95:da:6a:5d:9e:7e:c0:df:06:c1:00:c2:8b:fc:0d:be:cb:
d3:c6:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:25 2026 by rpki-client