
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3131382e3130332e3136342e302f32322d3234203d3e2034383038.roa
File: 3131382e3130332e3136342e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier: Kp5h44EPQR2t9rhuA+eqNyes8CzFz8G2831ENVJA3jo=
Subject key identifier: 77:08:9B:EF:A9:DF:BC:65:82:28:9E:5A:1E:38:58:8D:FA:4E:27:07
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 4476D68040DADE45FAAAF65EFAEE640B8FF1C18F
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3131382e3130332e3136342e302f32322d3234203d3e2034383038.roa
Signing time: Fri 29 May 2026 13:53:04 +0000
ROA not before: Fri 29 May 2026 13:48:04 +0000
ROA not after: Fri 28 May 2027 13:53:04 +0000
asID: 4808
IP address blocks: 118.103.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:76:d6:80:40:da:de:45:fa:aa:f6:5e:fa:ee:64:0b:8f:f1:c1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: May 29 13:48:04 2026 GMT
Not After : May 28 13:53:04 2027 GMT
Subject: CN=77089BEFA9DFBC6582289E5A1E38588DFA4E2707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:dc:35:d7:b1:d6:b5:a3:3f:18:ab:2a:a5:
44:fa:2d:60:04:8e:f7:d9:a1:13:c2:6e:cc:3f:e2:
20:55:11:69:8e:df:34:14:02:37:e3:03:e6:6d:0c:
d4:0e:84:71:34:1d:84:5e:a7:5e:f4:43:01:37:e8:
b8:51:25:7e:a4:36:f6:3c:39:45:36:4a:e9:a6:01:
2f:09:33:f2:c2:38:e7:fb:e5:51:f1:d4:98:6a:6e:
d4:dd:4d:31:55:39:ba:94:e1:00:72:92:3b:4e:df:
6e:bb:74:18:d3:48:e9:35:ff:e9:52:42:82:df:0c:
14:00:d4:cf:4d:18:5f:ca:7b:c5:74:52:64:3c:37:
7b:52:b1:c3:fa:e1:fb:a9:41:2f:66:7a:ae:96:37:
cc:0a:a2:65:d1:04:29:76:71:27:69:4d:69:b1:97:
fc:13:79:2c:a9:54:7d:dc:fb:dd:92:c0:ac:b7:ef:
2e:a4:a0:16:ad:41:7a:54:a2:48:7a:10:1a:53:86:
23:56:a0:d4:6f:a1:d0:77:b7:9f:66:1e:d2:c1:d8:
c4:b3:80:4a:2f:24:79:a2:72:d8:0b:65:d8:51:46:
2f:ba:cf:13:1e:d3:32:7e:d7:96:b8:b5:4e:61:7c:
aa:3e:09:12:c2:9b:87:d5:13:65:35:22:51:c9:29:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:9B:EF:A9:DF:BC:65:82:28:9E:5A:1E:38:58:8D:FA:4E:27:07
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3131382e3130332e3136342e302f32322d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.103.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:bb:47:36:86:00:a7:9e:bf:e3:df:df:d1:35:3f:60:66:19:
c2:5f:f8:db:9c:1f:57:d0:61:14:ee:0b:ca:3b:0b:61:6c:35:
56:a2:d6:ec:2d:ed:de:b2:92:07:a7:92:e1:45:21:d9:37:59:
0c:55:c7:24:99:ed:98:c8:79:27:84:27:8e:43:b0:1e:b7:0e:
5a:36:c8:76:0f:70:63:19:98:d7:98:52:03:28:a1:67:1e:af:
f2:d6:e2:11:b1:3a:95:9a:81:43:d0:5f:4b:2c:5b:9b:b2:b3:
d4:a4:16:14:44:80:14:6f:84:21:5f:c8:df:09:e3:e1:66:f9:
27:c8:b1:28:a7:c8:79:47:c9:c9:8d:ea:da:d9:96:6f:36:9e:
41:47:f5:1d:59:ef:32:6f:7c:25:0f:1a:fc:d6:c6:67:43:a0:
d9:89:e4:86:29:57:04:91:98:eb:ba:13:ac:44:a4:a8:a3:d7:
de:e3:4f:3d:d7:8c:2d:22:3f:59:43:c1:61:42:b1:5e:ba:21:
21:ef:fa:a4:e1:49:c9:80:81:c1:23:56:54:d2:c2:be:5e:05:
50:8c:f1:ee:0d:94:a9:ea:73:3c:a2:2b:a0:1a:62:f1:11:16:
11:79:2a:31:54:d5:e7:59:fa:c4:5d:87:34:c8:fa:4e:d0:c0:
8a:b3:39:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:08 2026 by rpki-client