
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133392e302f32342d3234203d3e2034383437.roa
File: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=
Subject key identifier: 4B:DB:F3:09:91:C6:D4:C5:8C:31:53:F9:CD:68:74:DE:61:CE:10:A0
Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Certificate serial: 2A45D3E753DC248C1A29BC3F462F7162AE1AA9A0
Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133392e302f32342d3234203d3e2034383437.roa
Signing time: Tue 02 Jun 2026 07:36:57 +0000
ROA not before: Tue 02 Jun 2026 07:31:57 +0000
ROA not after: Tue 01 Jun 2027 07:36:57 +0000
asID: 4847
IP address blocks: 103.57.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:45:d3:e7:53:dc:24:8c:1a:29:bc:3f:46:2f:71:62:ae:1a:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Validity
Not Before: Jun 2 07:31:57 2026 GMT
Not After : Jun 1 07:36:57 2027 GMT
Subject: CN=4BDBF30991C6D4C58C3153F9CD6874DE61CE10A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:d8:3a:8b:85:dc:a8:f2:0e:97:b8:98:9a:
dd:0d:b0:65:33:18:94:13:b2:2e:76:ef:cd:f4:e9:
b8:65:45:3c:2d:d3:28:0c:ed:17:db:2c:5c:8f:ab:
e4:87:b8:bc:fb:b1:75:10:eb:a5:a8:53:1c:ef:0c:
2c:94:d8:05:5f:58:1f:fa:ca:e9:0d:e7:75:74:32:
64:b1:73:64:81:a4:5a:20:74:a2:5e:cf:59:6e:18:
e2:d8:8a:b9:a6:cd:60:63:75:d5:e7:1c:1b:5c:a7:
6c:84:1e:cc:5a:fd:7a:d8:96:8a:9c:c4:81:fd:ef:
2c:b8:1e:ed:9e:82:1b:be:b8:54:30:d2:98:d3:de:
d7:c4:ae:b8:40:89:61:8c:4e:5b:e7:5b:50:ef:2c:
29:83:b7:79:2b:e2:a8:1e:2f:64:8e:53:4c:64:d1:
0e:51:0c:5d:1f:59:3b:a9:10:c8:5d:ea:72:04:fc:
15:8e:18:04:3b:8f:57:3f:1b:cf:45:50:b0:9f:e4:
fd:63:49:15:f9:82:af:4c:ac:e8:9d:56:4c:45:e7:
69:e8:76:f8:8d:a0:de:d9:ec:c3:cf:ee:30:57:ed:
f4:7e:72:0f:49:e0:f4:e6:a3:44:79:4d:ed:d9:02:
61:a5:38:2b:0c:08:82:c1:ce:32:13:c3:40:a3:50:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:F3:09:91:C6:D4:C5:8C:31:53:F9:CD:68:74:DE:61:CE:10:A0
X509v3 Authority Key Identifier:
keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133392e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.139.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4b:68:1a:f6:3b:eb:cf:c1:28:6c:26:a1:62:b7:45:80:7f:
aa:4b:d1:ad:92:5a:d1:03:a4:ef:0c:bb:b1:02:19:60:67:63:
24:43:ca:c0:50:17:f3:59:94:2e:37:03:a2:a0:30:c6:88:fe:
ac:24:5c:cd:f0:1b:a5:04:7d:b2:fb:b1:c1:d1:bc:de:de:97:
81:5f:f5:e5:ec:e4:73:44:7e:85:ca:c5:f9:67:58:36:2d:58:
5e:57:85:f5:5f:bb:d0:88:d5:a5:19:40:49:05:cb:c1:8c:7e:
63:30:83:46:23:f3:3c:dc:a1:bf:d0:bd:d9:78:a0:46:90:4e:
15:6e:ce:68:d1:a6:ce:e5:a8:42:b0:6c:84:75:97:fc:ad:3c:
12:e9:95:04:db:ba:13:87:7c:c2:49:55:c4:e5:f3:4f:e4:46:
eb:a7:64:88:81:e0:13:e3:e5:85:80:f1:c6:b4:36:ab:22:14:
3b:d8:a2:fc:8b:b1:07:d2:15:5e:b5:2f:80:3a:0a:4f:39:bd:
e3:59:24:eb:10:8f:c3:39:e8:93:45:ed:c8:5b:92:64:88:d0:
95:d4:74:62:87:77:30:7b:cb:6f:5f:b6:f6:22:dd:05:99:7a:
f7:9a:f7:da:bf:70:78:b3:f4:81:fa:7f:0b:17:d3:f1:ca:ec:
a5:e4:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:46 2026 by rpki-client