
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa
File: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=
Subject key identifier: 8D:05:9E:62:46:62:36:23:2F:61:49:85:A2:4B:29:AE:2E:C8:9A:F7
Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial: 06FB91C4DCF46F5D718A6CA496CB5AB862B5E6DF
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa
Signing time: Wed 10 Jun 2026 02:45:29 +0000
ROA not before: Wed 10 Jun 2026 02:40:29 +0000
ROA not after: Wed 09 Jun 2027 02:45:29 +0000
asID: 23724
IP address blocks: 103.107.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fb:91:c4:dc:f4:6f:5d:71:8a:6c:a4:96:cb:5a:b8:62:b5:e6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Validity
Not Before: Jun 10 02:40:29 2026 GMT
Not After : Jun 9 02:45:29 2027 GMT
Subject: CN=8D059E62466236232F614985A24B29AE2EC89AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:bf:3f:31:7e:d2:ec:28:27:8a:1e:6b:75:
8e:09:f2:10:7e:38:ea:cf:9e:f8:3a:17:e2:e8:06:
ca:48:38:1d:cb:0a:38:23:36:31:3c:54:9b:29:fb:
53:e0:0b:84:23:71:6d:65:d9:8b:6b:14:66:0d:b7:
a9:92:e2:e2:2b:93:3e:34:92:75:ad:6f:31:7c:8e:
0e:49:ff:69:c1:08:25:37:91:4d:5e:a4:2a:8b:35:
ff:b1:7a:f2:9e:e9:8a:51:51:3e:48:75:8a:26:fe:
78:f0:6a:d9:b6:90:33:a0:59:a1:6a:1d:38:a5:ef:
82:d0:37:6f:1e:8d:df:56:d9:82:91:d9:6f:c0:15:
24:eb:b1:0f:ba:10:4d:b1:3d:71:5c:2b:2c:b7:76:
34:4b:5f:0e:da:1e:02:93:de:1b:8a:8e:7e:ea:37:
a9:49:e1:9a:36:06:bd:13:67:b7:97:84:c5:c3:74:
bd:4d:c6:86:8b:a4:a2:08:c3:a9:9f:de:4d:56:ab:
2f:70:f4:8f:d1:2b:0f:00:15:99:ee:b0:f8:09:0c:
65:81:b9:b1:47:6c:e6:30:d4:48:24:8f:b3:5c:1b:
44:c3:18:b8:01:0e:7b:9b:6e:8b:9c:8f:97:31:91:
f5:75:c7:6c:31:f7:b0:31:14:81:bd:e5:a5:f0:12:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:9E:62:46:62:36:23:2F:61:49:85:A2:4B:29:AE:2E:C8:9A:F7
X509v3 Authority Key Identifier:
keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.220.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:2e:ed:8b:ed:54:57:b4:89:13:e7:ce:95:c1:24:ac:49:df:
1d:28:16:15:4d:ff:0b:4d:07:64:5b:30:9c:6a:bd:9a:28:30:
0c:86:cf:89:cf:13:1e:6f:76:9d:51:da:fc:17:43:cf:0a:91:
ef:4c:70:6f:be:0a:a3:81:94:c2:d1:bd:6a:40:54:9f:fa:38:
0a:db:ba:9e:1e:9f:6f:c5:fa:67:eb:76:4a:00:cc:f4:4c:29:
ea:b1:5f:7f:1d:9c:77:d2:13:c2:35:b8:ba:14:85:56:56:98:
ba:fc:9b:c4:95:86:ea:74:69:e5:d9:e2:fc:93:45:9c:09:bb:
77:7c:63:51:6f:d7:ae:54:5d:83:b5:ac:e4:12:b3:55:ef:bf:
a8:15:e7:47:21:ff:01:7d:9c:fa:5e:03:82:d1:4a:5d:c0:83:
84:08:4a:83:3d:55:eb:e8:aa:74:cf:bb:4a:e3:4d:29:d4:73:
15:e2:71:ee:6c:6b:44:af:09:17:77:65:5a:6c:f3:a0:32:bf:
81:59:cf:6b:71:40:16:8a:b0:72:22:dd:88:6c:1f:23:91:13:
95:54:4d:99:63:43:24:42:5e:e0:8c:64:9e:2b:2a:8a:aa:62:
31:53:b2:15:ee:6c:66:61:f4:9f:fa:ab:c0:3f:65:70:46:1e:
1a:f4:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:51 2026 by rpki-client