
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa
File: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (raw, json)
Hash identifier: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=
Subject key identifier: 9D:2B:26:FE:28:02:8C:90:62:50:99:1F:2C:F3:9E:70:28:7D:45:40
Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial: 4A1201ED7062EACE28A40BC478485E4EBBC57EE2
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa
Signing time: Wed 10 Jun 2026 02:45:29 +0000
ROA not before: Wed 10 Jun 2026 02:40:29 +0000
ROA not after: Wed 09 Jun 2027 02:45:29 +0000
asID: 55962
IP address blocks: 103.107.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:12:01:ed:70:62:ea:ce:28:a4:0b:c4:78:48:5e:4e:bb:c5:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Validity
Not Before: Jun 10 02:40:29 2026 GMT
Not After : Jun 9 02:45:29 2027 GMT
Subject: CN=9D2B26FE28028C906250991F2CF39E70287D4540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:0c:62:e4:48:a3:c9:5a:33:32:84:18:85:
b5:d6:27:8d:d6:bb:73:82:ee:81:aa:68:df:37:9d:
b4:f2:0d:7e:56:6a:bf:0b:2b:6e:fc:ef:4a:83:bd:
bb:09:97:53:cc:e0:12:34:cc:9d:c3:95:83:3c:58:
fb:5e:0f:06:29:5d:4b:a8:ee:ba:69:0d:fb:68:15:
61:46:d4:e6:5d:75:63:b8:6d:59:9e:99:6f:82:55:
d6:97:26:b8:d6:d7:d9:d7:87:ff:23:d0:9c:fc:61:
c6:82:39:cb:58:c6:b8:a4:dc:f3:6c:7f:11:fd:fb:
91:32:90:ba:59:ab:e3:62:23:2f:23:c1:4a:fe:cd:
9e:48:a5:3f:f5:67:f2:81:f0:30:c7:bd:01:94:60:
44:ca:7a:54:e1:73:a7:64:fc:b7:29:67:d1:bc:71:
f8:43:a7:2c:b1:0c:75:1d:96:af:6c:7f:e0:9b:3c:
30:64:db:82:be:66:6b:1b:69:21:4f:13:d1:c7:28:
6b:44:88:21:29:21:1b:3c:e6:be:ab:8a:5c:02:6a:
fb:ba:c6:cc:08:de:7a:a8:3b:1b:44:16:5a:ad:b3:
3d:e9:a0:73:dd:e9:b7:28:00:8e:78:80:4b:f6:1a:
60:d5:8d:3e:00:34:d7:b4:0c:00:4e:4e:e4:cd:92:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:26:FE:28:02:8C:90:62:50:99:1F:2C:F3:9E:70:28:7D:45:40
X509v3 Authority Key Identifier:
keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:5b:d7:55:c5:5a:8e:24:2d:06:74:3f:07:57:85:98:82:4b:
b7:3c:78:f1:72:42:2d:05:df:99:23:14:39:e2:59:ec:ef:d3:
91:33:2e:7e:15:05:d5:6f:24:c6:a0:ff:fe:10:1f:1e:a1:a8:
99:cd:36:7f:81:dd:2e:5e:62:ec:7d:27:7f:ca:fd:dd:a7:82:
cc:09:0a:5e:f5:87:8d:70:4d:83:e0:d6:57:73:69:e9:a6:7d:
b1:fb:e9:f2:c4:34:99:b3:26:f7:bf:e5:af:70:91:12:1a:d2:
12:c6:14:f8:aa:4d:7f:7c:e2:dd:fd:ce:cf:73:76:6e:81:c1:
40:75:f2:d8:d6:51:f1:2f:0f:11:b8:14:5f:c2:e7:46:51:6d:
a0:62:c8:59:a4:46:a9:ce:88:5b:eb:ec:43:ee:41:c8:99:4a:
ae:de:9d:98:5d:ba:3f:0e:58:94:ce:7d:2d:a0:37:7c:ae:a8:
e5:8f:36:6c:1f:0f:bb:ce:bf:53:77:de:3f:d8:d3:85:d9:b8:
54:1e:12:77:ef:5a:4c:5e:bf:67:5b:a7:c6:d7:fd:c3:f2:1b:
0e:cc:b5:3a:99:62:54:0e:47:e4:2c:0b:ad:4d:3e:26:5f:32:
f2:3a:c8:e3:ad:c8:53:4b:63:18:1c:5d:67:fa:92:29:b3:35:
83:5c:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:52 2026 by rpki-client