
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e34352e37362e302f32322d3232203d3e2034383337.roa
File: 3130332e34352e37362e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: X9suZOFTI4hAQbyKk/ZtiTKsb0H2lNky+6ArzC/DHNI=
Subject key identifier: 51:D1:52:4E:4D:21:4B:ED:29:42:4E:CB:AD:06:1F:A3:5C:00:B9:EB
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 518DFF4CF1A21893590493B9ED2CD3E4C59DFAE3
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e34352e37362e302f32322d3232203d3e2034383337.roa
Signing time: Wed 14 Oct 2026 11:00:05 +0000
ROA not before: Wed 14 Oct 2026 10:55:05 +0000
ROA not after: Wed 13 Oct 2027 11:00:05 +0000
asID: 4837
IP address blocks: 103.45.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 11:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8d:ff:4c:f1:a2:18:93:59:04:93:b9:ed:2c:d3:e4:c5:9d:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Oct 14 10:55:05 2026 GMT
Not After : Oct 13 11:00:05 2027 GMT
Subject: CN=51D1524E4D214BED29424ECBAD061FA35C00B9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:27:c1:65:a1:45:0c:9a:bc:eb:75:4e:31:
68:05:7e:4b:bc:77:74:3a:ba:bd:c3:eb:fd:ca:24:
11:66:75:65:57:fb:6b:0e:20:3b:56:63:36:6f:ce:
0c:93:dc:0b:1f:eb:ce:a6:2f:7a:31:d9:78:43:e1:
cf:75:8c:0d:1e:6b:84:c1:5f:75:b0:0e:92:03:f2:
15:87:7f:18:b1:51:f2:fd:30:ab:d3:5f:0a:7f:c0:
f1:c1:a6:bb:e1:c8:52:89:12:74:e0:ef:a3:05:8a:
a7:68:58:4c:5a:a7:0b:7d:07:e6:ea:db:10:bb:a6:
6a:e6:dc:af:21:7b:c1:a8:2a:b4:89:5a:1f:53:ec:
dc:c3:43:a5:6b:60:68:f3:1c:a5:ee:d2:19:04:0e:
40:40:8f:e5:6d:21:22:05:9e:ee:af:c8:90:12:18:
dc:45:75:04:c4:b5:7b:24:a1:95:e4:ba:07:38:86:
13:98:59:92:73:76:e1:e4:bb:ab:bf:da:ab:d6:1a:
4f:24:dc:05:1a:9a:09:52:58:03:b1:24:54:cd:cb:
3a:ef:ee:89:dd:68:31:e5:ac:16:66:fb:2e:cc:40:
26:6f:a1:7e:5c:51:f3:ab:4e:b7:d0:d6:7c:98:5f:
ee:e9:b8:1d:c7:19:3e:17:43:6a:a0:87:eb:eb:bd:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:52:4E:4D:21:4B:ED:29:42:4E:CB:AD:06:1F:A3:5C:00:B9:EB
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e34352e37362e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.76.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:15:de:1f:c5:87:f7:c3:d4:90:09:d9:87:2b:18:ba:af:07:
79:3a:8a:cf:91:ae:69:7d:95:05:f9:4b:f7:54:b1:ab:eb:02:
f7:a0:16:b8:82:49:79:33:c2:84:e5:73:25:b8:50:8c:dd:b3:
32:75:9e:27:d0:15:bb:22:f2:b8:46:9a:d6:e9:9b:73:3a:33:
e2:de:57:9a:e8:37:2e:e8:04:f9:fa:de:90:22:61:a9:11:98:
fa:c5:da:6b:47:a1:90:e2:2f:b9:68:bc:18:a7:dd:3b:e1:e2:
8d:e2:24:f1:76:b3:29:5a:dd:41:45:d2:c3:09:4d:91:d2:e9:
87:37:47:64:bb:4f:db:c4:d1:d6:f4:52:73:62:81:c6:11:2e:
7c:42:d0:0e:58:27:2f:65:da:f7:da:ea:87:23:c6:d1:49:cd:
12:8e:55:77:2e:ac:0c:f0:b7:b4:cd:d5:7a:80:d5:f0:d5:ba:
48:65:9f:f5:52:b3:c4:37:52:c4:0a:ad:9d:48:17:98:f6:9e:
a4:28:b2:84:55:5e:fa:46:19:80:b3:d1:e2:48:77:d9:65:ee:
53:19:86:fe:29:65:49:cb:49:09:f7:da:18:d2:e0:0e:5d:5f:
d8:81:a9:fe:b1:da:d9:39:c1:7f:56:dd:ff:84:2a:43:87:6a:
51:1e:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:13 2026 by rpki-client