
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e39302e39322e302f32322d3232203d3e2034383337.roa
File: 3130332e39302e39322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: HeELIibQjdB/YiCqqdaacT4PC7Dm5AjsEU5uW8nkqwg=
Subject key identifier: 84:8A:3B:D5:A1:B0:2F:CD:81:1C:21:D8:A1:14:F5:A4:96:AA:44:5C
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 0ABE615DC4767E271163F78D089BA16C82A7E49A
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e39302e39322e302f32322d3232203d3e2034383337.roa
Signing time: Wed 03 Jun 2026 06:30:11 +0000
ROA not before: Wed 03 Jun 2026 06:25:11 +0000
ROA not after: Wed 02 Jun 2027 06:30:11 +0000
asID: 4837
IP address blocks: 103.90.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:be:61:5d:c4:76:7e:27:11:63:f7:8d:08:9b:a1:6c:82:a7:e4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:25:11 2026 GMT
Not After : Jun 2 06:30:11 2027 GMT
Subject: CN=848A3BD5A1B02FCD811C21D8A114F5A496AA445C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:d2:39:55:a0:92:de:40:a6:c1:b8:cc:65:
04:d7:c5:2f:6e:ca:02:0b:70:1a:93:86:2b:f3:7e:
5f:4e:93:81:0d:ef:9c:13:88:6d:23:33:41:11:be:
5c:a1:98:b5:7a:ed:a9:84:76:38:e7:d6:2c:e1:d2:
8f:42:13:02:f4:cc:04:f2:e1:62:71:db:52:82:00:
b3:07:81:37:25:c8:a9:8e:79:4f:98:81:81:46:0f:
7d:17:16:7f:a1:32:9e:da:92:a9:39:1a:58:0b:88:
43:50:82:76:6d:ac:d1:20:d6:9c:93:67:d1:7f:0c:
b0:d8:b2:f8:3c:9b:ea:97:6c:d5:ac:3e:6a:19:ce:
73:b8:50:f9:1e:79:73:48:78:8e:38:db:dd:13:45:
5a:e1:45:69:30:96:6b:ab:ec:08:ee:17:7e:59:87:
c7:b8:ae:d9:64:67:a5:e0:03:62:83:c9:23:cc:c3:
05:c7:0d:d3:1d:0f:a7:13:9a:47:a9:0e:9a:07:76:
11:19:09:ec:82:70:b1:47:03:af:dc:16:7f:71:78:
ed:2e:1d:8e:c1:5e:73:53:f7:cb:56:17:b7:c0:08:
68:de:59:87:13:b4:26:07:c7:f7:d7:0f:20:b0:a1:
e7:44:ea:c5:5e:e8:97:90:02:b7:3e:56:0d:46:a8:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:3B:D5:A1:B0:2F:CD:81:1C:21:D8:A1:14:F5:A4:96:AA:44:5C
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e39302e39322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:b3:52:48:84:2b:3b:a9:ab:7c:a4:65:d7:96:35:2b:a4:d6:
62:78:a3:74:f1:d1:60:eb:13:c0:35:46:a7:4a:77:8c:39:b3:
af:ff:b2:3a:de:10:20:ed:2c:77:91:b9:73:c7:d0:4c:c3:a7:
12:9f:83:b1:63:f4:77:9c:16:15:41:48:a8:0d:77:76:6c:f4:
56:47:02:ff:63:2f:f3:4e:ea:8d:30:00:6c:58:a1:2b:f6:3f:
db:c9:69:1c:5e:d6:a7:43:c9:aa:e6:07:2d:e7:91:0b:c0:5f:
d7:4b:b0:e3:f3:ee:40:23:de:d9:97:10:85:4c:f0:fe:20:f7:
75:85:cd:11:a3:d0:1c:8d:fa:bf:83:66:4b:2a:c2:fd:40:9a:
ae:46:c8:f9:99:82:2b:a5:a6:2a:b9:7e:5e:98:e2:74:af:10:
a8:d7:9e:16:78:31:ba:6a:32:93:ee:98:ee:72:46:f3:5e:a0:
2d:dd:b4:83:96:60:63:ce:3e:b9:11:3f:56:b6:3a:51:53:7d:
7b:2e:bd:c8:75:8e:94:71:e0:c7:33:21:f6:65:c0:31:3e:c2:
dd:59:fd:d5:85:5d:7c:b8:32:be:42:ac:54:cc:de:54:ee:ec:
52:a9:70:a0:ef:0e:c8:f2:ae:44:74:ac:03:2c:53:ff:3e:6b:
39:24:6d:ab
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUCr5hXcR2ficRY/eNCJuhbIKn5JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjI1MTFaFw0yNzA2MDIwNjMwMTFaMDMxMTAvBgNV
BAMTKDg0OEEzQkQ1QTFCMDJGQ0Q4MTFDMjFEOEExMTRGNUE0OTZBQTQ0NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxW9I5VaCS3kCmwbjMZQTXxS9u
ygILcBqThivzfl9Ok4EN75wTiG0jM0ERvlyhmLV67amEdjjn1izh0o9CEwL0zATy
4WJx21KCALMHgTclyKmOeU+YgYFGD30XFn+hMp7akqk5GlgLiENQgnZtrNEg1pyT
Z9F/DLDYsvg8m+qXbNWsPmoZznO4UPkeeXNIeI44290TRVrhRWkwlmur7AjuF35Z
h8e4rtlkZ6XgA2KDySPMwwXHDdMdD6cTmkepDpoHdhEZCeyCcLFHA6/cFn9xeO0u
HY7BXnNT98tWF7fACGjeWYcTtCYHx/fXDyCwoedE6sVe6JeQArc+Vg1GqMpzAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUhIo71aGwL82BHCHYoRT1pJaqRFwwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzEzMDMzMmUzOTMw
MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnWlwwDQYJKoZIhvcNAQELBQADggEBAKKzUkiEKzupq3ykZdeWNSuk1mJ4o3Tx
0WDrE8A1RqdKd4w5s6//sjreECDtLHeRuXPH0EzDpxKfg7Fj9HecFhVBSKgNd3Zs
9FZHAv9jL/NO6o0wAGxYoSv2P9vJaRxe1qdDyarmBy3nkQvAX9dLsOPz7kAj3tmX
EIVM8P4g93WFzRGj0ByN+r+DZksqwv1Amq5GyPmZgiulpiq5fl6Y4nSvEKjXnhZ4
MbpqMpPumO5yRvNeoC3dtIOWYGPOPrkRP1a2OlFTfXsuvch1jpRx4MczIfZlwDE+
wt1Z/dWFXXy4Mr5CrFTM3lTu7FKpcKDvDsjyrkR0rAMsU/8+azkkbas=
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:24 2026 by rpki-client