
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa
File: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=
Subject key identifier: A6:FD:9C:49:9C:D4:57:29:9E:B3:AA:C1:F0:DA:C0:D0:71:BE:7A:74
Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Certificate serial: 7AB819858F33EA28B933FCCD71C916EA3F9EE8C6
Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa
Signing time: Wed 03 Jun 2026 08:27:57 +0000
ROA not before: Wed 03 Jun 2026 08:22:57 +0000
ROA not after: Wed 02 Jun 2027 08:27:57 +0000
asID: 4808
IP address blocks: 103.230.212.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b8:19:85:8f:33:ea:28:b9:33:fc:cd:71:c9:16:ea:3f:9e:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Validity
Not Before: Jun 3 08:22:57 2026 GMT
Not After : Jun 2 08:27:57 2027 GMT
Subject: CN=A6FD9C499CD457299EB3AAC1F0DAC0D071BE7A74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:29:2b:fb:f3:fc:39:8d:6c:a4:b7:f3:3a:
ff:22:ba:d1:af:11:1f:da:ac:21:08:b5:0e:ef:0d:
b2:c4:d8:44:53:5e:60:d5:87:51:ec:2a:bd:36:2c:
36:d2:e1:99:aa:03:62:64:b1:e5:6b:26:3f:c4:a4:
1b:7e:27:b1:53:95:a8:e2:d5:3e:7a:2e:c7:d3:dd:
81:a7:75:ac:bc:0a:b9:6d:19:9b:c0:09:12:2e:89:
22:92:1a:a3:27:62:df:0f:3b:f8:f2:74:bb:9f:f3:
20:e9:54:0d:1c:e7:f0:ac:85:0c:a9:1c:7a:96:90:
22:a2:8b:a0:74:e8:ac:79:61:ab:2f:3a:b1:e2:1d:
92:c5:f6:ca:71:8f:af:9f:17:a8:13:f7:7b:c1:99:
10:12:09:ab:62:7a:8c:6b:0f:05:30:62:e4:df:53:
a9:39:cb:c8:1f:36:42:ef:e3:34:9c:7b:17:2d:4e:
7e:a7:b5:a5:bc:a7:4b:46:dc:f4:49:45:51:9e:67:
20:79:92:33:12:7c:c9:c6:68:09:4a:1e:c7:58:42:
74:d2:92:44:e3:fe:b4:fe:e8:65:54:c9:5c:da:60:
6c:7e:e0:3a:67:55:c1:5f:11:46:1a:59:4e:46:90:
81:af:a3:e6:89:a9:3c:53:fe:01:e7:13:06:dd:b7:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FD:9C:49:9C:D4:57:29:9E:B3:AA:C1:F0:DA:C0:D0:71:BE:7A:74
X509v3 Authority Key Identifier:
keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:52:a5:b2:81:9b:06:38:46:59:c6:45:d3:62:d9:62:97:b6:
5a:b2:23:32:fc:b8:ab:0c:47:2e:e1:30:a7:2f:1b:32:89:9a:
75:96:22:68:e1:19:18:a8:85:ab:52:01:6f:a6:eb:be:7f:65:
24:0a:b6:2f:57:47:5b:7b:26:bf:57:73:2c:c5:62:64:d6:1b:
3b:73:8d:49:d2:e7:af:4a:37:e9:ec:07:05:fd:f7:42:21:4d:
03:2b:3b:ef:b5:1f:ff:fa:54:80:be:44:68:43:82:05:5a:bc:
08:ed:22:31:62:44:b4:19:f4:9d:c8:37:af:20:54:0b:cc:d1:
b1:cb:ce:4a:10:21:8a:79:82:24:bc:24:ef:70:b1:9c:7c:fd:
3d:ad:83:ff:ba:d3:78:ec:a0:e2:e9:72:a5:cd:bf:1b:e8:7c:
c6:a5:66:7a:7a:32:3a:67:11:b8:b3:8a:15:c1:d7:57:74:68:
14:d4:4b:0f:91:17:0e:b3:d2:db:57:b0:f6:4d:8b:c2:7d:72:
62:08:cd:70:e4:e6:e7:20:13:51:22:87:d2:a1:55:66:4a:d3:
91:31:f0:90:5e:38:22:ad:71:8c:8d:2d:5d:01:42:84:71:9a:
ee:3f:55:a0:c8:23:cb:10:af:15:11:b9:b1:43:fb:e6:96:be:
18:c5:55:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:19 2026 by rpki-client