
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3234342e36342e302f32322d3232203d3e203538383531.roa
File: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (raw, json)
Hash identifier: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=
Subject key identifier: 38:CB:EC:F5:B2:0C:2A:02:DC:A5:B6:85:82:E4:D5:BB:E3:14:60:95
Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Certificate serial: 4626DDAC9E98B62AEC9490DDA5F9EC2976DD403A
Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3234342e36342e302f32322d3232203d3e203538383531.roa
Signing time: Thu 04 Jun 2026 10:26:11 +0000
ROA not before: Thu 04 Jun 2026 10:21:11 +0000
ROA not after: Thu 03 Jun 2027 10:26:11 +0000
asID: 58851
IP address blocks: 103.244.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:26:dd:ac:9e:98:b6:2a:ec:94:90:dd:a5:f9:ec:29:76:dd:40:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Validity
Not Before: Jun 4 10:21:11 2026 GMT
Not After : Jun 3 10:26:11 2027 GMT
Subject: CN=38CBECF5B20C2A02DCA5B68582E4D5BBE3146095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:5c:49:b6:db:2a:f2:37:37:03:5f:7f:8f:
1a:be:f3:da:70:6f:63:31:b8:71:11:a7:27:0a:34:
53:33:ce:a0:8d:4c:be:d7:bb:e8:a6:83:96:3c:ae:
2c:04:ed:e6:6d:aa:01:c0:55:d9:4f:20:14:98:29:
32:ad:9b:72:1c:e3:1d:9d:97:f9:21:00:6d:d1:31:
28:3f:10:98:0a:f3:4a:55:a3:83:28:35:1f:1a:3e:
8b:14:44:83:6c:d5:1f:f8:fa:45:80:66:45:10:3b:
4e:a2:69:c7:ee:a0:f9:79:a3:7f:e3:73:e2:45:ec:
f6:4b:40:a2:9e:2a:0f:75:3c:74:18:a1:52:db:d3:
f8:13:45:60:0c:58:b1:7c:9e:22:f7:2b:59:90:e1:
64:08:90:c1:17:5d:3e:3a:02:59:57:9b:ff:4c:c4:
79:53:d0:e3:92:45:d2:6b:c6:28:fe:6e:01:aa:af:
b8:b3:62:b7:88:41:4b:e3:5a:fd:cf:29:54:4a:2e:
af:a4:5b:46:dd:d3:f8:14:44:fc:e2:87:91:81:cf:
69:4d:08:4c:95:98:05:15:ff:9c:fe:79:e0:70:60:
9c:d2:46:b5:9e:a2:74:59:40:1f:d7:c7:a4:13:90:
50:bd:89:ca:4e:ed:9e:58:3e:d6:b6:49:af:ac:1e:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:EC:F5:B2:0C:2A:02:DC:A5:B6:85:82:E4:D5:BB:E3:14:60:95
X509v3 Authority Key Identifier:
keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3234342e36342e302f32322d3232203d3e203538383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.64.0/22
Signature Algorithm: sha256WithRSAEncryption
94:19:8b:a2:c7:41:a6:29:68:05:a3:fa:06:89:af:d4:0b:01:
85:06:c6:f3:cb:9e:8e:46:04:76:6c:ce:a5:39:57:4b:c4:d5:
6a:87:64:aa:cd:b0:28:cc:f7:7f:b0:1b:cf:b1:6d:c7:81:68:
35:b9:19:1a:1b:2e:eb:5b:7d:c6:93:33:05:f1:21:0c:06:79:
f0:e6:56:0b:4a:c4:11:99:ed:f9:25:da:dd:60:65:1a:98:9d:
5e:32:92:1a:c9:6b:c6:4c:09:94:87:16:88:39:d0:2b:bb:64:
80:56:ec:bf:a1:6a:53:29:94:64:df:61:30:f2:9c:83:f1:d8:
4e:a3:25:03:ec:71:58:77:53:99:eb:65:e6:2e:6a:2b:ac:00:
db:aa:d2:ec:47:b6:50:91:f9:c4:6d:3c:eb:25:33:60:b2:dc:
7b:ca:4b:da:b8:a5:85:c8:dc:65:b8:b3:d1:3c:e5:1b:1b:a5:
22:5e:87:5e:ea:25:d7:5f:c0:f8:43:b2:bc:81:3b:70:56:2f:
0a:52:5c:25:08:27:20:d1:ef:cc:3c:f1:82:1a:9a:c7:ac:75:
a7:5e:c4:a5:fb:06:9b:23:1e:fa:67:df:21:82:96:d6:83:59:
05:33:fe:a2:64:3e:20:2a:43:be:1a:b2:88:3b:58:60:1c:1a:
fb:aa:a9:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:52 2026 by rpki-client