
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa
File: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (raw, json)
Hash identifier: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=
Subject key identifier: C9:62:88:AF:15:D8:2F:4A:B1:72:93:D4:F7:EE:C0:DB:D4:09:50:9D
Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Certificate serial: 26ACC6AF6B02CD603E6557FCB91138EA7D6663F8
Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa
Signing time: Thu 04 Jun 2026 10:26:11 +0000
ROA not before: Thu 04 Jun 2026 10:21:11 +0000
ROA not after: Thu 03 Jun 2027 10:26:11 +0000
asID: 58851
IP address blocks: 103.254.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ac:c6:af:6b:02:cd:60:3e:65:57:fc:b9:11:38:ea:7d:66:63:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Validity
Not Before: Jun 4 10:21:11 2026 GMT
Not After : Jun 3 10:26:11 2027 GMT
Subject: CN=C96288AF15D82F4AB17293D4F7EEC0DBD409509D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:03:4e:bd:67:e8:01:4e:5c:2d:95:8d:b1:
2a:62:be:54:f2:6b:2a:cf:15:04:aa:2c:23:74:6c:
4f:e3:1b:4d:f0:fd:83:4f:ac:61:f7:2b:27:78:d9:
0f:e2:ef:59:7e:56:d7:3a:ae:fe:41:82:b2:3f:85:
d3:cd:9c:ae:3f:63:46:70:ca:45:6d:c9:90:2c:92:
e3:57:fd:88:2c:9a:90:04:5f:09:61:9e:f5:09:6c:
80:1e:6e:f0:10:47:30:0e:b5:93:29:ec:0f:b6:0e:
d0:ed:cb:69:24:32:8c:a8:40:d1:48:ab:25:bf:58:
39:02:f6:2f:e7:0f:4d:9a:32:e6:7c:82:57:ff:a0:
6e:1a:77:d0:4f:34:be:c9:05:44:a8:3c:44:4d:56:
ce:e1:4f:00:a5:0e:21:f7:f5:53:f4:b1:fe:f6:94:
1a:c7:0c:d3:d7:4b:17:58:5c:bd:ea:7e:34:cc:ef:
af:a9:3c:29:83:d9:f3:4c:de:d3:65:73:2b:2a:c6:
49:9d:50:30:16:6b:ee:2c:4e:45:82:06:ec:31:53:
5a:2b:63:5f:b6:0a:01:ff:56:34:f3:bf:81:f0:05:
2f:d3:ec:4b:6d:31:da:c8:27:b3:10:07:9e:77:08:
17:f6:0a:c0:58:03:75:28:60:e8:4e:db:e0:34:38:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:88:AF:15:D8:2F:4A:B1:72:93:D4:F7:EE:C0:DB:D4:09:50:9D
X509v3 Authority Key Identifier:
keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:f4:cb:fb:fe:58:08:4d:e7:0c:cf:55:f3:dc:37:77:4a:01:
75:98:dd:e1:a6:b3:92:a8:8f:c1:88:90:1c:c8:54:53:38:4d:
ce:1e:e5:89:5b:82:9d:60:3a:93:7a:3e:ba:b8:cb:4f:5d:24:
ee:37:8b:62:f0:5e:6e:39:82:4d:09:e4:e5:58:da:27:f8:d6:
7b:43:8d:84:90:3b:ae:53:8e:3b:82:9f:38:8e:1a:79:e4:e3:
21:6d:71:70:24:54:7d:6a:e7:3b:2f:21:df:aa:cb:78:a3:79:
a3:9a:37:a2:7a:e1:ac:03:dc:d7:c4:22:e9:4f:ae:03:ef:d7:
7f:db:fa:1b:59:61:71:48:02:ae:0f:fe:56:ab:62:cd:57:81:
f3:ba:c4:d1:de:cb:77:c0:29:80:ad:7b:e7:da:18:71:d1:43:
4d:62:8a:cd:f6:62:ad:64:34:d9:4c:5f:02:c1:f9:bd:c9:02:
66:56:52:db:9e:bb:dc:b2:03:c2:e1:0e:96:c4:dd:6d:4e:97:
98:28:02:01:a9:d3:69:51:57:26:5a:d4:ea:b8:b4:e3:2a:6e:
0e:07:32:55:8b:46:72:d9:28:13:60:8c:26:a8:f9:19:96:7e:
46:6f:79:61:ad:00:46:b7:2f:db:61:48:15:ee:53:07:f9:60:
ce:af:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:01 2026 by rpki-client