
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3130332e3135322e37362e302f32332d3233203d3e2034383337.roa
File: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=
Subject key identifier: 57:3B:98:44:D7:E5:6D:2A:09:21:30:9F:14:13:59:84:E2:EB:00:99
Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E
Certificate serial: 3A8E8B0B61D1DE22A61011B11A2539B488994641
Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3130332e3135322e37362e302f32332d3233203d3e2034383337.roa
Signing time: Thu 11 Jun 2026 01:44:02 +0000
ROA not before: Thu 11 Jun 2026 01:39:02 +0000
ROA not after: Thu 10 Jun 2027 01:44:02 +0000
asID: 4837
IP address blocks: 103.152.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl
rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8e:8b:0b:61:d1:de:22:a6:10:11:b1:1a:25:39:b4:88:99:46:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E
Validity
Not Before: Jun 11 01:39:02 2026 GMT
Not After : Jun 10 01:44:02 2027 GMT
Subject: CN=573B9844D7E56D2A0921309F14135984E2EB0099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:4b:98:0a:75:d4:4a:c7:9f:5a:87:56:77:
0f:7f:5d:23:bc:a5:10:0b:ed:2f:3c:ee:89:b9:9b:
ab:54:4e:ee:4f:61:a7:91:65:52:b1:56:81:5d:1a:
7e:1c:aa:d5:37:72:36:0e:54:6f:e5:cd:48:b5:23:
94:de:77:cb:90:3c:05:63:8e:9f:2c:b4:eb:36:de:
44:ea:56:4d:e3:7a:55:93:df:38:7b:59:b9:46:38:
5a:67:ee:b8:9f:44:a3:11:0f:ab:26:73:7b:21:0c:
7a:18:bc:ad:66:bd:0c:25:eb:b6:65:8d:fe:ba:24:
fa:f4:41:75:92:fb:d3:cd:f1:4a:4b:56:8b:b5:34:
e1:a9:11:f3:c4:af:9d:b0:da:f0:35:3a:0a:f1:17:
2a:05:53:1f:99:3d:a5:1a:1c:5c:d2:e2:3b:7c:b7:
a1:29:75:a7:c2:92:21:39:2e:6e:17:2a:cb:c7:54:
bd:7a:2d:8c:44:89:e5:53:ab:61:e5:35:b7:8b:69:
a8:65:60:11:d0:ac:77:eb:d0:1b:9b:06:b6:9d:08:
97:94:83:c5:08:e3:8c:6b:13:89:10:b6:4b:a2:2a:
60:40:ae:0a:ee:d5:90:56:9f:e7:76:f7:28:c7:ed:
51:e2:a5:1d:c5:50:df:40:13:ff:33:04:cb:81:b6:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:98:44:D7:E5:6D:2A:09:21:30:9F:14:13:59:84:E2:EB:00:99
X509v3 Authority Key Identifier:
keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3130332e3135322e37362e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.76.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:6b:e3:af:9f:51:9f:ec:54:0e:65:e6:c7:f3:a4:53:f2:2d:
71:bd:3f:87:61:87:7d:73:4c:0e:49:c3:ee:63:85:f8:da:d7:
b3:7c:d1:c9:24:29:64:53:9f:12:83:a1:5e:5e:9c:ad:61:4d:
8b:04:a3:0e:38:87:0f:b3:95:45:cc:fb:28:3b:78:23:d5:56:
17:cc:24:5e:28:36:f9:11:88:6b:ac:e0:68:67:87:0a:1f:23:
7a:05:32:d2:5a:57:30:4b:ed:d6:38:b7:95:79:68:ed:1a:a0:
4c:25:a0:c1:05:21:28:90:2d:2b:29:eb:49:97:ff:50:e6:df:
9d:4a:e1:31:80:74:cd:25:93:6e:65:f6:0d:93:27:aa:be:bb:
4c:c3:20:41:67:45:7c:6f:d8:04:59:cf:08:3c:d2:c3:d4:45:
ee:4b:1a:90:62:e8:84:c9:58:df:13:bc:7e:dc:ab:8b:c5:25:
c9:54:4f:4c:e2:c1:fa:42:45:4f:68:1a:a0:9f:4f:d4:9d:cb:
17:40:56:5b:bb:0c:f3:33:ec:b4:b6:fe:7d:35:d7:e3:db:07:
0b:37:1f:37:a1:22:72:72:91:16:31:a8:91:43:60:f9:81:0c:
6b:86:1d:a4:e7:cd:da:04:f4:23:58:78:42:aa:56:b7:bd:69:
cc:aa:5a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:24 2026 by rpki-client