
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37372e32382e302f32322d3232203d3e2034383038.roa
File: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=
Subject key identifier: E8:C4:2C:08:27:8B:72:F3:31:18:2C:89:73:CE:40:A3:99:1A:30:87
Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial: 2CD6B3F11DA2A8F91DD37835E5E95A6555FE7264
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37372e32382e302f32322d3232203d3e2034383038.roa
Signing time: Mon 15 Jun 2026 06:52:23 +0000
ROA not before: Mon 15 Jun 2026 06:47:23 +0000
ROA not after: Mon 14 Jun 2027 06:52:23 +0000
asID: 4808
IP address blocks: 103.77.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d6:b3:f1:1d:a2:a8:f9:1d:d3:78:35:e5:e9:5a:65:55:fe:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Validity
Not Before: Jun 15 06:47:23 2026 GMT
Not After : Jun 14 06:52:23 2027 GMT
Subject: CN=E8C42C08278B72F331182C8973CE40A3991A3087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:06:ed:c8:ec:9e:6a:aa:e3:92:eb:13:46:
78:c7:d5:c2:03:d1:b6:c3:55:49:4f:a0:ed:62:e7:
2a:4c:42:f9:4f:40:a4:87:8c:e8:a4:c4:49:38:87:
31:67:fe:9b:ed:cf:c6:1e:79:be:ef:9f:84:1a:e2:
26:32:5c:0a:fe:ab:91:88:8a:c6:c9:49:94:d0:40:
30:d8:45:9a:1b:ab:b4:8f:c3:89:3f:e3:0d:f1:5e:
7b:52:3d:57:e4:20:fa:dd:d5:6f:dc:ff:35:a5:0c:
17:de:b8:bd:0d:46:6c:1a:5f:9b:51:c6:36:d6:94:
6b:ca:82:85:89:24:47:18:1c:9a:91:5f:7d:94:bb:
2d:dd:ce:4f:5f:42:49:22:14:f9:97:0d:b9:9b:62:
e1:bc:f3:8b:25:32:7b:50:e2:a7:27:5f:68:e0:c6:
90:f5:27:d3:70:32:31:df:74:29:34:7a:47:fb:6a:
8f:bd:9b:31:ee:15:de:a8:bb:ea:0b:13:9c:c2:6e:
2f:57:0c:3c:40:66:67:36:b4:58:6b:cc:e7:e2:67:
c5:51:e8:42:3a:2c:82:62:61:45:11:66:4b:bc:c6:
f5:34:f8:0d:58:eb:5d:81:10:05:77:92:0b:86:2e:
c5:39:e7:51:f4:0c:c1:1e:ba:fa:05:29:39:83:71:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:2C:08:27:8B:72:F3:31:18:2C:89:73:CE:40:A3:99:1A:30:87
X509v3 Authority Key Identifier:
keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37372e32382e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:9c:51:4f:36:38:59:5c:ed:8e:48:86:3c:d6:9f:a6:ba:66:
6b:f8:a7:88:df:bc:21:00:ac:92:58:45:46:58:9e:89:c4:0a:
94:c9:76:ab:88:78:c5:a3:2a:4f:d6:38:c2:37:ee:2f:be:02:
a6:64:3d:71:8b:c1:fb:e6:9b:1b:7a:11:04:cb:4c:2b:4a:91:
fd:c3:c8:bc:c8:e5:c4:3a:a4:6f:44:39:11:dd:f5:93:b3:31:
c2:0c:8b:b0:00:98:8c:fc:10:d1:c3:41:ff:c4:78:2f:02:1b:
f5:6e:22:30:2e:44:b1:56:e8:da:ee:89:ee:06:67:6d:d0:b8:
4e:ca:87:ba:77:a9:63:2f:4f:0a:ba:2f:d5:80:be:f9:6d:59:
ac:91:63:b5:dd:c8:43:3e:f7:e8:d7:ed:06:c2:12:7b:a7:37:
38:86:07:cf:d7:cd:73:4c:15:3f:f6:04:5a:c9:60:ee:24:0a:
bc:a8:a4:a3:93:db:af:0b:76:e2:05:7f:ec:49:65:96:21:ea:
16:20:e3:66:6a:9c:25:05:05:94:99:b5:da:b3:e5:20:6a:d7:
28:cd:9c:5b:9b:b5:81:30:5d:6b:81:0b:a3:fb:1b:52:c0:11:
67:af:1a:5a:03:d0:0c:30:e3:22:e1:7e:d0:38:d3:51:29:26:
34:3a:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 18:14:45 2026 by rpki-client