
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39322e302f32342d3234203d3e203633363037.roa
File: 3130332e3232302e39322e302f32342d3234203d3e203633363037.roa (raw, json)
Hash identifier: +z+ShcaikWqiaUZb2DYg9PBDgXCkLZavKqWFDF1Jkr8=
Subject key identifier: 4A:C5:9C:B1:C3:D0:D4:93:7D:B4:25:39:DA:7C:BF:3D:41:7C:2F:1F
Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
Certificate serial: 6B62A97048E435680662528DFA10750D631A055A
Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39322e302f32342d3234203d3e203633363037.roa
Signing time: Fri 26 Jun 2026 04:32:02 +0000
ROA not before: Fri 26 Jun 2026 04:27:02 +0000
ROA not after: Fri 25 Jun 2027 04:32:02 +0000
asID: 63607
IP address blocks: 103.220.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:62:a9:70:48:e4:35:68:06:62:52:8d:fa:10:75:0d:63:1a:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
Validity
Not Before: Jun 26 04:27:02 2026 GMT
Not After : Jun 25 04:32:02 2027 GMT
Subject: CN=4AC59CB1C3D0D4937DB42539DA7CBF3D417C2F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:dc:11:8b:aa:05:2d:af:0c:0f:4a:87:47:
a3:98:35:db:ea:01:01:2b:e8:00:d7:c2:9a:c7:7e:
6c:43:de:33:a2:b2:e5:88:a6:68:3c:3c:7c:e3:00:
f4:d7:a3:ac:e0:a9:cb:57:c6:d2:35:4c:67:73:11:
a2:30:20:7f:7b:a5:38:4e:c9:1d:c7:cd:e5:d1:76:
ab:83:f4:b4:6f:44:35:b2:ec:b3:a7:71:2d:7c:27:
cf:89:b8:d8:50:90:43:66:01:80:e1:a3:34:56:f7:
f3:7c:0a:89:f6:70:47:b6:29:12:01:6e:6e:fe:4e:
38:b4:6d:bb:b3:e7:f3:f1:a9:47:68:4f:50:49:de:
c0:1a:f2:e3:c9:52:fc:3c:29:55:d1:80:f4:72:c5:
d5:ff:cc:f7:ef:81:6e:0b:22:f3:c6:70:d8:11:75:
20:5b:4a:03:e2:7f:c3:7b:b9:99:03:94:c0:fe:e1:
b5:66:ab:8b:b3:3d:aa:f6:cd:82:26:ae:e3:70:2b:
ac:12:c0:79:58:59:bb:4a:36:4d:d7:f9:7a:b5:9c:
87:48:61:89:be:7b:e2:41:3b:40:a1:12:98:26:e1:
49:c2:1b:4b:67:f3:6a:f3:ab:7d:64:63:22:fc:d4:
57:d9:b9:52:a3:a4:a1:71:78:dc:3a:2e:3d:dc:08:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:9C:B1:C3:D0:D4:93:7D:B4:25:39:DA:7C:BF:3D:41:7C:2F:1F
X509v3 Authority Key Identifier:
keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39322e302f32342d3234203d3e203633363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.92.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c8:81:d8:9d:0e:8a:08:a2:64:5b:47:09:8c:df:7c:ad:1e:
f5:7d:99:d2:11:3d:f1:13:b9:71:1b:bf:e3:69:6a:63:01:49:
2c:2e:ba:26:07:8a:e0:4e:a4:bc:0d:2c:1f:1f:d4:ad:35:cb:
af:0f:d4:7e:44:0c:20:16:35:98:f5:6f:a5:27:a6:5c:02:06:
d9:ff:d5:f5:88:3a:fc:55:b2:23:1a:06:0a:fd:a1:0d:82:60:
3e:69:b6:e5:8a:0f:24:df:cc:7e:b8:e8:15:4b:c5:b7:23:09:
1d:47:a3:c5:4b:ce:35:cc:9e:ef:a9:d6:66:4b:6f:51:35:9a:
e2:69:61:eb:03:66:2c:a9:f6:e7:78:44:ab:d3:24:f8:c0:c2:
51:70:20:02:43:91:2a:9e:4d:60:66:a1:5a:8d:40:17:4f:33:
51:f5:16:bc:1d:7c:a5:d5:06:7a:38:9e:62:ba:58:0b:49:c5:
c4:52:a8:b4:16:45:a5:db:5b:ab:bb:ad:38:39:df:4a:cf:bf:
9e:fb:45:99:45:08:0c:e2:9e:f3:b2:e2:a5:10:85:28:b4:90:
d3:35:32:98:97:49:9d:08:f4:91:a9:4c:9b:65:69:f1:c7:40:
da:c7:06:98:b2:00:7d:87:8f:c0:ff:4b:14:73:e9:98:bf:64:
9a:a8:5f:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client