
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39342e302f32342d3234203d3e203633363037.roa
File: 3130332e3232302e39342e302f32342d3234203d3e203633363037.roa (raw, json)
Hash identifier: dF3MhDLHJCBnFN0dFuW4PMjSjk2cUkM6SlKWWnqD9rE=
Subject key identifier: 9B:36:BC:B5:FE:0C:A7:96:ED:7C:37:95:24:E4:D8:98:0B:E2:F8:56
Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
Certificate serial: 12898DA0ACD1D6C45437E683E42B4AC05864795D
Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39342e302f32342d3234203d3e203633363037.roa
Signing time: Fri 26 Jun 2026 04:32:02 +0000
ROA not before: Fri 26 Jun 2026 04:27:02 +0000
ROA not after: Fri 25 Jun 2027 04:32:02 +0000
asID: 63607
IP address blocks: 103.220.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:89:8d:a0:ac:d1:d6:c4:54:37:e6:83:e4:2b:4a:c0:58:64:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
Validity
Not Before: Jun 26 04:27:02 2026 GMT
Not After : Jun 25 04:32:02 2027 GMT
Subject: CN=9B36BCB5FE0CA796ED7C379524E4D8980BE2F856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:8d:75:87:e7:c7:c0:1c:85:44:0d:8b:80:
c6:41:31:20:bc:cd:fe:72:7b:0d:33:99:24:d6:da:
dc:7d:30:b4:34:3f:43:5b:ff:20:2d:15:74:ae:fc:
07:02:16:58:23:79:fc:77:7f:b6:7c:58:dd:06:13:
eb:c3:55:bc:48:5d:57:41:5c:34:1c:c4:da:9f:71:
84:22:fa:92:d7:30:69:d5:5e:a1:4e:7a:de:39:f4:
32:7d:fb:bd:2b:9a:bd:89:1f:8f:49:0e:8b:0f:69:
59:fd:61:aa:a9:82:73:6e:03:9b:58:ab:4c:2e:5e:
b8:61:05:55:63:40:98:46:10:2c:9c:57:4c:12:52:
16:1f:22:08:66:1b:54:1b:9b:13:01:b9:44:e3:92:
4b:ad:a6:85:b2:22:5e:ba:25:be:99:7d:90:6d:83:
1d:43:3e:d1:08:0f:58:0f:d9:76:01:18:ec:3f:02:
24:01:92:ed:60:f3:c0:05:d8:9b:ae:0f:49:eb:a3:
66:fd:c2:ec:a2:b8:9c:5c:a8:69:26:cd:99:b2:90:
13:08:c7:e6:93:e4:6b:10:b8:1a:bf:c3:9a:86:86:
c7:d2:58:15:ee:02:7b:7a:1b:65:df:67:bb:7a:ac:
88:2b:5e:7a:ec:dd:56:f0:09:b5:ba:49:9b:8f:e8:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:BC:B5:FE:0C:A7:96:ED:7C:37:95:24:E4:D8:98:0B:E2:F8:56
X509v3 Authority Key Identifier:
keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39342e302f32342d3234203d3e203633363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:35:50:50:2a:c3:08:74:39:97:7c:34:94:60:30:06:41:e3:
c2:a3:0c:87:29:43:ba:3a:5c:4a:95:d8:ba:8c:ec:df:c2:94:
f6:a7:d9:67:02:23:31:28:a9:61:7e:23:4d:bd:7e:8a:37:2c:
94:5f:e7:7b:7a:09:f1:e1:60:dd:78:05:58:8b:c3:93:c0:70:
b9:24:9e:00:b4:21:fc:db:0c:62:36:ca:26:3f:3e:4f:da:13:
7c:ef:20:00:0b:64:fd:82:a9:4b:bd:a7:36:d2:83:8d:a6:eb:
fe:59:ea:ca:4f:f9:ae:91:9f:b2:fb:fb:52:25:54:f2:ff:65:
2b:95:43:66:b2:57:d6:fd:62:1e:0d:1b:f7:2d:54:a8:df:a2:
f5:be:d1:94:0f:be:7e:0e:b3:0c:af:6c:b2:ff:8f:ab:31:21:
75:9c:f7:a3:48:32:73:97:79:58:70:aa:6f:f8:b4:ec:f2:4d:
30:73:65:91:78:f9:3d:c0:8f:51:c0:5a:37:c0:88:e1:1e:bd:
d9:0b:0d:a6:9b:73:b2:10:30:73:a3:6c:20:85:02:ad:a4:20:
f9:74:95:3a:7b:02:75:26:e2:2f:ef:3a:3b:2f:d2:cf:01:60:
21:4c:4a:27:fa:53:4d:fc:e2:1f:98:ad:f7:59:b0:37:de:4a:
11:96:06:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:23 2026 by rpki-client