
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123281325843808295/0/3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa
File: 3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa (raw, json)
Hash identifier: JkhFH/THm9PGFP3jbTiekW7qVacmJjfKOzsxGbPKmW8=
Subject key identifier: 44:D8:2C:48:55:BE:47:4C:B4:BA:EE:4C:9D:AE:BA:D1:BE:6B:54:23
Certificate issuer: /CN=209BC812EEDDC6074713463D5583CB221EADC76F
Certificate serial: 2A3BDC7014906BF0307467B35E9D7768E0DA6F52
Authority key identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa
Signing time: Sat 27 Jun 2026 16:02:37 +0000
ROA not before: Sat 27 Jun 2026 15:57:37 +0000
ROA not after: Sat 26 Jun 2027 16:02:37 +0000
asID: 131519
IP address blocks: 103.94.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl
rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:3b:dc:70:14:90:6b:f0:30:74:67:b3:5e:9d:77:68:e0:da:6f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209BC812EEDDC6074713463D5583CB221EADC76F
Validity
Not Before: Jun 27 15:57:37 2026 GMT
Not After : Jun 26 16:02:37 2027 GMT
Subject: CN=44D82C4855BE474CB4BAEE4C9DAEBAD1BE6B5423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:91:47:8d:a5:5c:ff:2f:8b:5c:97:bc:17:
c8:a8:99:bb:94:80:d9:98:6e:d6:27:83:3c:bc:34:
e3:31:0d:d4:45:d6:1a:9d:c6:1a:e9:ca:74:44:c6:
2d:93:7e:e9:ae:94:c0:3b:8c:07:06:f7:a4:77:cb:
c0:7b:33:25:f1:63:e9:88:31:53:50:b3:fb:6b:d1:
a4:35:41:ba:60:17:11:4a:c0:7a:8e:7a:4b:78:bf:
26:b1:26:43:13:3b:17:8c:ec:fb:e2:38:04:5e:91:
17:ad:ae:a0:a7:f7:f2:73:88:fb:b0:bf:38:c2:0f:
6d:50:5a:e0:63:ae:a2:9f:78:bf:8d:ae:72:a8:24:
11:b7:be:b9:1e:33:76:14:35:5b:45:93:41:67:da:
85:8c:cc:77:5b:b1:0e:25:b2:5b:0e:9f:9d:7e:31:
8a:10:b7:f8:2e:5d:c3:99:b6:1b:ff:57:0f:ff:3e:
dd:1c:35:e3:eb:90:ae:a7:5a:f0:fc:77:3f:fd:0c:
59:c3:72:04:aa:cb:34:07:ca:ad:6a:40:73:34:29:
73:24:b0:db:7b:db:b5:70:2f:56:aa:ce:a2:bf:d3:
83:e5:28:e1:bd:f0:7a:66:c3:86:21:83:2a:84:f9:
9f:18:d1:4b:98:6a:84:90:3a:1c:03:70:c7:3e:bb:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D8:2C:48:55:BE:47:4C:B4:BA:EE:4C:9D:AE:BA:D1:BE:6B:54:23
X509v3 Authority Key Identifier:
keyid:20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.200.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ad:51:47:ef:bf:84:8e:3a:91:43:35:95:cd:a0:a9:17:34:
d7:b0:64:27:59:81:87:90:73:6e:f7:b3:df:b9:32:60:02:c4:
ab:85:9e:d2:44:5a:92:8b:19:97:27:11:94:a0:64:19:bc:9a:
8b:c4:60:90:06:c2:27:18:84:db:10:06:d2:8a:14:ec:83:9a:
a1:f3:99:26:b8:88:be:03:d5:6e:91:dd:35:cc:fd:14:42:8d:
56:90:b9:4c:a3:d8:af:21:0d:bc:12:cf:f3:79:9f:95:2d:20:
da:29:5e:9e:f0:f3:be:06:b4:95:e1:c0:21:b5:df:fd:a7:21:
24:3e:e2:9c:d6:ff:fd:07:58:71:60:1b:09:f0:d9:d0:f3:05:
81:b3:8a:25:1f:50:94:42:16:07:56:15:06:b7:b9:27:95:9f:
61:86:bb:cd:8e:8a:08:83:3d:d5:a2:74:90:b1:a5:e0:d5:f9:
42:0a:cd:9c:fe:b0:0c:5f:91:a7:d7:bf:80:1c:63:cf:3e:1f:
a8:9d:ba:5e:91:78:39:d2:20:8a:02:47:9d:f5:4b:c8:a9:e3:
ff:12:29:bf:c8:d2:d6:5f:16:2e:90:43:1e:74:da:0e:13:d1:
20:f7:86:16:0e:3b:85:f7:47:3b:3e:b7:9d:ca:33:c8:16:6d:
54:26:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:30 2026 by rpki-client