
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34352e302f32342d3234203d3e203538343636.roa
File: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=
Subject key identifier: F1:6B:DD:2F:DF:2B:D2:53:1B:DB:EA:04:3F:B7:F4:5E:CF:CD:BE:8D
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 0F4CEFEDA8B6BBC80C19069631ED49B4CA055158
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34352e302f32342d3234203d3e203538343636.roa
Signing time: Fri 08 May 2026 08:35:46 +0000
ROA not before: Fri 08 May 2026 08:30:46 +0000
ROA not after: Fri 07 May 2027 08:35:46 +0000
asID: 58466
IP address blocks: 103.215.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4c:ef:ed:a8:b6:bb:c8:0c:19:06:96:31:ed:49:b4:ca:05:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: May 8 08:30:46 2026 GMT
Not After : May 7 08:35:46 2027 GMT
Subject: CN=F16BDD2FDF2BD2531BDBEA043FB7F45ECFCDBE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:64:d9:47:f3:f0:f4:e3:a9:90:45:6c:9a:
5a:e7:0f:b9:10:4a:55:d2:a2:b6:f5:69:d3:a9:a5:
25:54:a7:e4:ea:c7:b9:74:38:9f:c1:1f:5c:e2:5b:
7a:41:87:d2:fb:c7:19:98:13:90:4f:38:02:b1:31:
ee:76:bf:3a:27:41:dd:fc:62:ed:64:62:9b:62:5d:
49:4d:25:b5:a3:93:22:18:49:f0:d1:4d:17:81:80:
3d:ce:11:d4:4d:ad:c4:7c:69:a4:a1:36:a9:13:2a:
5b:9b:99:4e:01:a4:85:0b:16:ab:76:7b:b1:6d:53:
93:db:f1:33:ca:92:42:5b:af:f2:f1:ca:f5:0b:58:
d7:28:c5:ef:e8:b2:8f:43:18:c1:fc:96:43:5e:23:
55:0a:b2:a5:93:d0:bd:5d:a8:58:62:2e:8f:24:30:
c5:f0:37:96:94:ae:8d:9b:4e:cd:03:c6:cd:23:e5:
b0:6c:ad:ba:50:9a:d3:3c:dd:ad:a5:18:b0:ae:48:
0c:30:59:6a:dc:c4:2d:b3:2e:b7:ce:24:67:77:7d:
a3:b1:c8:41:93:fd:a8:e3:79:dc:39:35:82:d2:b9:
b6:1c:f6:90:08:61:b3:d5:b3:09:e3:da:68:f8:7e:
0d:b9:17:96:2d:60:77:9a:37:8c:d8:11:fa:54:27:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:DD:2F:DF:2B:D2:53:1B:DB:EA:04:3F:B7:F4:5E:CF:CD:BE:8D
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34352e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.45.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c5:32:3b:17:e7:d7:3c:d2:f0:4f:b7:e5:1d:3f:50:f8:e1:
4b:37:38:d8:b3:0b:4f:71:49:b8:3e:51:32:1b:e7:af:99:89:
9e:df:43:0f:e2:e0:94:e4:93:75:e6:28:3c:2c:ab:96:32:cc:
d2:64:cc:fe:9c:e7:77:52:85:a0:20:90:f8:13:03:d4:c1:c2:
3e:23:c6:5b:e9:d9:2c:7e:e1:38:9a:5d:24:b1:4c:28:48:19:
d9:c6:1f:32:4c:84:06:e9:a8:bb:14:ba:3f:da:cb:37:4f:fd:
96:15:3d:4b:1b:0a:4b:28:3b:72:e3:eb:04:64:bb:4c:be:4c:
96:79:b9:69:55:2c:59:19:d3:e8:10:ee:bd:88:06:7d:41:87:
82:9c:5e:cd:e3:5b:43:35:62:6a:1d:3e:47:b7:f8:71:60:1a:
f2:a0:8a:af:a6:e8:f9:15:13:a4:c1:01:d8:02:b3:30:b9:6a:
45:4d:3a:c0:e3:a8:48:ca:f5:4a:90:0b:de:b0:dc:bb:b0:8e:
88:c7:24:6c:5e:07:ae:64:15:66:36:8f:46:63:9d:e3:86:5d:
bc:54:1c:91:90:37:1d:7e:22:40:9b:96:ed:51:8a:ab:02:73:
b5:6f:d2:1b:f8:bd:12:1e:f3:c4:cc:44:52:a1:b0:25:7d:43:
08:66:45:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:34:11 2026 by rpki-client