
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa
File: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=
Subject key identifier: E5:BD:AC:59:D8:E6:BA:9C:36:4A:17:42:02:D1:9C:58:51:9E:F0:1C
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 74F87AA97C0FEAD9012E0CC2D66A4C7B5D4B0EE1
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa
Signing time: Fri 08 May 2026 08:33:29 +0000
ROA not before: Fri 08 May 2026 08:28:29 +0000
ROA not after: Fri 07 May 2027 08:33:29 +0000
asID: 58466
IP address blocks: 103.222.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f8:7a:a9:7c:0f:ea:d9:01:2e:0c:c2:d6:6a:4c:7b:5d:4b:0e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: May 8 08:28:29 2026 GMT
Not After : May 7 08:33:29 2027 GMT
Subject: CN=E5BDAC59D8E6BA9C364A174202D19C58519EF01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:d5:44:2f:7d:83:31:1f:e9:46:a9:45:12:
fa:8f:18:cc:f5:ca:48:29:72:57:71:d3:cd:90:3b:
7b:fa:39:e9:f9:de:19:18:15:00:68:0b:b2:22:e3:
4b:90:08:6b:92:2d:2e:d8:4e:29:ce:18:1c:13:d6:
c0:65:8f:ab:81:d3:19:5d:38:13:b4:03:1a:10:3e:
7f:12:62:2c:b8:28:22:85:26:d0:ff:b7:cf:5f:9b:
be:49:e7:83:72:1c:73:74:71:87:15:d8:e3:5d:93:
fc:9f:5d:c0:95:80:cc:4a:17:44:da:43:8c:80:0e:
60:2c:37:c3:96:73:61:3b:bb:b8:79:71:24:be:1d:
00:8d:32:e6:af:35:92:0f:30:ee:fd:ae:8a:98:8a:
60:59:56:2a:5d:b3:ff:3d:4a:f2:a6:b1:08:ca:aa:
7f:34:42:d8:9a:d1:a5:d6:46:08:55:e1:39:11:69:
15:73:8a:2e:7d:bd:fc:f3:91:a2:4a:05:0c:45:b9:
5a:2d:31:8d:ea:57:56:6f:8a:98:07:2a:2d:30:83:
25:4d:1e:75:87:e6:e4:cb:b6:16:7a:8c:9b:a9:ef:
bc:de:36:66:88:20:23:32:25:a4:2e:83:e7:b1:8a:
a8:7c:e4:13:f6:e0:07:5e:d9:61:e3:b3:fd:21:33:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:AC:59:D8:E6:BA:9C:36:4A:17:42:02:D1:9C:58:51:9E:F0:1C
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cf:52:31:6d:fa:90:9b:37:11:bf:f5:50:d6:7f:00:d0:d7:
0f:3a:e2:e8:3d:bb:7d:af:08:9f:0d:bc:ce:99:9a:a2:9f:09:
6f:53:2c:c8:06:e0:ea:cb:a8:83:85:64:dc:c5:fe:71:01:01:
9a:26:fc:e2:93:58:2b:9e:21:46:65:82:07:ca:43:38:44:17:
c9:0d:89:bf:f2:70:a2:ce:bb:c6:d2:af:62:0b:15:f1:9f:b4:
5e:0f:c2:08:84:b8:74:a2:e5:b3:cb:93:de:6a:3e:72:93:46:
f2:ac:da:69:90:9f:3f:06:e0:ce:3b:3e:09:3e:72:af:81:4a:
af:cf:33:f0:2f:5f:a2:14:74:12:70:bd:68:06:f5:35:c7:a1:
68:43:57:65:46:32:ef:a8:98:b5:c7:73:ee:8a:f6:df:5a:4f:
2a:42:5d:d1:53:ed:2c:d1:6c:c6:73:2a:f7:4e:8d:03:8d:79:
55:75:db:3c:6c:84:6f:7b:0f:82:1a:a3:10:63:54:b1:4d:83:
6c:0c:7b:58:d3:02:17:c0:42:6b:fa:ce:f4:d6:79:b7:81:90:
6d:7a:f5:b3:61:de:f2:dc:e2:9d:13:f2:6e:2b:95:03:9d:26:
f6:ab:a2:e7:cd:f3:1c:34:f1:d3:19:f7:67:ee:a9:75:61:a7:
77:7c:61:bb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUdPh6qXwP6tkBLgzC1mpMe11LDuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG
NUFCNjEzMzAeFw0yNjA1MDgwODI4MjlaFw0yNzA1MDcwODMzMjlaMDMxMTAvBgNV
BAMTKEU1QkRBQzU5RDhFNkJBOUMzNjRBMTc0MjAyRDE5QzU4NTE5RUYwMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIf9VEL32DMR/pRqlFEvqPGMz1
ykgpcldx082QO3v6Oen53hkYFQBoC7Ii40uQCGuSLS7YTinOGBwT1sBlj6uB0xld
OBO0AxoQPn8SYiy4KCKFJtD/t89fm75J54NyHHN0cYcV2ONdk/yfXcCVgMxKF0Ta
Q4yADmAsN8OWc2E7u7h5cSS+HQCNMuavNZIPMO79roqYimBZVipds/89SvKmsQjK
qn80Qtia0aXWRghV4TkRaRVzii59vfzzkaJKBQxFuVotMY3qV1ZvipgHKi0wgyVN
HnWH5uTLthZ6jJup77zeNmaIICMyJaQug+exiqh85BP24Ade2WHjs/0hMxOlAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU5b2sWdjmupw2ShdCAtGcWFGe8BwwHwYDVR0j
BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE
OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgyNDE5MjMvMC8zMTMwMzMyZTMy
MzIzMjJlMzEzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfesDANBgkqhkiG9w0BAQsFAAOCAQEASs9SMW36kJs3Eb/1UNZ/
ANDXDzri6D27fa8Inw28zpmaop8Jb1MsyAbg6suog4Vk3MX+cQEBmib84pNYK54h
RmWCB8pDOEQXyQ2Jv/Jwos67xtKvYgsV8Z+0Xg/CCIS4dKLls8uT3mo+cpNG8qza
aZCfPwbgzjs+CT5yr4FKr88z8C9fohR0EnC9aAb1NcehaENXZUYy76iYtcdz7or2
31pPKkJd0VPtLNFsxnMq906NA415VXXbPGyEb3sPghqjEGNUsU2DbAx7WNMCF8BC
a/rO9NZ5t4GQbXr1s2He8tzinRPybiuVA50m9qui583zHDTx0xn3Z+6pdWGnd3xh
uw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:39:33 2026 by rpki-client