
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa
File: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=
Subject key identifier: 00:B7:A7:6D:CA:D8:D7:84:DF:AC:F4:FD:57:81:13:FE:9C:DD:70:7E
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 7DC53CDE9E34E354161F100469C912A48AF3F0A4
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa
Signing time: Fri 08 May 2026 08:33:29 +0000
ROA not before: Fri 08 May 2026 08:28:29 +0000
ROA not after: Fri 07 May 2027 08:33:29 +0000
asID: 58466
IP address blocks: 103.222.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c5:3c:de:9e:34:e3:54:16:1f:10:04:69:c9:12:a4:8a:f3:f0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: May 8 08:28:29 2026 GMT
Not After : May 7 08:33:29 2027 GMT
Subject: CN=00B7A76DCAD8D784DFACF4FD578113FE9CDD707E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:e7:40:57:71:e9:3e:27:9f:bd:5e:a1:64:
41:e9:b1:ee:34:39:fe:10:c0:f8:3e:85:80:36:8f:
3e:53:db:fa:d5:29:0a:24:dc:01:cb:eb:2c:5e:49:
15:21:64:ef:2c:a1:f6:4f:19:3f:0f:d1:3b:e5:5f:
28:ec:05:f8:96:55:ea:08:d3:df:e8:4d:db:6f:b3:
c8:83:fc:dc:9a:d3:03:57:d7:ce:d2:0b:a5:d1:2f:
2d:15:ee:b4:0b:e9:a6:ca:11:dd:8e:4d:f0:59:62:
e4:00:16:41:e8:d1:8d:fc:bc:9c:2b:d8:12:21:a0:
be:8d:f4:af:74:2c:70:dd:ca:3b:aa:ca:fa:2a:d3:
fb:9d:1e:30:21:ca:17:d5:c4:4a:6d:25:7c:03:83:
e7:7e:ad:07:e4:27:f8:67:c3:2a:d5:e3:28:37:79:
1b:e5:9a:5e:3c:a0:5d:9e:05:fa:00:87:f3:dd:78:
55:f0:51:6c:3c:e0:75:d3:f7:db:e1:5c:9c:6a:b8:
21:88:de:22:87:0a:dd:42:7d:28:0d:05:9a:c5:58:
4f:19:9e:0d:e6:f3:24:50:ab:55:d8:71:1d:05:a6:
a9:47:a1:13:68:5d:27:a3:96:a0:b5:58:41:19:2b:
7b:55:e7:65:a6:01:1e:c2:62:76:e2:24:0b:33:35:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:A7:6D:CA:D8:D7:84:DF:AC:F4:FD:57:81:13:FE:9C:DD:70:7E
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.179.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b6:c0:03:e3:2b:7e:40:1e:6d:2f:78:e7:5f:f8:a4:85:2f:
94:12:29:1f:30:c8:bb:22:27:ee:3a:f1:9e:9d:58:61:3f:ee:
d4:92:e9:97:fa:2d:66:c6:11:48:66:31:91:1a:9b:04:85:8c:
86:eb:08:90:19:66:7b:b4:91:9b:a1:29:f4:50:b5:72:fc:81:
82:92:da:9c:6b:15:9f:86:30:bb:44:a9:f7:d3:4d:cd:73:a6:
58:64:9d:43:08:92:d6:3a:3e:3e:b0:09:c4:60:e1:57:2c:fe:
48:2b:3e:85:d1:4e:b4:f1:48:6a:f4:15:0f:53:63:73:3e:c7:
dc:c0:a9:30:74:50:12:b3:a9:22:17:23:0b:04:a4:65:83:59:
34:68:cc:fe:78:18:aa:d7:88:22:aa:e2:f4:83:7c:de:b1:0b:
6d:d4:52:02:7e:ba:8b:0e:49:73:23:74:b1:b3:ea:34:fd:2c:
c6:cf:cb:e2:81:39:03:52:6f:d8:59:33:1e:e5:ca:98:e5:cb:
23:c4:a1:60:66:65:1c:a0:d3:22:a1:80:52:2e:c9:1e:44:7f:
3c:53:b2:a1:b4:65:ae:99:79:7a:c5:2a:97:35:2b:a7:2c:38:
a1:1c:88:e1:30:53:82:5b:62:1f:d3:2f:b5:1e:93:f5:40:d6:
1e:83:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:43 2026 by rpki-client