
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa
File: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=
Subject key identifier: DC:53:55:C3:6F:BA:DD:B8:2A:5C:70:86:7C:EB:60:38:81:78:88:5C
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 43B60AB7C542E3E6D76D09665E9B763197672C37
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa
Signing time: Fri 08 May 2026 08:33:29 +0000
ROA not before: Fri 08 May 2026 08:28:29 +0000
ROA not after: Fri 07 May 2027 08:33:29 +0000
asID: 58466
IP address blocks: 103.222.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b6:0a:b7:c5:42:e3:e6:d7:6d:09:66:5e:9b:76:31:97:67:2c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: May 8 08:28:29 2026 GMT
Not After : May 7 08:33:29 2027 GMT
Subject: CN=DC5355C36FBADDB82A5C70867CEB60388178885C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:e8:dd:1a:08:a6:cc:23:e2:1c:cb:45:fe:
7a:32:52:8b:92:ea:b9:f1:aa:be:ab:a7:88:00:09:
28:84:8c:12:c3:9e:19:11:c5:b7:77:65:db:a0:a8:
98:82:70:99:45:d8:96:c5:7e:63:42:60:8c:f9:be:
be:78:51:57:00:f0:06:cd:30:17:5e:a4:3f:a8:5b:
27:e7:d6:2a:4a:68:67:aa:a6:cc:73:1b:0e:e7:4c:
93:54:21:c1:07:3b:1c:69:c6:21:3e:26:e9:25:5d:
ea:95:e0:9d:7c:d2:b9:26:59:f7:10:cc:a2:11:6e:
e0:af:85:cd:cd:94:88:69:fe:76:cd:79:91:6d:57:
fe:a7:8e:1d:21:90:44:eb:b8:76:83:2e:7a:0e:11:
79:ac:2b:48:ae:c1:7c:b0:84:51:04:67:33:41:cb:
7a:a6:ef:57:87:20:00:4c:c3:ae:39:8e:37:23:fb:
49:62:6d:c4:6d:64:f3:08:71:80:a5:f3:bc:7d:07:
60:25:9b:05:c0:d9:2a:60:03:e2:e4:19:20:4f:8b:
f6:dd:ca:00:d7:95:f6:a3:34:0a:54:a9:ef:cb:c0:
f9:e5:18:16:87:92:a3:30:05:0a:2a:6f:5b:03:da:
bc:67:c4:62:5f:b9:09:c7:10:55:6c:8f:52:86:c6:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:55:C3:6F:BA:DD:B8:2A:5C:70:86:7C:EB:60:38:81:78:88:5C
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.180.0/24
Signature Algorithm: sha256WithRSAEncryption
17:90:74:91:f6:0b:80:7b:e2:c1:79:b5:3c:bb:3e:e3:55:07:
09:5f:f5:1c:f5:37:3d:6d:ac:c9:93:49:c2:a3:b3:d1:d1:14:
59:c2:8f:db:01:55:01:7a:03:c9:2c:fa:c0:15:a3:62:38:da:
d2:20:0b:0b:c4:9a:95:2e:53:70:f2:7b:88:22:fa:b1:8a:82:
f6:1a:05:24:88:0a:ad:a7:a5:62:8e:d1:51:05:80:5c:7c:66:
b3:e8:42:6c:c0:4c:a5:d6:bb:3e:24:f8:ea:45:1d:b9:40:83:
82:e9:0b:8c:d0:4d:d6:07:90:fe:c5:cb:04:c6:1f:09:fb:4a:
47:21:e2:1e:09:0a:26:de:0e:6c:e5:73:88:63:2b:db:14:63:
7d:de:16:11:45:bb:f1:f0:73:cd:77:6f:f9:16:6a:54:70:91:
dc:97:1a:d1:9c:07:b3:55:07:ce:ab:46:0c:79:f3:c8:b0:b0:
e0:96:56:d4:56:ec:e6:73:07:64:fc:a1:d0:6e:8f:82:43:a6:
ef:b9:84:ef:f1:34:a4:40:85:70:a4:a9:a8:90:2f:11:92:5b:
44:91:35:ad:c5:45:83:e6:6d:6b:e7:df:49:ca:87:4a:6f:1c:
0b:2f:9d:83:1a:7b:cb:5f:53:88:51:a7:52:4a:dc:ad:63:cd:
6f:a1:8c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:14:59 2026 by rpki-client