
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa
File: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=
Subject key identifier: 44:98:7A:3F:1E:D9:8C:AB:4C:25:C9:EA:1C:CA:C3:A7:C6:47:57:3A
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 313E83ABEDE28FE7E1BA5137A7F852FD376A9C93
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa
Signing time: Fri 08 May 2026 08:33:29 +0000
ROA not before: Fri 08 May 2026 08:28:29 +0000
ROA not after: Fri 07 May 2027 08:33:29 +0000
asID: 58466
IP address blocks: 103.222.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:3e:83:ab:ed:e2:8f:e7:e1:ba:51:37:a7:f8:52:fd:37:6a:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: May 8 08:28:29 2026 GMT
Not After : May 7 08:33:29 2027 GMT
Subject: CN=44987A3F1ED98CAB4C25C9EA1CCAC3A7C647573A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:b1:d6:b5:15:b5:a4:4d:9e:f1:23:3e:27:
0e:78:4c:0c:38:e2:59:1e:60:69:27:5a:6b:af:46:
1c:85:5a:f7:ad:f4:66:00:64:81:12:10:22:87:a8:
5c:bc:70:82:8e:79:29:92:44:0e:96:2c:b1:cf:90:
09:ee:d7:79:c1:63:72:20:7d:f6:47:1e:3d:3d:f2:
d2:7e:18:39:98:c1:2f:ba:6d:1c:59:9f:71:3a:2f:
e8:96:08:09:4e:ee:8c:e6:56:ce:4c:94:d4:1a:6b:
10:8d:a4:8a:b4:78:7d:a6:da:84:6b:7d:3c:f1:5a:
0f:c8:7f:24:d5:de:ce:3e:2a:50:5a:56:ba:53:32:
95:06:af:9d:3b:37:0f:37:6d:cb:25:3f:a4:9e:14:
96:5d:82:36:d8:48:9b:80:20:0c:12:43:91:f5:7b:
ec:c6:60:50:f8:b3:83:d5:46:59:53:52:38:af:50:
b2:e6:0e:b5:a1:59:6b:4e:e8:d6:39:2e:d5:0f:4e:
a2:64:b6:17:1c:66:d3:8a:02:54:4e:ee:93:52:c3:
5e:49:3f:a0:3f:53:28:60:da:bc:96:17:07:44:44:
00:61:14:dd:ff:ea:81:bf:93:7a:e8:be:11:5f:87:
12:84:24:4f:26:91:4f:02:dd:ee:e2:4f:39:12:ab:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:7A:3F:1E:D9:8C:AB:4C:25:C9:EA:1C:CA:C3:A7:C6:47:57:3A
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.183.0/24
Signature Algorithm: sha256WithRSAEncryption
95:54:41:87:5a:a4:1e:c8:69:dd:58:19:14:bd:4c:53:91:5f:
e8:05:21:2b:eb:0c:e9:c5:6e:9b:7e:fc:c5:f8:81:68:2e:b6:
a4:dc:da:53:00:48:39:d7:6e:a3:74:40:9b:11:68:ff:05:01:
ba:bb:44:58:b7:c8:0f:c2:e7:43:1e:d5:27:30:d9:c3:2e:c8:
82:1f:59:e8:27:50:e2:2c:f1:b6:b2:df:3c:17:2f:7e:0b:f0:
df:58:35:88:2f:21:8f:3f:85:a1:f1:6d:c8:a1:3c:70:43:02:
ab:b3:92:b0:11:12:2d:44:c9:6d:73:ab:4f:03:71:01:5f:82:
96:c1:cf:da:01:3a:1f:de:5c:6f:e2:25:38:d2:23:48:c8:82:
46:68:69:43:6a:28:e1:b9:83:c4:b4:e8:f2:3a:24:7b:e0:a2:
f8:b6:bc:15:80:a4:8a:c9:49:d4:c5:b5:c0:48:b1:61:03:0b:
29:53:d4:fa:00:9a:17:73:56:37:d4:b7:62:06:a7:f2:1a:c6:
f5:68:a4:9f:fc:1c:1b:3a:7f:57:47:ce:eb:fa:09:68:f9:31:
f3:b1:50:94:c1:05:53:50:4e:04:b4:47:ed:96:51:df:ba:d9:
e4:84:9d:03:f2:1e:df:a3:0e:43:04:b8:c0:df:08:5a:3d:6f:
b3:f7:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:23:01 2026 by rpki-client