
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38342e31392e302f32342d3234203d3e203633353939.roa
File: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=
Subject key identifier: AE:1E:B0:63:36:F8:60:54:71:1D:EB:2D:4E:59:09:44:F0:A7:F7:A9
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 04B15D8E3D096D6B9B14865F866ECE4190CD08B4
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38342e31392e302f32342d3234203d3e203633353939.roa
Signing time: Thu 30 Apr 2026 07:05:03 +0000
ROA not before: Thu 30 Apr 2026 07:00:03 +0000
ROA not after: Thu 29 Apr 2027 07:05:03 +0000
asID: 63599
IP address blocks: 103.84.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b1:5d:8e:3d:09:6d:6b:9b:14:86:5f:86:6e:ce:41:90:cd:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 30 07:00:03 2026 GMT
Not After : Apr 29 07:05:03 2027 GMT
Subject: CN=AE1EB06336F86054711DEB2D4E590944F0A7F7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:eb:16:06:57:9c:fa:c0:84:65:d7:8d:e6:
85:64:2a:a6:09:22:06:5d:97:47:8b:1c:b8:33:1b:
ad:e1:2f:72:2f:be:e4:b6:86:7e:2f:a8:ab:95:20:
75:0a:51:a6:63:21:fa:83:bc:d2:96:73:15:11:0c:
0a:47:90:a7:c2:6e:31:d5:ba:fc:f5:72:58:b6:5f:
cd:21:a5:0c:2f:9c:55:cb:86:cd:59:2e:43:29:63:
6a:b7:14:4b:3d:74:4c:08:6b:9e:ba:f8:f1:ff:fe:
a8:20:96:ce:ec:f1:cd:7e:dd:04:e6:19:b9:f6:8f:
1b:8f:cb:5f:a3:f0:6c:ae:00:ef:8c:c7:97:b2:28:
04:00:4a:82:f8:c2:23:01:da:b7:31:72:f2:5e:ba:
35:e9:f3:b1:42:bf:d7:d2:8f:ad:24:8f:d4:40:98:
51:99:89:2f:dc:91:44:15:08:6a:96:e9:7f:2d:4e:
d5:26:a2:80:dd:8d:07:0d:a4:b8:f3:62:78:5b:81:
06:fe:62:c0:f3:43:02:71:0b:42:c7:73:e3:a4:57:
3e:7b:2f:b8:6b:7d:b4:af:3e:3b:c2:f4:88:47:5c:
d6:1e:9b:5a:76:f4:eb:8e:a5:35:66:ba:b4:f2:f7:
ab:fb:3d:e9:3c:48:18:79:1b:d7:eb:d0:72:4c:eb:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:B0:63:36:F8:60:54:71:1D:EB:2D:4E:59:09:44:F0:A7:F7:A9
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38342e31392e302f32342d3234203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:25:bb:54:97:46:d0:5a:95:fe:22:54:af:61:f9:32:78:fc:
16:5c:80:66:cb:49:1c:74:c1:62:bf:6e:7f:25:ba:87:7c:10:
d9:ee:88:58:8d:ff:de:e6:0a:71:03:4e:4b:2d:eb:6e:dd:2e:
5a:cc:ce:f6:50:df:91:2a:35:cd:c0:a6:bf:13:c9:f9:61:33:
f7:21:7f:61:b7:28:bc:36:e3:79:cd:92:7d:87:36:e6:b2:79:
cb:1e:ef:85:fd:62:f7:54:0e:8e:23:2f:9c:bd:2c:3c:dd:23:
ca:57:4c:43:bb:71:2b:2a:e2:68:25:46:21:af:88:0d:44:d5:
de:76:b4:e6:aa:20:6a:72:90:f3:f0:f3:53:22:63:1a:1c:eb:
c7:85:97:94:e8:3e:a1:08:79:cd:9c:7d:d8:b7:b8:b1:1c:49:
4a:a8:c5:9a:17:70:8c:f1:44:9a:21:76:cc:85:13:3f:8f:da:
6a:65:13:9b:8f:89:54:31:58:7c:6d:04:9b:29:81:55:4e:f9:
cb:ee:18:f2:31:66:76:98:47:4f:91:e9:62:64:89:52:2f:00:
8a:24:fb:1f:7c:a5:02:da:ca:92:4e:ad:b3:c6:d4:ff:e7:32:
08:ff:97:b6:a1:a1:1f:5c:8b:43:98:5e:a5:b2:15:c1:55:5d:
ef:f5:28:8c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUBLFdjj0JbWubFIZfhm7OQZDNCLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG
NUFCNjEzMzAeFw0yNjA0MzAwNzAwMDNaFw0yNzA0MjkwNzA1MDNaMDMxMTAvBgNV
BAMTKEFFMUVCMDYzMzZGODYwNTQ3MTFERUIyRDRFNTkwOTQ0RjBBN0Y3QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpu+sWBlec+sCEZdeN5oVkKqYJ
IgZdl0eLHLgzG63hL3IvvuS2hn4vqKuVIHUKUaZjIfqDvNKWcxURDApHkKfCbjHV
uvz1cli2X80hpQwvnFXLhs1ZLkMpY2q3FEs9dEwIa566+PH//qggls7s8c1+3QTm
Gbn2jxuPy1+j8GyuAO+Mx5eyKAQASoL4wiMB2rcxcvJeujXp87FCv9fSj60kj9RA
mFGZiS/ckUQVCGqW6X8tTtUmooDdjQcNpLjzYnhbgQb+YsDzQwJxC0LHc+OkVz57
L7hrfbSvPjvC9IhHXNYem1p29OuOpTVmurTy96v7Pek8SBh5G9fr0HJM6xRlAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUrh6wYzb4YFRxHestTlkJRPCn96kwHwYDVR0j
BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE
OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MjQxOTIzLzAvMzEzMDMzMmUzODM0
MmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzkzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdUEzANBgkqhkiG9w0BAQsFAAOCAQEALyW7VJdG0FqV/iJUr2H5Mnj8FlyA
ZstJHHTBYr9ufyW6h3wQ2e6IWI3/3uYKcQNOSy3rbt0uWszO9lDfkSo1zcCmvxPJ
+WEz9yF/YbcovDbjec2SfYc25rJ5yx7vhf1i91QOjiMvnL0sPN0jyldMQ7txKyri
aCVGIa+IDUTV3na05qoganKQ8/DzUyJjGhzrx4WXlOg+oQh5zZx92Le4sRxJSqjF
mhdwjPFEmiF2zIUTP4/aamUTm4+JVDFYfG0EmymBVU75y+4Y8jFmdphHT5HpYmSJ
Ui8AiiT7H3ylAtrKkk6ts8bU/+cyCP+XtqGhH1yLQ5hepbIVwVVd7/UojA==
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:12 2026 by rpki-client