
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131352e302f32342d3234203d3e203633353939.roa
File: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=
Subject key identifier: BB:84:4E:79:92:90:11:2D:26:9C:3E:EA:AC:D9:B4:98:4A:CF:FF:8F
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 22757703D0C799263E79F574C4E5627903355A3B
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131352e302f32342d3234203d3e203633353939.roa
Signing time: Thu 30 Apr 2026 07:05:03 +0000
ROA not before: Thu 30 Apr 2026 07:00:03 +0000
ROA not after: Thu 29 Apr 2027 07:05:03 +0000
asID: 63599
IP address blocks: 103.89.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:75:77:03:d0:c7:99:26:3e:79:f5:74:c4:e5:62:79:03:35:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 30 07:00:03 2026 GMT
Not After : Apr 29 07:05:03 2027 GMT
Subject: CN=BB844E799290112D269C3EEAACD9B4984ACFFF8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:46:d9:fc:e3:9b:18:84:c4:dc:9e:93:e3:
5d:58:aa:60:d5:b0:eb:6a:b3:9e:d0:91:cb:63:ac:
67:d6:e4:3b:81:e9:ac:5f:f7:cf:9d:40:40:cb:1e:
cc:c4:33:84:19:96:9d:28:18:28:91:0c:e0:4a:71:
fc:a1:eb:a9:dd:3e:6e:73:75:d5:bd:28:d7:b9:69:
47:47:d3:94:39:19:30:03:2f:cb:e4:74:fd:d3:50:
d3:be:36:38:77:87:4d:30:2e:2b:8a:f9:98:56:16:
37:4e:12:32:d9:66:2d:2f:00:04:5b:ff:21:d0:0c:
c3:28:d6:af:54:d4:c4:3a:0b:a0:7d:8b:af:64:1f:
d2:53:34:f8:c3:b8:42:ed:c0:22:d9:f2:62:5f:9e:
76:fa:06:03:3f:04:17:cd:87:e9:36:f4:0a:0d:78:
19:4c:2f:6a:10:83:d1:df:47:9f:ae:d9:ab:d9:6c:
4f:c2:b4:1a:25:ee:1e:96:b4:5f:12:76:9e:9a:7f:
50:b5:66:d4:9f:ce:18:ed:08:81:07:58:30:63:ea:
d7:4c:ea:9f:f9:34:fe:b8:e5:03:53:d0:8f:1d:fc:
9e:ba:e4:45:88:f6:b4:a1:c9:fe:98:6a:95:01:24:
09:96:01:65:de:ef:29:8c:f1:12:8a:9b:09:28:54:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:84:4E:79:92:90:11:2D:26:9C:3E:EA:AC:D9:B4:98:4A:CF:FF:8F
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131352e302f32342d3234203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.115.0/24
Signature Algorithm: sha256WithRSAEncryption
36:37:f5:54:dd:76:ee:81:ec:ce:83:e1:2d:c1:0d:4b:62:3c:
b0:93:01:e9:75:4c:f4:d6:ce:03:22:a8:60:27:b2:9d:f0:2a:
1c:83:4f:7c:46:3d:4d:b2:d3:1d:61:80:24:6c:23:11:cb:fd:
82:a7:35:fc:b7:ce:ef:14:83:2d:4f:f8:d0:06:c5:86:b5:14:
ec:5d:71:5b:ec:1f:0b:ff:f7:d7:31:41:2f:49:48:df:d7:49:
e0:10:0d:e9:b3:71:62:81:5f:18:94:66:82:96:5e:a3:20:4e:
72:2f:35:05:b8:79:17:62:33:31:14:34:bc:98:ce:80:d3:32:
ad:d2:ee:0b:cf:46:f4:67:19:ff:89:4c:00:7a:a1:2c:c4:80:
73:90:0c:17:11:f4:b3:87:ec:31:5d:ea:63:1a:cd:59:cc:8f:
a4:ea:21:85:0a:f4:81:1a:89:36:c3:0f:37:8b:fa:9d:93:ef:
8a:62:13:33:67:f8:8c:e8:2e:f6:f9:70:53:e1:37:75:b5:8b:
df:b1:09:4a:70:1a:ae:3e:63:fc:44:aa:13:01:77:9e:2f:03:
44:26:99:2a:93:0b:01:bb:0b:b0:1b:9c:19:6b:eb:23:f3:1c:
8d:33:28:f9:c0:7d:d5:f4:0b:9f:31:67:59:35:c3:5a:78:e5:
32:d8:09:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:59:10 2026 by rpki-client