
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097048493643530242/0/3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa
File: 3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa (raw, json)
Hash identifier: l7ihaAL2K1gp0WFgFaF5vhfWpS9Haphuut9+xh4iEFI=
Subject key identifier: 36:BD:C7:10:A7:41:9C:12:77:15:BD:6F:B2:E8:0B:90:FC:65:9D:41
Certificate issuer: /CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
Certificate serial: 2DD85BD0BD6BEECF6F03DEEC780F4C6BBA3585DA
Authority key identifier: 19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa
Signing time: Mon 11 May 2026 05:46:54 +0000
ROA not before: Mon 11 May 2026 05:41:54 +0000
ROA not after: Mon 10 May 2027 05:46:54 +0000
asID: 139141
IP address blocks: 103.154.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl
rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d8:5b:d0:bd:6b:ee:cf:6f:03:de:ec:78:0f:4c:6b:ba:35:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
Validity
Not Before: May 11 05:41:54 2026 GMT
Not After : May 10 05:46:54 2027 GMT
Subject: CN=36BDC710A7419C127715BD6FB2E80B90FC659D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:5f:8c:b1:9f:ae:f4:7f:08:f1:c7:cd:02:
ad:a0:9c:a4:fc:78:eb:7a:01:2d:3a:0a:70:90:e5:
9c:48:55:11:d3:5e:19:fa:8b:fc:50:d9:08:2e:3d:
7b:04:88:a5:88:10:ad:c7:61:57:20:90:6b:50:ef:
ea:c3:82:da:6d:57:93:1d:6d:f3:89:a5:ce:31:57:
80:f5:0c:df:41:22:ff:cb:ab:b9:a2:81:68:b1:63:
2e:3b:9e:e1:74:61:f1:2f:5b:b5:82:1c:5f:25:db:
04:6b:3b:24:b6:b6:19:81:51:3f:ff:84:1c:96:72:
53:ce:2a:4e:d6:00:8a:aa:4d:55:53:70:0f:33:bf:
bc:5f:0c:93:66:32:cc:3f:6b:d9:4d:7e:5f:bb:23:
06:ac:87:f8:85:e8:af:1b:00:cf:c3:26:61:27:7b:
fd:b2:45:d0:0a:9a:e5:7a:03:f4:eb:cc:b8:7e:6e:
8e:74:66:55:6e:13:36:af:4f:67:d4:40:a0:02:1f:
34:27:eb:14:9a:6a:96:c4:7e:2c:7b:1f:86:5f:47:
f5:41:ba:e4:18:60:b6:53:9a:bd:e6:85:06:ee:69:
f8:d8:d8:1b:c5:dd:61:69:9c:00:eb:c5:05:50:cb:
eb:10:60:c1:c8:e5:b6:fe:81:ab:bb:f3:99:00:1e:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BD:C7:10:A7:41:9C:12:77:15:BD:6F:B2:E8:0B:90:FC:65:9D:41
X509v3 Authority Key Identifier:
keyid:19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:7e:6f:73:1a:7d:27:61:f4:f9:9b:94:5b:04:9a:be:69:9c:
c6:74:f4:5e:5f:2a:42:91:f0:21:43:33:7d:51:40:f1:1f:97:
30:6e:13:3b:6f:df:2f:9a:c1:a9:52:e0:4a:a4:d7:83:37:64:
2c:1b:86:d6:ad:d2:b6:06:e7:4d:57:2c:c9:1b:cc:6b:36:03:
0d:12:75:91:60:d2:aa:88:c4:be:a5:a0:87:75:85:63:b1:41:
f5:7a:a8:03:30:17:a3:06:c7:ea:e7:12:a1:84:7b:ce:8d:ca:
96:d8:dc:38:6b:9f:49:db:9c:80:f1:bc:81:55:26:dd:53:7b:
88:90:cf:09:ac:ea:be:47:09:92:71:0e:f3:2c:3f:0c:7f:95:
a5:67:d2:99:e0:e0:10:11:ee:da:d3:51:3b:eb:04:78:d9:82:
eb:1f:ec:10:60:97:26:9c:4a:f8:48:6a:7f:9a:dc:ac:4b:2a:
b7:97:88:f6:42:20:80:e7:91:06:47:7d:e1:fa:a0:9c:2a:a2:
e2:f9:71:89:eb:92:21:69:66:b7:73:f7:80:f0:76:44:29:f9:
82:50:90:30:56:01:f1:1c:0a:c8:ba:56:a8:f5:b9:da:a6:56:
56:71:9c:52:76:60:a6:b0:1c:f0:44:87:cf:25:d3:5c:07:45:
7c:de:90:7b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIULdhb0L1r7s9vA97seA9Ma7o1hdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2
MzFBMTI2ODAeFw0yNjA1MTEwNTQxNTRaFw0yNzA1MTAwNTQ2NTRaMDMxMTAvBgNV
BAMTKDM2QkRDNzEwQTc0MTlDMTI3NzE1QkQ2RkIyRTgwQjkwRkM2NTlENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaml+MsZ+u9H8I8cfNAq2gnKT8
eOt6AS06CnCQ5ZxIVRHTXhn6i/xQ2QguPXsEiKWIEK3HYVcgkGtQ7+rDgtptV5Md
bfOJpc4xV4D1DN9BIv/Lq7migWixYy47nuF0YfEvW7WCHF8l2wRrOyS2thmBUT//
hByWclPOKk7WAIqqTVVTcA8zv7xfDJNmMsw/a9lNfl+7Iwash/iF6K8bAM/DJmEn
e/2yRdAKmuV6A/TrzLh+bo50ZlVuEzavT2fUQKACHzQn6xSaapbEfix7H4ZfR/VB
uuQYYLZTmr3mhQbuafjY2BvF3WFpnADrxQVQy+sQYMHI5bb+gau785kAHlE7AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUNr3HEKdBnBJ3Fb1vsugLkPxlnUEwHwYDVR0j
BBgwFoAUGcVvbJecIVr4ZPnhj3qPYmMaEmgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA0ODQ5MzY0MzUzMDI0Mi8wLzE5QzU2RjZDOTc5QzIxNUFGODY0RjlFMThGN0E4
RjYyNjMxQTEyNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2MzFBMTI2OC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTcwNDg0OTM2NDM1MzAyNDIvMC8zMTMwMzMyZTMx
MzUzNDJlMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzOTMxMzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeaHjANBgkqhkiG9w0BAQsFAAOCAQEAO35vcxp9J2H0+ZuUWwSa
vmmcxnT0Xl8qQpHwIUMzfVFA8R+XMG4TO2/fL5rBqVLgSqTXgzdkLBuG1q3Stgbn
TVcsyRvMazYDDRJ1kWDSqojEvqWgh3WFY7FB9XqoAzAXowbH6ucSoYR7zo3Kltjc
OGufSducgPG8gVUm3VN7iJDPCazqvkcJknEO8yw/DH+VpWfSmeDgEBHu2tNRO+sE
eNmC6x/sEGCXJpxK+Ehqf5rcrEsqt5eI9kIggOeRBkd94fqgnCqi4vlxieuSIWlm
t3P3gPB2RCn5glCQMFYB8RwKyLpWqPW52qZWVnGcUnZgprAc8ESHzyXTXAdFfN6Q
ew==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:25 2026 by rpki-client