
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa
File: 3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa (raw, json)
Hash identifier: JJeH7/e0S+vcP9rIL80aRLn8d98yMXZivh1TWBvd1eg=
Subject key identifier: C5:AD:4D:2E:B2:1D:D4:FE:4B:DC:80:08:24:60:B2:BC:FB:DD:FD:06
Certificate issuer: /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial: 0E4708CDF0F2A583D1DDB1681A0B39724B037AD3
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa
Signing time: Mon 20 Apr 2026 04:55:46 +0000
ROA not before: Mon 20 Apr 2026 04:50:46 +0000
ROA not after: Mon 19 Apr 2027 04:55:46 +0000
asID: 139118
IP address blocks: 103.156.68.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:47:08:cd:f0:f2:a5:83:d1:dd:b1:68:1a:0b:39:72:4b:03:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Validity
Not Before: Apr 20 04:50:46 2026 GMT
Not After : Apr 19 04:55:46 2027 GMT
Subject: CN=C5AD4D2EB21DD4FE4BDC80082460B2BCFBDDFD06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:21:15:2d:85:ae:c2:e4:cc:c8:f9:96:f3:
a6:db:be:13:02:f2:c1:6a:b4:e8:df:96:03:83:cb:
97:3d:58:2d:97:02:cf:33:ca:8a:8f:db:49:85:69:
57:96:fc:42:50:69:a9:c5:6e:4d:16:d1:4f:e7:fc:
89:36:ad:f9:ae:1d:12:92:a3:f1:df:48:f6:f1:0c:
f2:8a:d9:5c:2f:aa:57:f2:be:ac:42:a1:39:22:5d:
16:01:41:b8:88:fa:c0:83:7c:6d:92:c6:ce:f5:52:
a2:4a:e2:bf:89:05:d1:2c:44:5e:03:99:00:19:2c:
25:33:78:f4:10:50:ea:2c:9e:9f:0a:c6:9d:22:f3:
86:34:a1:8c:28:55:b8:61:de:5d:f9:62:1d:c7:4f:
3e:77:3e:30:0c:d9:34:eb:ca:43:f1:cc:66:70:0f:
48:fc:1f:5d:39:fd:e7:8d:13:b7:bd:03:d6:e7:f8:
29:28:4f:67:4b:73:27:fb:9d:ff:21:87:9d:c6:73:
ca:82:a0:ae:5a:53:b6:96:10:96:e0:dd:0a:ba:04:
82:48:ca:cf:a5:d1:1a:0c:dc:a6:72:0e:01:f4:a0:
58:a0:73:40:0d:a0:8f:7a:0d:ab:b4:7d:d5:a1:fa:
08:55:01:db:0e:01:58:0c:f4:f9:c4:51:e7:14:08:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:4D:2E:B2:1D:D4:FE:4B:DC:80:08:24:60:B2:BC:FB:DD:FD:06
X509v3 Authority Key Identifier:
keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.68.0/23
Signature Algorithm: sha256WithRSAEncryption
93:0f:d0:31:b6:db:35:82:7f:34:43:44:d7:e6:07:21:53:16:
ef:b9:48:f9:2a:01:8b:d0:12:c5:c2:d0:d4:84:ec:7c:d9:21:
fc:1f:7d:dd:e2:70:cd:18:fa:c8:85:e3:97:a6:91:c2:12:6a:
b5:8e:f4:15:32:2c:4b:9a:59:44:b5:94:6c:ea:51:d6:71:94:
15:5c:3f:2b:17:b1:3c:57:20:38:67:33:d4:78:07:27:f5:31:
55:2d:88:29:fc:d9:16:e6:d6:b5:55:1b:f8:37:63:21:2c:a1:
62:9b:da:e6:da:68:5e:d3:a2:08:e4:ed:5b:63:c4:fe:d8:d6:
86:40:d4:b4:00:a6:73:65:aa:ac:eb:56:5e:4a:f1:9f:83:c5:
ed:be:a1:06:48:30:5f:72:3e:2c:a1:25:1e:9a:0e:18:fe:7c:
37:8d:c6:cd:cd:4b:b2:87:9d:43:d9:d3:c1:23:4c:37:a3:f4:
6e:8c:5d:7b:b5:5c:e4:1f:1e:ff:a0:34:5c:cc:57:4a:72:0f:
b1:cd:a1:fe:af:92:f9:bf:38:55:4d:05:f9:26:2a:29:7d:d6:
a7:0f:cd:43:71:ca:8c:74:b3:2e:68:85:10:92:c1:bd:05:02:
fc:fe:b9:a0:ea:9f:21:1a:97:bb:02:41:2b:51:94:a5:c7:17:
87:0a:9d:e2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDkcIzfDypYPR3bFoGgs5cksDetMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3
RkM1MURGMTAeFw0yNjA0MjAwNDUwNDZaFw0yNzA0MTkwNDU1NDZaMDMxMTAvBgNV
BAMTKEM1QUQ0RDJFQjIxREQ0RkU0QkRDODAwODI0NjBCMkJDRkJEREZEMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoiEVLYWuwuTMyPmW86bbvhMC
8sFqtOjflgODy5c9WC2XAs8zyoqP20mFaVeW/EJQaanFbk0W0U/n/Ik2rfmuHRKS
o/HfSPbxDPKK2VwvqlfyvqxCoTkiXRYBQbiI+sCDfG2Sxs71UqJK4r+JBdEsRF4D
mQAZLCUzePQQUOosnp8Kxp0i84Y0oYwoVbhh3l35Yh3HTz53PjAM2TTrykPxzGZw
D0j8H105/eeNE7e9A9bn+CkoT2dLcyf7nf8hh53Gc8qCoK5aU7aWEJbg3Qq6BIJI
ys+l0RoM3KZyDgH0oFigc0ANoI96Dau0fdWh+ghVAdsOAVgM9PnEUecUCAONAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUxa1NLrId1P5L3IAIJGCyvPvd/QYwHwYDVR0j
BBgwFoAUH2k81X5ezOoN1qTA5NirIH/FHfEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ2NTYyNzUxMDY2OTMxNS8wLzFGNjkzQ0Q1N0U1RUNDRUEwREQ2QTRDMEU0RDhB
QjIwN0ZDNTFERjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3RkM1MURGMS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTg0NjU2Mjc1MTA2NjkzMTUvMC8zMTMwMzMyZTMx
MzUzNjJlMzYzODJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMxMzMzOTMxMzEzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWecRDANBgkqhkiG9w0BAQsFAAOCAQEAkw/QMbbbNYJ/NENE1+YH
IVMW77lI+SoBi9ASxcLQ1ITsfNkh/B993eJwzRj6yIXjl6aRwhJqtY70FTIsS5pZ
RLWUbOpR1nGUFVw/KxexPFcgOGcz1HgHJ/UxVS2IKfzZFubWtVUb+DdjISyhYpva
5tpoXtOiCOTtW2PE/tjWhkDUtACmc2WqrOtWXkrxn4PF7b6hBkgwX3I+LKElHpoO
GP58N43Gzc1LsoedQ9nTwSNMN6P0boxde7Vc5B8e/6A0XMxXSnIPsc2h/q+S+b84
VU0F+SYqKX3Wpw/NQ3HKjHSzLmiFEJLBvQUC/P65oOqfIRqXuwJBK1GUpccXhwqd
4g==
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:16 2026 by rpki-client