
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e342e302f32322d3232203d3e2039383038.roa
File: 3130332e3231362e342e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier: f7nNO2as4uAkXczBq6ceHvjohtGu7KtEhJ6yF+qbpoE=
Subject key identifier: 20:43:93:A2:3F:98:03:48:3C:DC:4F:E2:ED:15:BE:EE:B3:BE:69:BE
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 2F39FCD442B5F61C391874EEA33024D906E000DF
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e342e302f32322d3232203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 06:05:56 +0000
ROA not before: Mon 20 Apr 2026 06:00:56 +0000
ROA not after: Mon 19 Apr 2027 06:05:56 +0000
asID: 9808
IP address blocks: 103.216.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:39:fc:d4:42:b5:f6:1c:39:18:74:ee:a3:30:24:d9:06:e0:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 06:00:56 2026 GMT
Not After : Apr 19 06:05:56 2027 GMT
Subject: CN=204393A23F9803483CDC4FE2ED15BEEEB3BE69BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:6d:0a:ea:d2:0c:54:99:f2:f0:55:72:ae:
86:34:f9:c8:ed:59:0f:9e:81:2c:a2:0d:3f:58:e9:
97:6c:be:1b:da:d8:73:40:34:93:d7:51:8c:96:9f:
cd:6a:79:df:11:ae:6f:31:74:9b:3d:f3:b5:da:9c:
1e:de:f0:1b:2f:24:ef:74:9a:2f:ae:fb:cf:6d:d4:
3a:67:57:65:42:fb:e9:8f:85:8b:43:bb:6e:34:a7:
3d:43:87:59:c6:75:c3:fa:5d:62:64:35:6e:25:7a:
c8:76:76:2b:e6:28:16:55:0a:75:94:07:23:ab:81:
73:4f:d9:45:15:2f:f7:1f:d9:29:b5:dd:3d:39:ac:
da:1d:6d:b8:fa:ac:5e:5e:cb:14:62:fc:e9:61:81:
17:6e:88:02:45:6d:24:6e:c3:43:4b:d8:5b:e8:b4:
4d:64:89:7c:69:1c:ea:e7:45:f5:a7:70:62:0b:a6:
6f:08:e4:1b:88:32:a4:e5:12:3f:c2:f1:86:b9:34:
e1:07:7e:4e:37:81:1d:73:8a:1e:a9:3a:fa:4c:9e:
1e:d5:cf:b4:6e:da:54:52:19:5a:fc:17:80:a6:ef:
10:d2:3f:50:02:84:5e:6c:41:0b:38:7a:b0:b6:9e:
49:95:b8:55:21:5d:81:8b:b7:fb:3d:ec:10:bd:15:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:93:A2:3F:98:03:48:3C:DC:4F:E2:ED:15:BE:EE:B3:BE:69:BE
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e342e302f32322d3232203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.4.0/22
Signature Algorithm: sha256WithRSAEncryption
12:9d:e7:f9:39:1a:cb:29:3e:6e:e0:87:07:77:4c:58:58:fa:
23:d2:8c:15:4b:cb:17:73:96:96:2c:01:a1:00:2b:8c:50:61:
71:1b:e4:65:9b:cb:db:54:c2:ee:e9:7b:79:1e:90:59:eb:4d:
32:e7:62:ae:eb:87:ce:d1:10:00:fa:be:84:25:e6:f9:6f:44:
a6:01:f8:4e:e6:36:b2:9e:e0:b5:a7:e1:5b:f8:4b:7a:9f:25:
6f:d6:4c:a7:d6:6c:8c:0a:25:69:7b:d6:ed:81:39:8c:9e:ef:
5e:a2:f8:1c:2c:d2:5c:ce:73:c6:54:36:70:f0:c6:71:37:46:
ed:54:3b:de:a3:2e:2f:31:9c:d5:db:ee:7d:3d:03:fe:6b:e3:
10:a2:f2:a6:a0:1d:a4:e5:bb:87:58:aa:e0:13:6f:85:a7:9b:
6f:94:3b:90:df:ab:c3:b1:43:7c:c7:33:c7:ed:d3:81:11:b5:
d0:f4:b6:c9:19:43:4e:9b:78:2e:f4:47:4c:4f:bc:00:bb:91:
96:45:f9:47:d1:82:69:48:1b:fd:ae:fe:95:4a:9a:f2:1f:1d:
47:a1:cb:9e:22:26:dc:87:06:0a:7e:99:35:e9:f7:ca:a8:8e:
e3:5e:59:43:3f:fd:c6:f3:6c:41:2f:af:53:b1:24:95:a6:f2:
db:c0:6b:6f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIULzn81EK19hw5GHTuozAk2QbgAN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG
NEM0QzZEQjAeFw0yNjA0MjAwNjAwNTZaFw0yNzA0MTkwNjA1NTZaMDMxMTAvBgNV
BAMTKDIwNDM5M0EyM0Y5ODAzNDgzQ0RDNEZFMkVEMTVCRUVFQjNCRTY5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRim0K6tIMVJny8FVyroY0+cjt
WQ+egSyiDT9Y6Zdsvhva2HNANJPXUYyWn81qed8Rrm8xdJs987XanB7e8BsvJO90
mi+u+89t1DpnV2VC++mPhYtDu240pz1Dh1nGdcP6XWJkNW4lesh2divmKBZVCnWU
ByOrgXNP2UUVL/cf2Sm13T05rNodbbj6rF5eyxRi/OlhgRduiAJFbSRuw0NL2Fvo
tE1kiXxpHOrnRfWncGILpm8I5BuIMqTlEj/C8Ya5NOEHfk43gR1zih6pOvpMnh7V
z7Ru2lRSGVr8F4Cm7xDSP1AChF5sQQs4erC2nkmVuFUhXYGLt/s97BC9FQTbAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUIEOToj+YA0g83E/i7RW+7rO+ab4wHwYDVR0j
BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4
MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDg5MjQ1NTUyNjA3MjM1LzAvMzEzMDMzMmUzMjMx
MzYyZTM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn2AQwDQYJKoZIhvcNAQELBQADggEBABKd5/k5GsspPm7ghwd3TFhY+iPSjBVL
yxdzlpYsAaEAK4xQYXEb5GWby9tUwu7pe3kekFnrTTLnYq7rh87READ6voQl5vlv
RKYB+E7mNrKe4LWn4Vv4S3qfJW/WTKfWbIwKJWl71u2BOYye716i+Bws0lzOc8ZU
NnDwxnE3Ru1UO96jLi8xnNXb7n09A/5r4xCi8qagHaTlu4dYquATb4Wnm2+UO5Df
q8OxQ3zHM8ft04ERtdD0tskZQ06beC70R0xPvAC7kZZF+UfRgmlIG/2u/pVKmvIf
HUehy54iJtyHBgp+mTXp98qojuNeWUM//cbzbEEvr1OxJJWm8tvAa28=
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:41 2026 by rpki-client