
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3235332e3233322e302f32322d3232203d3e2039383038.roa
File: 3130332e3235332e3233322e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier: 0cpCpeNnUr0fmUzQI+746fpm2df8MQCplzyHu42jCqY=
Subject key identifier: 60:86:AF:9A:18:B5:70:FB:53:42:51:9F:12:0E:5E:1D:58:95:1C:4E
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 0A9B5DE89F8D775FD914AF0ABB4CDA1BCA0B00B4
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3235332e3233322e302f32322d3232203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 06:10:26 +0000
ROA not before: Mon 20 Apr 2026 06:05:26 +0000
ROA not after: Mon 19 Apr 2027 06:10:26 +0000
asID: 9808
IP address blocks: 103.253.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9b:5d:e8:9f:8d:77:5f:d9:14:af:0a:bb:4c:da:1b:ca:0b:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 06:05:26 2026 GMT
Not After : Apr 19 06:10:26 2027 GMT
Subject: CN=6086AF9A18B570FB5342519F120E5E1D58951C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:57:aa:85:69:ea:c7:64:24:94:b0:bd:1f:
d0:a0:a0:68:cc:61:fd:e7:cc:00:f1:f6:cb:f3:dd:
34:39:ce:f3:63:5b:e6:c8:8c:28:43:10:bb:ea:39:
f0:56:fb:5f:86:96:60:98:f7:9a:1e:1f:6e:96:37:
2c:e1:04:5c:20:1c:2e:0a:4a:67:b6:be:25:6d:ae:
ca:12:8b:66:71:57:f0:49:a7:73:4d:2d:0e:19:0d:
1f:4c:ed:0b:e7:04:47:c4:bb:68:0d:58:8a:ba:ca:
ef:b1:94:e1:12:2f:30:8d:74:b4:20:6b:16:aa:c6:
c8:6d:1b:79:75:8e:d8:6c:7e:04:99:09:d3:49:86:
6e:ec:0b:75:93:56:d9:d8:d0:55:7d:b5:02:45:f8:
1e:2b:b3:c1:17:9c:10:de:27:7a:bc:6e:be:8b:11:
18:be:ee:c9:ba:0e:1f:88:4a:4f:17:ab:81:6c:31:
ad:87:90:a6:86:ef:d5:4d:53:e5:9c:5d:4c:4a:2d:
2e:1d:64:87:c5:16:74:e4:21:c1:ea:83:65:8d:07:
20:a1:b6:88:b7:5e:11:89:70:90:69:02:d5:c9:86:
3f:d1:62:ab:4f:80:de:3b:77:6c:ed:74:af:7e:67:
77:da:30:31:dd:c4:cb:76:4e:8f:42:ac:3f:db:02:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:AF:9A:18:B5:70:FB:53:42:51:9F:12:0E:5E:1D:58:95:1C:4E
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3235332e3233322e302f32322d3232203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:ad:70:1e:db:23:fa:0a:a4:da:96:89:35:16:04:44:cf:d3:
f6:19:01:11:87:50:97:66:99:7c:a5:2f:18:7c:dd:e0:9b:86:
65:6e:70:8a:e0:f8:d6:1a:82:34:0c:88:1f:a7:82:fe:06:27:
1f:34:7a:db:c2:b5:82:a1:7b:a5:bd:9e:64:ca:39:32:6c:9e:
45:55:7f:1a:d6:a6:3f:ac:80:80:7f:ca:cd:48:44:b0:e4:2d:
44:ef:4d:6e:8b:55:f7:79:ee:a6:6b:eb:0b:8f:44:95:22:c6:
2e:ed:a7:53:7a:9e:b7:24:a7:52:b0:8b:de:72:6d:68:a1:c3:
21:e5:1e:74:0c:24:a0:1d:d2:e6:b0:e1:08:76:b3:65:0f:77:
86:5b:21:7e:93:df:5b:55:27:f6:f8:0c:d6:6c:3c:6a:9c:b6:
a3:da:39:f7:e1:26:fc:8d:83:96:f2:42:10:b0:4d:1d:ce:55:
df:cd:0b:83:21:9c:b0:eb:8b:e5:39:a5:c8:a7:83:2f:6b:f6:
21:89:f7:36:8c:6a:1e:a5:2a:c1:b2:b3:33:e1:11:f2:4e:24:
ca:b7:43:72:7c:91:82:f4:27:33:0a:62:18:6e:3b:b3:59:52:
5b:d7:df:99:43:5d:0c:ad:a5:fd:bf:e9:76:98:85:52:ae:6e:
8d:77:67:a2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCptd6J+Nd1/ZFK8Ku0zaG8oLALQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG
NEM0QzZEQjAeFw0yNjA0MjAwNjA1MjZaFw0yNzA0MTkwNjEwMjZaMDMxMTAvBgNV
BAMTKDYwODZBRjlBMThCNTcwRkI1MzQyNTE5RjEyMEU1RTFENTg5NTFDNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEY1eqhWnqx2QklLC9H9CgoGjM
Yf3nzADx9svz3TQ5zvNjW+bIjChDELvqOfBW+1+GlmCY95oeH26WNyzhBFwgHC4K
Sme2viVtrsoSi2ZxV/BJp3NNLQ4ZDR9M7QvnBEfEu2gNWIq6yu+xlOESLzCNdLQg
axaqxshtG3l1jthsfgSZCdNJhm7sC3WTVtnY0FV9tQJF+B4rs8EXnBDeJ3q8br6L
ERi+7sm6Dh+ISk8Xq4FsMa2HkKaG79VNU+WcXUxKLS4dZIfFFnTkIcHqg2WNByCh
toi3XhGJcJBpAtXJhj/RYqtPgN47d2ztdK9+Z3faMDHdxMt2To9CrD/bAuSjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUYIavmhi1cPtTQlGfEg5eHViVHE4wHwYDVR0j
BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4
MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5ODQ4OTI0NTU1MjYwNzIzNS8wLzMxMzAzMzJlMzIz
NTMzMmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzOTM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmf96DANBgkqhkiG9w0BAQsFAAOCAQEAoa1wHtsj+gqk2paJNRYERM/T
9hkBEYdQl2aZfKUvGHzd4JuGZW5wiuD41hqCNAyIH6eC/gYnHzR628K1gqF7pb2e
ZMo5MmyeRVV/GtamP6yAgH/KzUhEsOQtRO9NbotV93nupmvrC49ElSLGLu2nU3qe
tySnUrCL3nJtaKHDIeUedAwkoB3S5rDhCHazZQ93hlshfpPfW1Un9vgM1mw8apy2
o9o59+Em/I2DlvJCELBNHc5V380LgyGcsOuL5TmlyKeDL2v2IYn3NoxqHqUqwbKz
M+ER8k4kyrdDcnyRgvQnMwpiGG47s1lSW9ffmUNdDK2l/b/pdpiFUq5ujXdnog==
-----END CERTIFICATE-----
Generated at Wed May 13 15:40:25 2026 by rpki-client