
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa
File: 3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: rSph6E0PNqIRhfXroTq2yxnhRw7/dJYDmf4ML0dmKlc=
Subject key identifier: 31:99:CE:E5:3B:A9:B7:6C:AD:3F:FA:31:DC:CE:7A:FD:36:97:AE:A8
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 3AFD547C965317B639D545C5481FC511FCEE5504
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa
Signing time: Fri 17 Apr 2026 09:05:28 +0000
ROA not before: Fri 17 Apr 2026 09:00:28 +0000
ROA not after: Fri 16 Apr 2027 09:05:28 +0000
asID: 135391
IP address blocks: 103.251.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fd:54:7c:96:53:17:b6:39:d5:45:c5:48:1f:c5:11:fc:ee:55:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 17 09:00:28 2026 GMT
Not After : Apr 16 09:05:28 2027 GMT
Subject: CN=3199CEE53BA9B76CAD3FFA31DCCE7AFD3697AEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:68:89:34:fd:e6:74:89:bd:d9:cb:dd:91:
19:7d:eb:e8:d0:bb:74:60:94:28:25:8d:17:cf:16:
90:b6:d0:d4:f5:31:81:94:7c:03:8e:ca:86:d4:53:
c7:46:65:cb:ad:07:ee:cf:90:cd:48:01:f6:01:dd:
1f:3e:da:f2:07:1a:8d:f9:bb:3f:c6:a4:69:23:7b:
ac:b9:a8:51:7e:ee:f4:6b:6c:8e:40:e9:ff:73:de:
e2:00:0a:83:40:2e:7f:fe:9f:f6:b7:9f:dc:85:82:
48:f2:3e:7e:fd:48:66:3f:95:77:38:3b:78:2d:54:
7a:b5:c2:30:37:f7:bb:91:63:c1:7f:f5:9b:dd:29:
f8:aa:4e:23:2c:d3:c5:a7:2a:ea:ed:dd:5e:00:24:
d7:f6:19:09:69:47:d4:df:88:3a:de:b8:2c:0c:b0:
ff:96:4c:24:46:f2:e2:34:90:32:a7:d7:76:44:33:
6c:48:9b:52:2d:d3:8d:f0:b9:81:22:55:5c:0a:a1:
da:d8:d0:97:6d:46:2c:61:7b:f9:84:ae:63:ff:23:
36:16:fe:e1:65:9f:4f:b0:24:42:20:15:a5:4b:0c:
b8:fb:cc:f5:34:a1:0b:de:79:63:11:d8:1f:31:1b:
07:3e:53:16:6f:1e:8e:15:4f:21:39:89:e7:3d:55:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:CE:E5:3B:A9:B7:6C:AD:3F:FA:31:DC:CE:7A:FD:36:97:AE:A8
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:47:81:33:0b:18:c8:0a:a6:52:a5:11:f0:c1:e1:20:71:e7:
5a:3c:09:02:3a:cc:99:fb:3c:8c:b5:8c:1f:1e:fb:a4:e6:de:
9f:3e:26:1e:84:41:bf:e4:7f:15:c0:b0:47:82:73:f4:ff:a6:
6f:0c:e6:1a:40:5b:7c:41:53:53:c1:a8:af:b5:9a:94:67:02:
f0:f6:c6:64:6c:4d:c5:c2:ec:dd:08:17:a3:c6:e1:23:bb:da:
d9:3e:53:34:c2:76:83:73:7a:17:a4:bd:ee:ba:34:cd:e7:15:
d6:ba:8f:1b:4c:9c:cc:c0:89:ab:fd:b8:19:ab:34:e2:8d:bf:
a6:de:53:ac:64:e5:45:dc:eb:17:c2:9e:2a:4b:9d:a3:99:3e:
26:77:0b:21:a9:3a:86:ce:ab:95:e5:42:74:85:5e:4a:21:ce:
7d:7f:08:24:2f:96:b9:55:9d:bb:df:fa:b3:1e:87:94:37:1b:
e5:0e:2c:50:6c:9a:e2:60:14:e3:39:c1:6d:f4:25:ee:a2:9f:
f3:72:16:1a:bc:c8:6f:e9:db:a0:25:bb:5c:1b:0f:1e:74:35:
e9:a7:9d:05:a4:f8:00:43:e9:d6:78:dd:0c:4d:9a:40:b0:87:
39:24:3f:02:14:74:00:b4:29:cd:1e:f9:f7:cc:a5:66:b2:e8:
79:3e:31:c9
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUOv1UfJZTF7Y51UXFSB/FEfzuVQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MTcwOTAwMjhaFw0yNzA0MTYwOTA1MjhaMDMxMTAvBgNV
BAMTKDMxOTlDRUU1M0JBOUI3NkNBRDNGRkEzMURDQ0U3QUZEMzY5N0FFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcWiJNP3mdIm92cvdkRl96+jQ
u3RglCgljRfPFpC20NT1MYGUfAOOyobUU8dGZcutB+7PkM1IAfYB3R8+2vIHGo35
uz/GpGkje6y5qFF+7vRrbI5A6f9z3uIACoNALn/+n/a3n9yFgkjyPn79SGY/lXc4
O3gtVHq1wjA397uRY8F/9ZvdKfiqTiMs08WnKurt3V4AJNf2GQlpR9TfiDreuCwM
sP+WTCRG8uI0kDKn13ZEM2xIm1It043wuYEiVVwKodrY0JdtRixhe/mErmP/IzYW
/uFln0+wJEIgFaVLDLj7zPU0oQveeWMR2B8xGwc+UxZvHo4VTyE5iec9Ve4VAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUMZnO5Tupt2ytP/ox3M56/TaXrqgwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMDMzMmUz
MjM1MzEyZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzkz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf7gjANBgkqhkiG9w0BAQsFAAOCAQEAP0eBMwsYyAqmUqUR
8MHhIHHnWjwJAjrMmfs8jLWMHx77pObenz4mHoRBv+R/FcCwR4Jz9P+mbwzmGkBb
fEFTU8Gor7WalGcC8PbGZGxNxcLs3QgXo8bhI7va2T5TNMJ2g3N6F6S97ro0zecV
1rqPG0yczMCJq/24Gas04o2/pt5TrGTlRdzrF8KeKkudo5k+JncLIak6hs6rleVC
dIVeSiHOfX8IJC+WuVWdu9/6sx6HlDcb5Q4sUGya4mAU4znBbfQl7qKf83IWGrzI
b+nboCW7XBsPHnQ16aedBaT4AEPp1njdDE2aQLCHOSQ/AhR0ALQpzR7598ylZrLo
eT4xyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:20 2026 by rpki-client