
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34362e302f32342d3234203d3e203633353939.roa
File: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=
Subject key identifier: 37:C1:65:AB:F1:C6:2A:9D:18:B8:16:B5:7A:98:49:A9:67:6D:A2:60
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 0C8D3FBFE26D798E5AA94CE6BA381A7F9384CA0C
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34362e302f32342d3234203d3e203633353939.roa
Signing time: Fri 17 Apr 2026 07:31:58 +0000
ROA not before: Fri 17 Apr 2026 07:26:58 +0000
ROA not after: Fri 16 Apr 2027 07:31:58 +0000
asID: 63599
IP address blocks: 103.215.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8d:3f:bf:e2:6d:79:8e:5a:a9:4c:e6:ba:38:1a:7f:93:84:ca:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 17 07:26:58 2026 GMT
Not After : Apr 16 07:31:58 2027 GMT
Subject: CN=37C165ABF1C62A9D18B816B57A9849A9676DA260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:6f:46:9c:16:e6:d7:ac:b2:7f:8c:46:a6:
3f:b7:71:14:b9:1c:1c:56:56:61:5e:a2:ba:ca:94:
21:8f:db:20:b5:f4:41:a9:3d:97:72:f7:7f:5c:6b:
67:bb:3c:01:fd:5e:7a:15:92:0b:dd:a6:4a:fe:aa:
14:ab:86:ad:1d:f8:e2:dd:c0:1e:38:5e:0c:b8:70:
10:41:45:ac:8b:d6:a6:28:d7:d7:97:18:5d:4a:12:
9f:5c:a3:c5:c1:de:cf:dc:bd:6d:d5:cc:71:1f:17:
c1:90:93:1b:3f:2e:19:d4:c9:7d:77:b2:48:cb:14:
68:4c:1a:0b:7e:8d:0a:25:8f:1b:dc:1d:20:c4:6f:
fe:df:6d:9c:cf:08:41:d6:8e:cf:65:05:06:4a:66:
78:d2:0d:39:ab:18:ff:a6:6d:69:9f:5b:aa:74:11:
de:53:d5:c7:8d:7b:07:73:d4:10:f9:6a:d7:b0:62:
e8:b8:69:23:99:32:fc:fb:b1:46:a9:61:b6:dd:fd:
95:89:b6:6a:61:eb:29:37:9d:a3:64:86:21:60:a1:
44:73:5d:d5:f3:40:4c:b3:84:90:0a:e2:bd:d9:ab:
c8:e1:c9:86:d7:72:04:01:69:81:5d:6e:3f:78:6f:
e5:03:22:77:e4:d0:8f:07:37:7a:95:47:99:27:04:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:65:AB:F1:C6:2A:9D:18:B8:16:B5:7A:98:49:A9:67:6D:A2:60
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34362e302f32342d3234203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:54:aa:5c:36:e7:14:5a:b3:e9:5b:31:60:fd:06:a4:7f:ac:
42:6e:47:60:26:bf:69:71:a9:56:97:6f:90:b2:45:d1:01:da:
10:d4:53:49:ce:ae:b4:86:3c:e7:b1:61:cb:03:5f:9b:6e:87:
b0:62:f9:fa:10:62:9d:60:45:87:20:6f:b6:74:a4:18:a5:5d:
52:22:b4:85:a0:e4:a7:15:cb:c3:ef:39:2a:e0:5b:c8:67:93:
c2:7a:7a:01:6c:da:7c:4f:4f:93:ce:90:ad:c5:9c:30:25:da:
36:f7:b4:74:9e:4a:a4:d4:77:5c:11:68:0f:51:50:30:4e:3a:
66:c9:3c:20:fe:f9:00:8c:95:86:f6:12:11:03:6c:d1:d2:81:
7e:c9:2b:40:9a:5e:eb:68:47:fe:30:84:bf:1d:87:aa:e2:40:
66:fe:c6:d0:a2:de:76:7f:43:f9:49:c2:bb:d0:8d:45:bc:f8:
40:cf:6a:0a:19:ca:dd:a2:78:31:62:11:5f:d8:28:66:0d:7f:
c7:47:77:ff:47:c4:98:5a:b7:37:a8:9a:16:47:84:c6:2a:95:
c8:25:6c:8b:b6:0e:ed:2b:54:ad:a3:7f:27:4c:e0:73:50:f7:
4c:a9:b9:6b:e4:e1:e1:9b:25:71:e7:3b:5e:b9:8c:b1:bb:d1:
38:35:43:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:32 2026 by rpki-client