
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34372e302f32342d3234203d3e203633353939.roa
File: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=
Subject key identifier: A1:90:C6:5A:D3:4E:1F:A1:D6:5F:C7:1A:FE:74:29:A9:C7:A4:6D:6E
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 5753C525D37CF5D4F6CF790399D46FE74355F99D
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34372e302f32342d3234203d3e203633353939.roa
Signing time: Fri 17 Apr 2026 07:31:58 +0000
ROA not before: Fri 17 Apr 2026 07:26:58 +0000
ROA not after: Fri 16 Apr 2027 07:31:58 +0000
asID: 63599
IP address blocks: 103.215.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:53:c5:25:d3:7c:f5:d4:f6:cf:79:03:99:d4:6f:e7:43:55:f9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 17 07:26:58 2026 GMT
Not After : Apr 16 07:31:58 2027 GMT
Subject: CN=A190C65AD34E1FA1D65FC71AFE7429A9C7A46D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:e6:8f:c7:cb:49:21:51:d7:c7:6f:6e:7c:
d7:7b:93:9d:66:b3:62:0f:dc:fb:7a:ff:97:6f:ea:
f6:04:7f:8f:d2:49:a2:46:5b:bc:50:89:5c:cb:14:
5d:42:44:e8:ed:e3:0d:69:c4:f2:a9:db:f8:66:42:
6f:e5:be:30:17:43:5c:28:48:24:28:d7:d6:f7:d0:
1f:a4:05:aa:02:76:f5:2f:fd:0d:2d:53:0f:9e:66:
41:c5:08:8a:72:00:b7:43:bc:50:46:cb:b2:bc:9f:
cb:75:80:89:8d:83:cb:1e:12:ac:22:c2:91:fc:6d:
7d:69:35:5d:8c:a5:ca:1b:27:62:a6:98:7f:d1:d7:
f6:06:6d:97:12:3e:43:ee:d7:06:e5:9f:6e:79:a3:
cf:99:29:ea:57:c1:da:f4:78:35:ba:26:78:48:ef:
e6:a4:d2:7b:52:f9:c3:99:8a:7f:c1:7a:4d:92:3f:
31:4f:e7:64:8d:8b:52:b9:07:ff:7e:95:9c:f8:2f:
db:26:37:a6:61:05:2a:40:ef:6f:ab:be:33:cb:4b:
fa:1e:b5:64:6d:34:f3:31:5f:a5:c5:44:0f:c5:63:
60:f2:07:ed:c9:af:f8:39:68:dd:a8:7e:3f:f3:b4:
0e:ad:2b:5f:c9:87:5d:49:ba:01:03:e2:14:f3:90:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:90:C6:5A:D3:4E:1F:A1:D6:5F:C7:1A:FE:74:29:A9:C7:A4:6D:6E
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34372e302f32342d3234203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a5:1e:ba:15:f0:41:eb:4f:1a:bd:c5:31:e9:b9:3d:06:d3:
f1:7e:cd:8c:c2:f8:4c:ad:47:af:b7:e1:ad:bc:81:8b:38:81:
a4:ec:e9:a1:c7:4d:8f:7b:e4:66:f1:f1:c0:de:92:9d:ca:ff:
a4:40:cb:6a:b3:d4:fc:2f:0d:94:7b:84:a1:d2:8d:7c:86:7d:
ba:92:54:6c:64:8a:6d:45:df:55:eb:7b:ce:d9:cb:ba:cd:ae:
b8:b1:23:f2:fc:66:a6:0e:5c:6e:f6:3c:7a:7f:ed:c9:86:47:
fd:7c:99:a6:03:a8:69:5d:00:5a:77:28:5c:41:1d:21:4f:c7:
4e:d0:2b:94:e2:88:b7:19:e6:f1:e2:d5:9c:c2:f4:23:0d:cd:
48:2e:6d:94:3b:4c:7e:a5:13:a0:f2:ac:04:2b:e8:b0:fa:e5:
c2:65:3c:92:a6:d7:26:72:fe:c7:06:6e:bf:09:c4:18:2f:2c:
c7:5f:4d:bd:08:04:45:7f:01:29:bf:5a:31:1b:81:4e:0b:d7:
1e:53:2d:71:80:1a:56:e9:69:3b:2c:07:ef:a8:ba:1a:7e:60:
ac:75:11:df:a7:30:fb:70:03:a2:54:3e:78:1a:e9:93:64:71:
d0:01:40:6d:10:ac:d4:df:e3:29:f6:31:17:f4:f3:bb:56:98:
32:d1:a1:69
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUV1PFJdN89dT2z3kDmdRv50NV+Z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG
NUFCNjEzMzAeFw0yNjA0MTcwNzI2NThaFw0yNzA0MTYwNzMxNThaMDMxMTAvBgNV
BAMTKEExOTBDNjVBRDM0RTFGQTFENjVGQzcxQUZFNzQyOUE5QzdBNDZENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/uaPx8tJIVHXx29ufNd7k51m
s2IP3Pt6/5dv6vYEf4/SSaJGW7xQiVzLFF1CROjt4w1pxPKp2/hmQm/lvjAXQ1wo
SCQo19b30B+kBaoCdvUv/Q0tUw+eZkHFCIpyALdDvFBGy7K8n8t1gImNg8seEqwi
wpH8bX1pNV2MpcobJ2KmmH/R1/YGbZcSPkPu1wbln255o8+ZKepXwdr0eDW6JnhI
7+ak0ntS+cOZin/Bek2SPzFP52SNi1K5B/9+lZz4L9smN6ZhBSpA72+rvjPLS/oe
tWRtNPMxX6XFRA/FY2DyB+3Jr/g5aN2ofj/ztA6tK1/Jh11JugED4hTzkKDfAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUoZDGWtNOH6HWX8ca/nQpqcekbW4wHwYDVR0j
BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE
OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODI0MTkyMy8wLzMxMzAzMzJlMzIz
MTM1MmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGfXLzANBgkqhkiG9w0BAQsFAAOCAQEAeqUeuhXwQetPGr3FMem5PQbT
8X7NjML4TK1Hr7fhrbyBiziBpOzpocdNj3vkZvHxwN6Sncr/pEDLarPU/C8NlHuE
odKNfIZ9upJUbGSKbUXfVet7ztnLus2uuLEj8vxmpg5cbvY8en/tyYZH/XyZpgOo
aV0AWncoXEEdIU/HTtArlOKItxnm8eLVnML0Iw3NSC5tlDtMfqUToPKsBCvosPrl
wmU8kqbXJnL+xwZuvwnEGC8sx19NvQgERX8BKb9aMRuBTgvXHlMtcYAaVulpOywH
76i6Gn5grHUR36cw+3ADolQ+eBrpk2Rx0AFAbRCs1N/jKfYxF/Tzu1aYMtGhaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:36 2026 by rpki-client