
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137362e302f32322d3332203d3e203633353939.roa
File: 3130332e3232322e3137362e302f32322d3332203d3e203633353939.roa (raw, json)
Hash identifier: pyntV5d+Ry0e6b3kVCP9XtAhqXMKUTMOuIAbrxSN+w4=
Subject key identifier: 5F:ED:E4:10:D6:D1:33:89:50:14:57:58:E3:AA:42:E7:ED:8C:DB:A4
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 6CBD6DB7AC1D68ACF91ECE54E569154A7697354C
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137362e302f32322d3332203d3e203633353939.roa
Signing time: Thu 16 Apr 2026 06:45:38 +0000
ROA not before: Thu 16 Apr 2026 06:40:38 +0000
ROA not after: Thu 15 Apr 2027 06:45:38 +0000
asID: 63599
IP address blocks: 103.222.176.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:bd:6d:b7:ac:1d:68:ac:f9:1e:ce:54:e5:69:15:4a:76:97:35:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 16 06:40:38 2026 GMT
Not After : Apr 15 06:45:38 2027 GMT
Subject: CN=5FEDE410D6D1338950145758E3AA42E7ED8CDBA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:78:ef:b3:36:45:57:70:ce:05:cf:af:fd:
50:57:5d:59:32:5d:72:49:3e:b9:39:68:48:bc:96:
bd:63:dd:75:6b:1a:70:0a:cf:e7:37:86:19:65:4a:
ca:dd:74:9b:d7:b9:e9:5d:4c:08:2d:2b:e3:6b:62:
a2:50:84:d4:02:36:df:f3:80:f1:fe:12:f9:fb:48:
71:a7:13:a3:45:f6:3e:11:be:16:76:66:5a:8d:1e:
47:49:94:a8:ce:aa:b6:69:9c:90:13:db:14:e9:91:
79:65:11:a6:db:62:f1:24:29:ed:71:26:54:ae:2b:
e1:12:2f:7c:9e:1d:98:64:aa:12:e4:ff:5c:83:68:
82:b9:85:5f:70:fa:49:c6:9f:60:cc:3d:6d:49:76:
23:29:20:2a:75:b3:2e:47:1a:31:5e:eb:5b:59:41:
1b:3b:8b:11:ca:b5:f1:a0:cf:15:82:29:7b:4b:43:
2e:0b:21:5a:0b:b0:3c:12:24:5c:81:65:b4:ae:96:
db:79:3b:95:b9:4e:d4:b7:b5:49:57:74:39:6a:25:
fd:22:cf:5f:3b:93:34:34:36:33:58:24:34:bc:bd:
53:7a:ba:3c:82:55:95:b2:d3:ec:b0:2c:e3:2e:ac:
76:03:10:51:27:97:eb:12:e6:32:f0:03:62:60:43:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:E4:10:D6:D1:33:89:50:14:57:58:E3:AA:42:E7:ED:8C:DB:A4
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137362e302f32322d3332203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:4e:06:16:e3:21:b6:c8:f6:43:15:10:fc:20:6b:70:3f:c0:
b3:38:7d:5f:e1:6d:4d:6e:a2:28:a9:e6:d9:1a:09:be:92:0f:
4a:b7:eb:b8:bf:b3:58:44:c7:87:44:e4:3a:0a:1a:79:9c:2a:
9d:e0:a2:e1:8e:94:d9:87:35:f4:a5:5e:40:18:28:3c:f1:b2:
38:58:4e:49:f0:2e:5c:33:c0:c1:a2:ac:cc:7b:b0:30:86:a7:
00:56:9d:5c:19:a4:8b:1b:55:1b:9c:5b:ff:44:12:1a:6b:29:
8b:fc:10:53:1c:5f:aa:11:fe:28:1a:9d:55:37:de:45:4b:b9:
ad:77:4e:00:25:2d:6a:8f:7f:b5:5a:5d:47:f3:3b:b0:cc:f7:
f0:cd:20:38:b6:54:f4:0f:d1:b7:d5:32:a7:31:89:8f:f8:88:
14:3b:36:d2:bb:ce:c3:e7:87:a8:dd:c1:b3:d6:4b:4f:4c:50:
6f:d2:9e:f1:b7:ac:50:29:9d:8c:07:d1:57:44:bf:d4:b7:c3:
e7:2c:b5:0d:99:3e:7e:39:5c:3f:2a:1c:e7:4d:c3:cd:92:c1:
0e:9d:60:83:8d:66:10:db:b7:48:d0:ce:85:8d:c1:bf:95:ae:
ef:4b:a5:e2:e9:b3:2c:8d:33:7a:dd:8a:c9:03:7e:aa:dc:f2:
e4:b0:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:49 2026 by rpki-client