
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38342e31362e302f32322d3332203d3e203633353939.roa
File: 3130332e38342e31362e302f32322d3332203d3e203633353939.roa (raw, json)
Hash identifier: VoSUaL/tdgMTKh9ghUzFbZIbZY9SJ9O6G+/rr0YYTGM=
Subject key identifier: C4:86:19:E9:D7:8D:DA:ED:23:85:13:46:7A:36:7A:9A:15:33:33:82
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 0EA11C332A0359DA83D1714CA3952929F0938656
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38342e31362e302f32322d3332203d3e203633353939.roa
Signing time: Thu 16 Apr 2026 06:45:38 +0000
ROA not before: Thu 16 Apr 2026 06:40:38 +0000
ROA not after: Thu 15 Apr 2027 06:45:38 +0000
asID: 63599
IP address blocks: 103.84.16.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a1:1c:33:2a:03:59:da:83:d1:71:4c:a3:95:29:29:f0:93:86:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 16 06:40:38 2026 GMT
Not After : Apr 15 06:45:38 2027 GMT
Subject: CN=C48619E9D78DDAED238513467A367A9A15333382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:ff:3e:09:93:db:ad:d1:c3:52:90:75:88:
87:ba:17:16:ad:38:9f:97:dd:b0:20:5e:a5:9e:b5:
5b:ff:f1:61:5f:ac:25:cc:10:95:99:d5:fe:aa:ba:
c8:57:15:62:d8:ce:14:b9:ac:66:71:91:d9:c1:85:
3e:f6:9a:1f:4c:bc:f5:05:60:d5:7e:fd:a6:1b:12:
2f:ac:d4:79:1d:81:6f:5a:f4:60:a7:6a:6a:3b:6f:
86:46:11:39:b5:bb:4d:fc:2a:90:a9:00:9a:12:1a:
4d:a8:d4:e2:9e:15:4e:6a:5d:55:f2:a6:eb:38:2f:
27:0c:50:a3:58:23:7b:fb:d1:aa:aa:98:95:34:80:
eb:77:b0:f7:06:d9:6d:7f:3f:e2:e1:40:a4:12:b4:
48:e0:f9:5d:2d:47:62:75:2e:a6:d8:34:c9:f1:65:
43:c5:5d:72:ed:ca:b4:69:3b:30:21:5b:46:4f:8b:
c5:2f:c8:ac:dd:95:40:85:91:b5:cc:ae:59:a5:ff:
fb:b5:89:b1:88:20:35:b5:b3:54:c8:d6:d6:3f:c9:
89:56:58:da:3b:96:90:89:d6:86:65:5f:4f:2c:ca:
23:2c:5b:d0:7f:83:5c:83:2f:a0:12:c6:ae:03:d3:
97:d9:41:b6:ef:7e:00:56:6a:d8:29:bc:73:bd:81:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:19:E9:D7:8D:DA:ED:23:85:13:46:7A:36:7A:9A:15:33:33:82
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38342e31362e302f32322d3332203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:2a:aa:0a:26:65:db:9a:37:eb:9c:85:61:2b:1b:a1:9a:a1:
2d:08:c4:20:d7:4d:83:37:09:ac:0c:77:0e:b0:0a:c7:8a:19:
76:4a:79:0d:8b:9f:8e:8b:75:39:8b:dd:81:d3:c7:94:53:50:
ed:0a:ff:44:75:ef:7a:be:4a:a0:43:29:4a:98:61:52:15:dc:
20:ef:9c:98:a6:37:c1:88:de:a3:50:82:85:97:09:c9:3b:3a:
1c:26:d6:40:7f:e8:ad:38:20:49:47:96:c5:e8:ee:34:f9:e9:
aa:48:1e:08:1b:da:85:7c:9c:0e:32:86:5b:ef:2e:ee:bb:f9:
f8:4c:aa:20:d9:c8:8a:fd:44:4d:7f:26:2d:3b:70:a3:d5:20:
e1:fa:9b:45:9f:15:f9:06:ce:a2:0d:90:14:eb:95:40:a7:55:
a8:17:66:61:73:5b:f2:c8:ea:8d:67:ce:e6:da:30:ec:6b:47:
8b:f3:db:07:f8:d1:58:a0:37:1a:91:77:33:01:79:97:9a:71:
f1:0f:0a:ba:cd:49:9b:3c:87:86:97:12:a3:a7:c5:b0:ac:c2:
52:78:6d:22:08:ca:09:06:5c:ea:f3:3b:3e:6e:15:56:4d:41:
9c:99:fc:27:06:e3:7d:25:66:94:2c:5d:20:c7:69:a8:e4:5e:
d7:8f:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:25 2026 by rpki-client