
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa
File: 3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: 3bTRSDiKkrOgwIE9K+BKvBbFZU2U+XjTotJ6TJJwEOE=
Subject key identifier: 59:F2:09:A5:1F:85:41:A2:23:AB:DF:1A:A4:AD:20:66:04:62:DB:6E
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 5E5F6D6424D111AE3FB2377EBB09DB11AB82DAE2
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:09:44 +0000
ROA not before: Thu 16 Apr 2026 09:04:44 +0000
ROA not after: Thu 15 Apr 2027 09:09:44 +0000
asID: 23848
IP address blocks: 103.210.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5f:6d:64:24:d1:11:ae:3f:b2:37:7e:bb:09:db:11:ab:82:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:04:44 2026 GMT
Not After : Apr 15 09:09:44 2027 GMT
Subject: CN=59F209A51F8541A223ABDF1AA4AD20660462DB6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:8e:27:33:49:0a:81:22:4d:68:a4:09:74:
07:74:a1:d5:bc:2a:6c:76:e1:ec:2c:4f:e1:c4:b9:
a4:0c:43:8a:8d:75:dc:10:01:0e:81:b8:02:ba:d5:
89:11:38:ec:db:82:52:b0:b5:d0:00:34:87:c7:6f:
e6:b4:b9:bb:da:f4:ee:c5:4e:60:db:27:72:46:0f:
51:8e:45:68:1a:57:3e:b3:42:51:bf:dc:71:44:45:
8c:ff:f2:c6:f3:93:3f:02:47:af:95:0e:6b:f7:f4:
c7:d2:2e:eb:33:5b:5f:3c:29:2d:f8:7f:96:e0:63:
6c:54:15:f0:9a:3a:96:59:29:11:f1:e6:17:57:a5:
eb:44:e3:92:a8:2f:5c:b5:77:1e:1e:37:6a:49:f7:
1a:e6:8c:26:91:34:b6:20:b6:12:a5:9c:b8:de:4e:
55:2c:c7:aa:63:c7:c9:41:12:05:a0:43:4f:9c:2f:
1c:a7:7f:f3:d6:a6:3a:ff:ff:b3:e6:14:21:af:fc:
a3:fa:90:51:04:16:71:16:88:80:ea:0d:24:b3:22:
8e:cc:79:bb:89:14:6e:b6:4a:ca:06:e2:13:29:f3:
f1:23:4f:94:8b:c8:33:a9:24:3b:e0:76:92:e0:c7:
ab:21:36:38:dc:8f:db:a0:2c:c7:0e:04:7e:a6:1c:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F2:09:A5:1F:85:41:A2:23:AB:DF:1A:A4:AD:20:66:04:62:DB:6E
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.170.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0f:f0:8e:20:a1:67:87:62:90:b6:12:5f:bd:12:92:2c:a3:
fa:d0:9c:df:36:fd:66:ef:e1:9f:d8:0d:dd:9d:aa:33:46:c6:
56:75:29:56:7d:33:b0:03:ad:b9:bb:4f:49:c4:2d:16:65:4b:
fc:56:88:15:be:27:00:0e:20:b4:b3:64:9d:64:f5:1d:29:62:
00:92:7b:78:32:28:b5:c4:41:1a:8a:6f:7d:e7:fd:b2:e7:18:
f7:58:a9:50:c4:b2:9d:bf:20:f6:bd:85:96:cd:ff:ad:7c:f4:
c7:cf:2a:ed:40:d2:44:91:37:90:1b:51:a3:d2:62:87:14:80:
36:2c:6c:5b:c0:23:76:12:e3:02:3f:ad:5c:d9:1d:47:f7:27:
42:8f:a1:54:59:0c:08:70:62:3f:9a:e6:06:20:11:56:1c:d9:
ca:e8:53:65:1a:9b:1b:b7:0b:d1:69:36:a0:46:93:75:17:30:
ea:b8:db:30:ef:0a:7f:0b:d8:9c:a8:1c:4b:c0:05:eb:af:79:
50:cb:53:06:a3:ec:48:2b:6b:20:c0:d4:b2:e4:4a:85:de:32:
6a:cc:b3:97:ac:8c:b3:57:a7:d4:10:96:d7:9d:eb:ff:03:6c:
4c:8e:2a:65:b4:93:7d:9d:6d:45:39:63:55:c1:dc:bc:49:49:
57:1c:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:23 2026 by rpki-client