
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa
File: 3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: UV9guMplFMeKY2gCLhzy1M0/bBWfK0PmFQi6CizqjdI=
Subject key identifier: C1:61:6E:F3:36:0F:01:30:9C:81:21:6B:C7:B2:E3:33:67:E6:2E:28
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 23CCCA58E3B39E01E32AFC9BE0C3CAE446B86F36
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:09:44 +0000
ROA not before: Thu 16 Apr 2026 09:04:44 +0000
ROA not after: Thu 15 Apr 2027 09:09:44 +0000
asID: 23848
IP address blocks: 103.210.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:cc:ca:58:e3:b3:9e:01:e3:2a:fc:9b:e0:c3:ca:e4:46:b8:6f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:04:44 2026 GMT
Not After : Apr 15 09:09:44 2027 GMT
Subject: CN=C1616EF3360F01309C81216BC7B2E33367E62E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:81:87:76:69:e0:86:84:c5:49:c0:1a:d1:
3e:71:43:70:78:32:e3:0b:32:e3:3b:27:7e:52:67:
d4:fa:4d:ba:18:23:a6:f3:82:7d:4e:43:99:aa:9c:
07:9d:f5:8d:71:29:80:0a:75:03:2b:76:e7:91:7e:
29:aa:8f:55:d2:06:b0:00:76:43:99:32:ef:24:41:
f9:75:78:11:ad:eb:10:4f:75:12:13:13:5e:da:0a:
23:3b:05:93:ce:0b:fc:99:6a:b6:29:df:69:d2:98:
3f:ec:97:fe:35:2f:73:13:25:cc:fb:6b:0e:e6:15:
4f:93:1c:aa:4c:d9:ca:fc:53:af:37:eb:17:c7:81:
72:c8:90:30:49:c9:f0:48:82:8c:45:6d:fe:bb:ce:
72:59:2d:34:2c:2b:ba:5c:c8:c8:e5:e1:3c:ec:e2:
0c:10:ed:cd:83:2f:9a:94:5d:41:3e:a8:9f:e9:91:
d1:fd:27:e9:76:26:42:6a:b8:7c:94:36:07:20:e9:
f7:11:06:ad:25:dc:dd:19:d9:13:2e:b4:72:95:e6:
58:1e:b7:0e:e1:30:3c:0a:b6:32:63:e1:6d:d5:37:
29:f9:72:09:e9:c1:f5:28:d0:c1:37:ff:c9:91:8c:
be:e9:d3:ea:4d:0e:81:8f:a9:1f:90:2f:c7:1c:c2:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:6E:F3:36:0F:01:30:9C:81:21:6B:C7:B2:E3:33:67:E6:2E:28
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.171.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9a:7c:f3:ae:cb:73:fd:48:d6:27:7b:f0:f9:fa:13:e6:5d:
9f:a1:65:d2:e5:63:f5:65:31:28:9d:16:cd:6c:f7:5f:51:dc:
b4:a5:e8:1c:2b:ec:c7:a1:1e:5f:23:9a:69:71:68:38:f0:50:
bc:0c:81:0a:b7:41:ec:64:41:fb:15:f7:99:5a:56:60:23:09:
7b:88:71:e7:2a:16:d2:f0:cb:ad:20:dd:3e:ac:8c:a3:f6:17:
7c:83:eb:ec:69:72:9c:34:bc:4d:df:a8:eb:72:cf:25:63:92:
cb:ce:a1:3d:9d:cf:30:f6:bc:84:ab:9e:f8:a5:15:83:24:30:
7c:ea:ca:74:aa:4a:5f:e7:df:cd:51:ba:86:c1:e8:83:38:51:
37:68:60:df:02:7a:22:a0:07:43:f6:8d:00:7a:49:8f:50:7d:
bb:cf:8a:fa:72:b1:b2:00:9e:5e:31:af:c0:0a:88:e0:aa:89:
b3:e0:f6:ac:a4:88:d1:4d:77:f0:5a:02:1f:ef:14:f6:8e:8e:
b4:4e:75:ae:7a:f8:18:7b:5b:ba:78:f6:40:40:bc:7b:7a:08:
bf:16:4c:85:81:29:5c:40:39:c4:bf:52:96:e2:86:0b:c8:2e:
c5:0c:ac:f1:77:6e:e4:1a:76:80:9c:71:95:67:3e:64:66:c5:
e6:0e:52:6a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUI8zKWOOzngHjKvyb4MPK5Ea4bzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MTYwOTA0NDRaFw0yNzA0MTUwOTA5NDRaMDMxMTAvBgNV
BAMTKEMxNjE2RUYzMzYwRjAxMzA5QzgxMjE2QkM3QjJFMzMzNjdFNjJFMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVoGHdmnghoTFScAa0T5xQ3B4
MuMLMuM7J35SZ9T6TboYI6bzgn1OQ5mqnAed9Y1xKYAKdQMrdueRfimqj1XSBrAA
dkOZMu8kQfl1eBGt6xBPdRITE17aCiM7BZPOC/yZarYp32nSmD/sl/41L3MTJcz7
aw7mFU+THKpM2cr8U6836xfHgXLIkDBJyfBIgoxFbf67znJZLTQsK7pcyMjl4Tzs
4gwQ7c2DL5qUXUE+qJ/pkdH9J+l2JkJquHyUNgcg6fcRBq0l3N0Z2RMutHKV5lge
tw7hMDwKtjJj4W3VNyn5cgnpwfUo0ME3/8mRjL7p0+pNDoGPqR+QL8ccwkAxAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUwWFu8zYPATCcgSFrx7LjM2fmLigwHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTcwODM1MzIzNTU4Mjk3NjMvMC8zMTMwMzMyZTMy
MzEzMDJlMzEzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfSqzANBgkqhkiG9w0BAQsFAAOCAQEAlJp8867Lc/1I1id78Pn6
E+Zdn6Fl0uVj9WUxKJ0WzWz3X1HctKXoHCvsx6EeXyOaaXFoOPBQvAyBCrdB7GRB
+xX3mVpWYCMJe4hx5yoW0vDLrSDdPqyMo/YXfIPr7GlynDS8Td+o63LPJWOSy86h
PZ3PMPa8hKue+KUVgyQwfOrKdKpKX+ffzVG6hsHogzhRN2hg3wJ6IqAHQ/aNAHpJ
j1B9u8+K+nKxsgCeXjGvwAqI4KqJs+D2rKSI0U138FoCH+8U9o6OtE51rnr4GHtb
unj2QEC8e3oIvxZMhYEpXEA5xL9SluKGC8guxQys8Xdu5Bp2gJxxlWc+ZGbF5g5S
ag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:04 2026 by rpki-client