
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313531333030.roa
File: 3130332e3138332e3132322e302f32332d3234203d3e20313531333030.roa (raw, json)
Hash identifier: iXRZmu2dKN1cGrirShohII/nj3bvTzgNq5DffdghBfc=
Subject key identifier: 76:C4:76:26:CD:59:1C:E3:75:C1:A4:17:76:94:51:75:CE:7C:DA:00
Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial: 1C013969E49F2C3441524EB7D0ABA156FB8E78A9
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313531333030.roa
Signing time: Mon 20 Apr 2026 06:38:34 +0000
ROA not before: Mon 20 Apr 2026 06:33:34 +0000
ROA not after: Mon 19 Apr 2027 06:38:34 +0000
asID: 151300
IP address blocks: 103.183.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:01:39:69:e4:9f:2c:34:41:52:4e:b7:d0:ab:a1:56:fb:8e:78:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Validity
Not Before: Apr 20 06:33:34 2026 GMT
Not After : Apr 19 06:38:34 2027 GMT
Subject: CN=76C47626CD591CE375C1A41776945175CE7CDA00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:d5:0c:a9:5c:01:37:a9:75:1c:ef:85:bc:
1e:05:94:7b:fc:3a:06:78:db:da:90:e8:52:5c:c9:
fc:43:f5:d6:fe:67:d9:bc:89:26:99:a3:d1:57:29:
b8:58:1a:a3:fa:79:d6:37:e9:93:77:33:31:65:38:
28:4e:33:e3:a4:7c:67:09:72:36:07:b6:64:67:a1:
f1:51:1d:b2:02:ef:d1:5a:6d:79:18:a8:f8:fd:d8:
37:ec:85:76:98:d7:7b:ef:13:05:b3:b5:14:9e:97:
18:58:6c:c0:c7:b3:22:5f:bb:7b:89:3e:5b:39:9b:
51:3a:58:0c:f4:78:dd:e4:ef:bd:78:37:5a:85:af:
c7:24:05:2e:54:eb:9f:fc:9e:2f:34:96:92:da:89:
d1:17:4a:ec:a2:a4:cc:cc:cd:aa:32:6c:1b:90:68:
63:d4:0b:14:58:67:18:8e:4c:0b:d8:52:75:f0:96:
74:2b:99:9e:a3:c3:f2:1c:11:19:4f:f1:15:d7:20:
54:5d:f4:5a:89:63:9d:bc:2b:a9:44:2c:9b:16:ca:
5d:7d:d2:12:69:68:53:22:b9:72:7e:5a:ae:ee:3d:
b5:c2:ab:d2:55:47:e2:db:69:bb:8b:28:af:2e:5c:
6a:c6:ac:6e:a1:4c:f7:c3:86:7e:cd:e1:20:25:c6:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C4:76:26:CD:59:1C:E3:75:C1:A4:17:76:94:51:75:CE:7C:DA:00
X509v3 Authority Key Identifier:
keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313531333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.183.122.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:6c:47:0f:f1:ff:2e:8d:fa:e9:15:6e:14:07:cf:79:31:35:
24:69:4a:17:c3:55:8f:4f:de:4d:cb:33:2d:22:a5:38:21:57:
9a:0a:58:7c:cd:0e:b4:49:0f:92:a7:4f:f8:ad:74:20:63:d9:
78:37:bd:1d:23:e8:ee:71:f4:dc:b2:a3:9e:e7:22:d9:cf:f4:
11:4c:ac:d9:3f:29:bd:5d:0b:8d:2c:a8:45:7c:64:c5:d0:af:
c4:9b:69:a9:cf:a1:5a:9b:53:39:d9:d3:26:b4:c4:34:de:c1:
a4:be:dd:9c:a3:81:27:3e:7a:0e:c9:5c:74:ae:20:0f:3b:3e:
e4:50:1d:88:16:0c:95:42:e3:21:8d:75:d5:01:44:f8:13:98:
00:fc:ac:8c:b2:b5:6f:c6:c7:61:3f:c0:42:ab:fd:7c:b0:63:
32:5d:21:09:e3:42:fd:12:d0:2a:07:8c:6e:7c:4f:2f:19:21:
fb:7b:80:ce:39:dc:5c:25:7d:ab:cc:37:0d:e6:f4:29:09:bf:
07:76:85:90:de:a4:3f:a8:9c:d1:44:7e:b7:07:4a:12:d9:06:
ac:80:f8:d7:0c:31:6b:7e:89:b8:7c:93:ac:e1:89:67:5a:d5:
a0:f8:5b:0e:59:46:9a:bd:b1:7d:5e:e8:63:08:be:8d:01:eb:
e8:33:eb:90
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUHAE5aeSfLDRBUk630KuhVvuOeKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB
QjhGQ0IwQjAeFw0yNjA0MjAwNjMzMzRaFw0yNzA0MTkwNjM4MzRaMDMxMTAvBgNV
BAMTKDc2QzQ3NjI2Q0Q1OTFDRTM3NUMxQTQxNzc2OTQ1MTc1Q0U3Q0RBMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQtUMqVwBN6l1HO+FvB4FlHv8
OgZ429qQ6FJcyfxD9db+Z9m8iSaZo9FXKbhYGqP6edY36ZN3MzFlOChOM+OkfGcJ
cjYHtmRnofFRHbIC79FabXkYqPj92DfshXaY13vvEwWztRSelxhYbMDHsyJfu3uJ
Pls5m1E6WAz0eN3k7714N1qFr8ckBS5U65/8ni80lpLaidEXSuyipMzMzaoybBuQ
aGPUCxRYZxiOTAvYUnXwlnQrmZ6jw/IcERlP8RXXIFRd9FqJY528K6lELJsWyl19
0hJpaFMiuXJ+Wq7uPbXCq9JVR+LbabuLKK8uXGrGrG6hTPfDhn7N4SAlxmGZAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUdsR2Js1ZHON1waQXdpRRdc582gAwHwYDVR0j
BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1
MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzEzMDMzMmUz
MTM4MzMyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe3ejANBgkqhkiG9w0BAQsFAAOCAQEAT2xHD/H/Lo366RVu
FAfPeTE1JGlKF8NVj0/eTcszLSKlOCFXmgpYfM0OtEkPkqdP+K10IGPZeDe9HSPo
7nH03LKjnuci2c/0EUys2T8pvV0LjSyoRXxkxdCvxJtpqc+hWptTOdnTJrTENN7B
pL7dnKOBJz56DslcdK4gDzs+5FAdiBYMlULjIY111QFE+BOYAPysjLK1b8bHYT/A
Qqv9fLBjMl0hCeNC/RLQKgeMbnxPLxkh+3uAzjncXCV9q8w3Deb0KQm/B3aFkN6k
P6ic0UR+twdKEtkGrID41wwxa36JuHyTrOGJZ1rVoPhbDllGmr2xfV7oYwi+jQHr
6DPrkA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:05:07 2026 by rpki-client