
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa
File: 3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa (raw, json)
Hash identifier: a8lzCqBoiIo29jxq23F0gEkFebEMyTyCXI9x6zyUtzk=
Subject key identifier: D3:E3:DB:12:E8:24:3C:C5:AA:A1:CB:1F:92:37:59:9A:F1:41:34:7E
Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial: 23B709F0A34958AD0EC6664AD36179B78732EF3F
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa
Signing time: Mon 20 Apr 2026 06:38:34 +0000
ROA not before: Mon 20 Apr 2026 06:33:34 +0000
ROA not after: Mon 19 Apr 2027 06:38:34 +0000
asID: 153911
IP address blocks: 103.183.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b7:09:f0:a3:49:58:ad:0e:c6:66:4a:d3:61:79:b7:87:32:ef:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Validity
Not Before: Apr 20 06:33:34 2026 GMT
Not After : Apr 19 06:38:34 2027 GMT
Subject: CN=D3E3DB12E8243CC5AAA1CB1F9237599AF141347E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:30:4b:f9:16:75:10:76:df:c7:d2:32:3f:
e3:c9:21:5b:b2:5d:f6:9e:af:78:e1:9e:d2:12:d9:
42:8c:41:a6:58:11:c6:88:0d:32:b7:46:93:08:82:
3b:74:6f:69:c8:ab:74:8d:e7:a9:fb:94:40:4f:9f:
79:12:fe:47:8e:b0:0e:f6:d9:76:58:9a:7e:05:94:
56:f0:7d:61:9a:43:0f:2a:6a:47:3a:58:c5:1d:e3:
4d:fe:f6:84:a5:35:a7:70:6e:87:b7:61:00:57:77:
67:a2:a8:2e:d4:cf:74:68:a8:c1:48:f2:77:44:7c:
b9:6c:78:89:f0:a6:fe:3a:f3:4f:0a:6b:ca:37:02:
ca:73:59:da:e2:82:eb:66:6d:91:1d:31:b5:87:5a:
a3:7c:63:c7:92:a5:1b:86:89:38:c5:73:e7:27:98:
a3:03:67:35:a9:d9:3a:83:11:cb:65:75:a6:28:b3:
f1:b7:f1:3d:35:27:9a:34:0e:89:d3:02:cc:c7:e4:
cd:4b:90:96:64:e1:1f:86:05:1d:0b:64:71:6b:b3:
20:7f:cb:f4:97:b8:a2:d5:8a:0d:5e:c3:b8:6b:36:
e6:82:d4:82:0e:f6:29:60:44:1d:df:10:44:47:46:
c1:b3:e8:2f:31:09:b5:62:5e:b5:65:52:ae:f0:bc:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:DB:12:E8:24:3C:C5:AA:A1:CB:1F:92:37:59:9A:F1:41:34:7E
X509v3 Authority Key Identifier:
keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.183.122.0/23
Signature Algorithm: sha256WithRSAEncryption
94:1f:44:39:ad:45:6f:06:90:7e:77:f5:7f:89:85:79:8d:2e:
ca:3c:b8:11:03:8b:58:78:04:f8:b2:db:e2:1a:af:f5:f7:5f:
d4:3c:0a:08:7a:85:b4:59:16:51:2c:78:53:d3:28:d5:18:a8:
cf:99:38:c0:19:d4:39:a3:0c:c7:42:f1:8f:12:8d:1a:5f:d5:
c0:6a:6b:17:d1:d2:16:4f:03:2c:f2:01:a1:9e:c7:d2:6f:83:
dc:6a:a6:4a:f5:63:03:b1:e1:28:cd:04:8c:a9:ef:70:8e:21:
b7:85:7d:c8:a8:2a:fd:3c:ed:26:23:8a:3f:3f:cb:5b:e7:77:
44:15:03:59:8a:1c:86:68:04:40:ba:b4:95:35:42:65:79:38:
7e:cc:86:4d:b5:a4:da:3d:e2:ff:ba:95:10:ba:53:63:4a:60:
f6:44:de:1b:36:a7:4b:8b:8a:79:21:b1:07:f8:0f:c9:db:19:
0d:68:63:1f:b5:10:66:b6:7a:c0:84:81:73:eb:a8:53:99:12:
e1:c2:47:cb:be:b9:a1:0b:57:d3:31:b5:5e:fc:72:83:8d:1c:
34:47:1d:fc:ae:e1:8e:42:e6:ab:cd:b1:d7:ca:22:8e:99:25:
f3:b2:66:2c:f6:a5:67:8f:0e:30:70:ef:cc:93:3b:ea:4e:c0:
df:c2:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:05:11 2026 by rpki-client