
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e2034383337.roa
File: 3130332e3138332e3132322e302f32332d3234203d3e2034383337.roa (raw, json)
Hash identifier: U1eLRk2boBv4BNDjnNyUzYbN2I5A8l+tFVUregim4b4=
Subject key identifier: B8:55:35:12:DA:63:11:31:83:4A:A1:75:4A:53:8F:97:3E:80:0E:2B
Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial: 26CDA58BD07ABD821BB43D3DBC2789F0269D00B6
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e2034383337.roa
Signing time: Mon 20 Apr 2026 06:38:34 +0000
ROA not before: Mon 20 Apr 2026 06:33:34 +0000
ROA not after: Mon 19 Apr 2027 06:38:34 +0000
asID: 4837
IP address blocks: 103.183.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cd:a5:8b:d0:7a:bd:82:1b:b4:3d:3d:bc:27:89:f0:26:9d:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Validity
Not Before: Apr 20 06:33:34 2026 GMT
Not After : Apr 19 06:38:34 2027 GMT
Subject: CN=B8553512DA631131834AA1754A538F973E800E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:82:6d:ed:35:61:99:82:72:5f:f7:0d:52:
07:48:42:4d:bd:84:4b:98:d1:e5:67:fe:a5:f6:05:
31:24:c6:e8:ae:f1:69:e4:bf:fa:5d:43:d0:54:01:
32:f6:b0:61:2d:72:5b:63:c5:29:dc:f4:8c:a3:05:
1c:ca:92:d3:d8:c1:22:62:cf:02:b3:e8:43:90:c4:
6e:be:01:c6:23:7f:62:bd:89:fd:35:ca:7e:0f:aa:
80:20:6a:b2:d1:17:20:fe:2b:92:12:48:bf:6c:a9:
cb:ba:c1:6c:60:bb:17:d7:11:d1:d1:55:a5:31:1a:
fb:3b:18:1b:fb:3d:e1:77:90:b3:2d:7b:44:f9:56:
b0:59:e6:21:45:dc:4e:8b:b1:dd:b3:7b:59:3b:dd:
eb:1e:26:a1:dc:23:d9:22:8f:a8:2f:78:e2:40:17:
7b:78:bb:2b:64:b5:df:79:89:eb:67:61:cf:0b:60:
d6:05:c0:a7:2a:39:d4:5a:ec:1a:83:09:42:19:35:
16:67:d0:b8:12:ab:3b:8c:cc:ae:43:4a:28:fc:fc:
68:d5:a0:09:5e:5b:6d:d0:47:0d:15:d2:8b:ec:a8:
73:69:d0:c1:4c:77:65:d1:16:52:b0:b2:47:ef:88:
44:71:69:bb:0b:df:05:3b:63:2b:ce:b7:b0:54:b5:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:35:12:DA:63:11:31:83:4A:A1:75:4A:53:8F:97:3E:80:0E:2B
X509v3 Authority Key Identifier:
keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.183.122.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ea:25:d0:a7:f9:bd:51:94:65:93:1f:e1:14:6c:90:4f:ae:
de:ca:6d:de:56:32:b4:7b:52:00:9b:cb:6e:c7:58:fd:e7:ce:
d3:2c:2b:5a:ee:1f:14:38:a1:8b:98:69:20:02:b2:fe:d6:48:
c2:d7:94:ed:e6:ff:ee:c8:15:cf:61:f2:59:42:99:47:e9:e2:
ce:f6:b0:7e:d6:d8:db:13:b1:03:5d:9e:5f:f8:40:71:1e:d2:
fa:58:16:86:97:ba:e4:e4:f1:a9:af:27:09:f6:bc:60:f7:38:
68:ba:3e:95:94:ac:43:bc:b8:8e:8c:20:aa:ba:e5:25:99:24:
3a:7d:89:81:17:3e:06:75:bb:d3:48:06:f5:eb:f1:6b:d5:47:
7e:05:cc:59:b7:f9:60:55:7e:23:a4:0f:c4:90:c0:ad:d9:1c:
73:26:96:32:e2:31:01:35:db:e4:1d:e5:e9:ef:74:6a:5d:23:
49:35:b9:de:d4:ee:f1:4c:ec:5b:50:bc:3b:8a:ee:34:87:a7:
97:a2:6c:1a:9c:b8:64:5e:9b:08:8c:b1:8e:c4:9f:20:48:45:
86:77:01:f7:0a:07:b7:e1:34:a6:57:89:07:5f:bf:09:6b:b6:
95:ad:8f:50:41:0f:98:38:42:4f:c3:d4:ba:fb:1e:4b:bb:73:
e0:78:b7:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:04:55 2026 by rpki-client