
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa
File: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (raw, json)
Hash identifier: pLyVnD95KJackAsggNptZxNXLQrqTtd2wos+fTuThJo=
Subject key identifier: 21:9F:AD:3B:FB:8D:B2:0B:49:98:8E:B5:8F:C1:FF:F5:99:86:F0:5E
Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E
Certificate serial: 6A1D7F3A970A6CCBE0297F8C041601686C7C270F
Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa
Signing time: Tue 21 Apr 2026 02:20:59 +0000
ROA not before: Tue 21 Apr 2026 02:15:59 +0000
ROA not after: Tue 20 Apr 2027 02:20:59 +0000
asID: 133774
IP address blocks: 103.223.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 02:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1d:7f:3a:97:0a:6c:cb:e0:29:7f:8c:04:16:01:68:6c:7c:27:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E
Validity
Not Before: Apr 21 02:15:59 2026 GMT
Not After : Apr 20 02:20:59 2027 GMT
Subject: CN=219FAD3BFB8DB20B49988EB58FC1FFF59986F05E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:76:c4:4f:a4:4f:02:4e:06:d9:d0:f8:35:
90:11:c6:68:d3:d7:18:59:2d:e9:74:28:55:06:01:
0d:96:e5:0f:cf:42:72:be:0f:e2:c2:72:3f:8f:92:
05:08:b8:fe:6e:a4:24:f7:ab:b0:8a:5d:0c:00:ad:
ee:d3:e8:a3:dd:7f:26:1a:79:4c:bb:cb:b0:22:2e:
ea:9c:0c:b8:f8:8b:09:43:b1:23:a7:2e:20:36:54:
d1:0e:46:e2:c8:9d:cc:87:c3:9b:a1:5f:31:8b:2c:
71:80:cc:c2:fb:f2:04:f8:c7:1f:07:c0:d7:e9:d1:
de:98:d1:0c:8a:9a:79:aa:80:51:12:3c:2c:51:d3:
2a:e2:e7:97:57:91:59:ff:57:1f:46:ab:1c:ed:90:
a8:c9:6c:b0:be:6c:d6:33:22:62:8a:6b:b1:9f:29:
60:13:84:f8:27:44:69:48:b9:ae:21:a6:ee:7a:2f:
ef:8a:0f:81:ed:ab:a1:87:30:ad:37:bc:76:b6:3e:
a7:fa:02:f8:16:60:17:16:83:13:2b:1d:80:4c:17:
26:25:c9:e9:18:46:a1:1c:58:e5:be:bc:a0:d6:ec:
ea:ee:fe:1d:c1:4c:77:af:c9:77:03:44:05:e9:8d:
78:ee:9a:b1:a5:92:fa:d1:dc:07:28:af:23:be:81:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:AD:3B:FB:8D:B2:0B:49:98:8E:B5:8F:C1:FF:F5:99:86:F0:5E
X509v3 Authority Key Identifier:
keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:4a:7d:96:4d:fb:bd:c4:cd:c0:66:56:3f:b2:18:7e:59:08:
22:6a:83:9b:0b:71:42:32:97:35:fb:70:54:00:3a:e1:2c:4d:
45:1d:20:8b:e6:a6:55:e9:66:7a:24:09:06:a7:6e:98:0d:78:
94:a9:60:60:c8:29:a7:61:34:5d:d1:70:16:86:6e:e6:14:50:
9c:d6:af:2f:df:ce:16:13:04:5c:22:5e:0e:5e:b1:e4:49:88:
74:17:1c:48:4f:81:c4:91:9b:bf:0b:f6:df:1e:5e:5a:7c:63:
cf:78:1e:15:c0:0b:6b:76:f6:23:b7:a4:9a:e8:53:31:bd:31:
05:50:07:38:d2:cf:67:99:04:b0:d8:e1:2a:d5:22:3c:7f:c8:
64:dc:86:af:b3:5d:e0:0c:8e:28:5e:43:e5:c6:47:58:27:1e:
8e:eb:19:9a:45:5a:d0:bd:f4:b8:d7:9f:91:00:e3:99:a1:a8:
1b:d9:bb:39:c0:84:7f:9c:a1:22:51:47:9e:90:16:2f:02:7c:
a8:77:1d:8c:dc:5e:64:37:47:b0:63:44:c2:61:6b:8c:68:73:
a5:8e:da:53:f7:1a:f9:50:bf:d2:fc:c0:86:f7:bc:df:ef:56:
24:55:54:b7:80:00:39:99:45:ad:91:f6:e2:91:0f:6a:d7:b1:
52:80:d1:34
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUah1/OpcKbMvgKX+MBBYBaGx8Jw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4
Njk3RTU5RTAeFw0yNjA0MjEwMjE1NTlaFw0yNzA0MjAwMjIwNTlaMDMxMTAvBgNV
BAMTKDIxOUZBRDNCRkI4REIyMEI0OTk4OEVCNThGQzFGRkY1OTk4NkYwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+XbET6RPAk4G2dD4NZARxmjT
1xhZLel0KFUGAQ2W5Q/PQnK+D+LCcj+PkgUIuP5upCT3q7CKXQwAre7T6KPdfyYa
eUy7y7AiLuqcDLj4iwlDsSOnLiA2VNEORuLIncyHw5uhXzGLLHGAzML78gT4xx8H
wNfp0d6Y0QyKmnmqgFESPCxR0yri55dXkVn/Vx9GqxztkKjJbLC+bNYzImKKa7Gf
KWAThPgnRGlIua4hpu56L++KD4Htq6GHMK03vHa2Pqf6AvgWYBcWgxMrHYBMFyYl
yekYRqEcWOW+vKDW7Oru/h3BTHevyXcDRAXpjXjumrGlkvrR3AcoryO+gSn9AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUIZ+tO/uNsgtJmI61j8H/9ZmG8F4wHwYDVR0j
BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3
MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk4Nzk0NTc4NTg2MTA3OTA2LzAvMzEzMDMzMmUz
MjMyMzMyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3Mzcz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmffhDANBgkqhkiG9w0BAQsFAAOCAQEAo0p9lk37vcTNwGZW
P7IYflkIImqDmwtxQjKXNftwVAA64SxNRR0gi+amVelmeiQJBqdumA14lKlgYMgp
p2E0XdFwFoZu5hRQnNavL9/OFhMEXCJeDl6x5EmIdBccSE+BxJGbvwv23x5eWnxj
z3geFcALa3b2I7ekmuhTMb0xBVAHONLPZ5kEsNjhKtUiPH/IZNyGr7Nd4AyOKF5D
5cZHWCcejusZmkVa0L30uNefkQDjmaGoG9m7OcCEf5yhIlFHnpAWLwJ8qHcdjNxe
ZDdHsGNEwmFrjGhzpY7aU/ca+VC/0vzAhve83+9WJFVUt4AAOZlFrZH24pEPatex
UoDRNA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:37 2026 by rpki-client