
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/3130332e34312e3233322e302f32342d3234203d3e203538343636.roa
File: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=
Subject key identifier: 03:00:0C:52:7B:A1:2F:70:E2:3F:14:51:6D:7C:44:F3:90:E5:6E:88
Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Certificate serial: 465A7E68015290110DF6B45ACABFAB808AD4C1C1
Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/3130332e34312e3233322e302f32342d3234203d3e203538343636.roa
Signing time: Fri 24 Apr 2026 03:06:55 +0000
ROA not before: Fri 24 Apr 2026 03:01:55 +0000
ROA not after: Fri 23 Apr 2027 03:06:55 +0000
asID: 58466
IP address blocks: 103.41.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5a:7e:68:01:52:90:11:0d:f6:b4:5a:ca:bf:ab:80:8a:d4:c1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Validity
Not Before: Apr 24 03:01:55 2026 GMT
Not After : Apr 23 03:06:55 2027 GMT
Subject: CN=03000C527BA12F70E23F14516D7C44F390E56E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:50:a2:58:9f:71:06:e9:d5:2f:12:cf:f4:8e:
9b:fe:07:08:e2:28:02:77:8a:20:d4:c9:37:06:df:
28:cc:6a:21:c2:51:d1:51:31:c8:35:5c:48:99:35:
f3:7c:9a:39:35:91:c7:b0:a3:c0:f0:2f:13:24:69:
18:62:46:7a:1d:14:53:01:0a:5b:76:61:7b:40:52:
56:73:d3:1c:46:39:ab:a8:39:14:0d:fc:46:e6:33:
3f:db:81:e0:81:f6:ef:e7:46:46:61:fd:58:52:1a:
39:8a:83:75:4c:18:cf:81:da:a0:5d:37:17:fe:4f:
0e:e5:3f:82:f2:90:89:2a:3f:29:ae:25:62:ec:83:
e4:24:a0:b2:f6:73:8f:9c:3b:e0:11:8a:57:f9:44:
77:3a:1a:fb:54:39:87:89:90:48:66:9d:a3:69:22:
b7:70:27:28:95:c5:47:cb:f9:a2:ae:be:54:7a:22:
2e:36:c7:46:f2:12:60:9a:b2:4a:13:d1:92:d6:39:
64:ca:be:f9:a0:ef:6b:5b:da:50:ad:c0:bb:19:cd:
ed:9d:92:d1:c7:44:ac:60:e1:17:a8:f3:62:45:55:
e9:8e:eb:ae:51:56:a7:0f:04:45:bc:e5:00:82:30:
c7:fc:3d:ef:5e:63:7e:13:da:03:d5:36:44:3f:12:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:0C:52:7B:A1:2F:70:E2:3F:14:51:6D:7C:44:F3:90:E5:6E:88
X509v3 Authority Key Identifier:
keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/3130332e34312e3233322e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.232.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:60:0b:01:62:68:ca:ad:4d:dd:fd:c2:39:19:6f:8d:a6:38:
f5:31:a1:8c:91:8a:52:d1:39:37:5e:46:98:8c:cf:d9:95:8a:
31:51:2e:d5:09:ad:4c:9e:9f:d2:50:e8:7c:d4:6e:c1:19:f5:
1f:5c:0b:fe:fc:57:d0:33:7f:b0:06:ab:2d:a7:25:5a:2c:b1:
c8:3e:79:90:66:9e:ba:e5:35:5a:db:18:f4:15:ef:83:4e:3d:
30:3e:2e:e2:e8:4a:b5:bd:e1:16:82:2a:bc:2c:70:5c:40:c8:
e9:43:c4:90:d7:80:b0:54:1b:4a:a6:a7:31:a9:65:f7:a7:6a:
2e:21:bf:ce:25:ad:21:ea:30:cb:c9:1a:5c:7a:0c:88:5e:f6:
ea:2f:06:78:cc:23:5e:ce:89:e5:c9:8f:b5:93:a8:c7:4b:37:
13:5c:5d:10:aa:c9:4c:08:9c:a3:6f:d5:9e:72:d7:9f:bd:fa:
69:69:1a:1e:e0:5e:60:3f:5f:9b:6e:59:25:0b:f2:a1:24:32:
6c:dd:4f:1b:3b:14:9e:59:ac:76:a9:b4:b5:3d:61:54:f6:6a:
84:0a:ba:bb:18:df:af:bb:74:32:f9:62:96:7e:b1:7c:2a:fa:
59:3f:1b:d2:0c:e7:45:c2:bb:1d:d7:81:d0:69:c6:7a:82:4b:
f7:42:f0:1b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIURlp+aAFSkBEN9rRayr+rgIrUwcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG
OUVCNjBBRTAeFw0yNjA0MjQwMzAxNTVaFw0yNzA0MjMwMzA2NTVaMDMxMTAvBgNV
BAMTKDAzMDAwQzUyN0JBMTJGNzBFMjNGMTQ1MTZEN0M0NEYzOTBFNTZFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2UKJYn3EG6dUvEs/0jpv+Bwji
KAJ3iiDUyTcG3yjMaiHCUdFRMcg1XEiZNfN8mjk1kcewo8DwLxMkaRhiRnodFFMB
Clt2YXtAUlZz0xxGOauoORQN/EbmMz/bgeCB9u/nRkZh/VhSGjmKg3VMGM+B2qBd
Nxf+Tw7lP4LykIkqPymuJWLsg+QkoLL2c4+cO+ARilf5RHc6GvtUOYeJkEhmnaNp
IrdwJyiVxUfL+aKuvlR6Ii42x0byEmCaskoT0ZLWOWTKvvmg72tb2lCtwLsZze2d
ktHHRKxg4Reo82JFVemO665RVqcPBEW85QCCMMf8Pe9eY34T2gPVNkQ/EoD/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUAwAMUnuhL3DiPxRRbXxE85DlbogwHwYDVR0j
BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3
NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5OTg4OTg5NzE5MzM0MDkyOS8wLzMxMzAzMzJlMzQz
MTJlMzIzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcp6DANBgkqhkiG9w0BAQsFAAOCAQEAnmALAWJoyq1N3f3CORlvjaY4
9TGhjJGKUtE5N15GmIzP2ZWKMVEu1QmtTJ6f0lDofNRuwRn1H1wL/vxX0DN/sAar
LaclWiyxyD55kGaeuuU1WtsY9BXvg049MD4u4uhKtb3hFoIqvCxwXEDI6UPEkNeA
sFQbSqanMall96dqLiG/ziWtIeowy8kaXHoMiF726i8GeMwjXs6J5cmPtZOox0s3
E1xdEKrJTAico2/VnnLXn736aWkaHuBeYD9fm25ZJQvyoSQybN1PGzsUnlmsdqm0
tT1hVPZqhAq6uxjfr7t0Mvliln6xfCr6WT8b0gznRcK7HdeB0GnGeoJL90LwGw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:22 2026 by rpki-client