
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/3130332e39302e3135322e302f32342d3234203d3e203538353139.roa
File: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=
Subject key identifier: 9C:4D:89:35:23:6B:A9:B5:F2:C8:E2:46:8F:E4:6A:53:DD:24:2B:D2
Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Certificate serial: 29AB2583C7EFA42B4A8F8583B6DDE61102AE89A5
Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/3130332e39302e3135322e302f32342d3234203d3e203538353139.roa
Signing time: Fri 24 Apr 2026 03:06:55 +0000
ROA not before: Fri 24 Apr 2026 03:01:55 +0000
ROA not after: Fri 23 Apr 2027 03:06:55 +0000
asID: 58519
IP address blocks: 103.90.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ab:25:83:c7:ef:a4:2b:4a:8f:85:83:b6:dd:e6:11:02:ae:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Validity
Not Before: Apr 24 03:01:55 2026 GMT
Not After : Apr 23 03:06:55 2027 GMT
Subject: CN=9C4D8935236BA9B5F2C8E2468FE46A53DD242BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:bf:9a:c7:0b:02:bf:e6:e7:83:44:a2:bf:
b1:55:a2:24:91:84:f9:27:23:70:da:63:77:e0:a7:
ad:60:3c:c5:0d:a8:3f:c7:b2:99:b8:50:35:7a:31:
4e:a0:bc:50:ef:55:49:12:30:c4:e5:e0:74:53:41:
f9:96:bf:4d:80:71:93:62:d2:92:5e:20:4a:56:14:
f1:7f:ce:ef:8d:9a:1c:7f:d4:80:8e:59:04:da:8d:
4a:5d:3c:b2:ea:ef:95:aa:e5:6c:da:c0:59:80:13:
04:b7:01:f6:ee:3f:c0:65:83:04:31:d3:0e:85:ba:
92:60:d0:83:ee:59:1d:0f:19:72:59:74:54:ff:bf:
5e:cc:4d:f4:26:a9:57:cb:8d:17:a4:68:64:c4:df:
c0:9f:a3:5b:00:43:24:08:0e:38:b6:75:b9:8b:e2:
9a:0b:ee:45:7a:70:05:cd:d7:fe:2e:58:b5:20:48:
22:2e:ae:73:6a:a0:91:9f:84:d9:04:4a:59:9b:da:
02:c9:01:85:f6:00:1a:d0:a7:48:df:0d:7f:5b:32:
0d:2b:dc:39:9d:0a:02:36:17:a0:88:66:af:c1:46:
bc:69:68:a3:21:32:b0:71:4d:71:7a:46:37:0f:0c:
e7:14:32:3e:c3:4d:55:05:18:85:50:83:3c:5d:70:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:89:35:23:6B:A9:B5:F2:C8:E2:46:8F:E4:6A:53:DD:24:2B:D2
X509v3 Authority Key Identifier:
keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/3130332e39302e3135322e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.152.0/24
Signature Algorithm: sha256WithRSAEncryption
31:57:f4:a6:17:75:ec:1a:d3:a8:cb:71:2a:95:6b:2e:6f:20:
6c:a3:51:74:0e:2d:28:cf:1c:5f:4a:0c:5f:f7:96:a3:91:c6:
22:8f:3e:24:50:28:75:d8:be:2a:87:7f:6f:d8:36:25:a6:77:
2e:74:0f:3a:c0:99:1c:b5:c3:bb:8d:81:85:aa:2a:dc:29:be:
9a:04:fc:82:2f:24:7a:74:48:bf:a1:e8:33:43:2d:9f:58:58:
32:22:9a:07:7b:7b:ae:60:89:39:5e:4d:4c:56:9c:3b:2e:81:
c7:dc:4b:e1:c1:da:e4:30:b3:70:25:97:ff:fa:84:de:a2:f0:
46:3e:e1:3f:e0:8c:66:96:87:b6:61:1c:10:86:04:f3:0d:c2:
cd:fb:60:71:74:ff:f9:8b:4c:39:37:ca:0e:70:8d:e6:73:ea:
7a:d5:60:f5:ca:e1:f6:cc:f3:6c:a3:f8:94:c2:cc:0e:96:76:
ea:55:52:f6:0c:40:38:d6:5f:a8:56:44:54:9f:c3:70:87:cb:
f5:72:f1:4b:36:b0:0f:66:93:ee:67:d4:ba:45:99:3b:4f:47:
8b:28:9e:9f:75:69:36:a7:5d:08:be:84:e8:95:73:29:35:22:
c1:3a:fe:c2:20:80:e5:dc:e2:db:25:f0:cf:b5:04:aa:fb:6f:
08:41:a8:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:38 2026 by rpki-client