
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e3135342e34312e302f32342d3234203d3e20313331343839.roa
File: 3130332e3135342e34312e302f32342d3234203d3e20313331343839.roa (raw, json)
Hash identifier: +MozJT6Dx434pYv4ImcpPzupBaYVrY1p/99IV6yF1NQ=
Subject key identifier: E9:64:3B:F9:84:56:3D:95:20:A5:0F:20:AA:AB:C7:53:FF:54:8F:68
Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial: 16883AC21D3927F161FB2FABDD3AFB3FCEF32EA8
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e3135342e34312e302f32342d3234203d3e20313331343839.roa
Signing time: Wed 19 Aug 2026 09:09:43 +0000
ROA not before: Wed 19 Aug 2026 09:04:43 +0000
ROA not after: Wed 18 Aug 2027 09:09:43 +0000
asID: 131489
IP address blocks: 103.154.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:88:3a:c2:1d:39:27:f1:61:fb:2f:ab:dd:3a:fb:3f:ce:f3:2e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Validity
Not Before: Aug 19 09:04:43 2026 GMT
Not After : Aug 18 09:09:43 2027 GMT
Subject: CN=E9643BF984563D9520A50F20AAABC753FF548F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:5e:4f:5a:2f:19:9b:2c:21:21:08:13:04:
a2:36:18:a7:5c:fd:83:80:27:6e:56:33:93:30:73:
f4:fe:ef:40:3a:46:75:13:05:25:bb:4c:67:1d:07:
da:24:e8:11:51:44:41:6a:6e:93:2b:5f:0e:92:f7:
dd:78:1b:ae:ea:f6:57:08:bb:0d:8f:62:36:c6:32:
3e:d4:b7:38:8b:bb:ba:ae:51:aa:03:5c:e0:d4:a2:
2d:b2:f7:58:9b:ec:89:a7:97:96:5b:6d:ee:e9:3d:
57:f0:30:1d:59:4e:37:15:44:fe:28:5e:1c:98:8e:
8c:51:af:af:c1:96:3d:ca:c2:62:ad:69:af:d1:36:
c1:46:09:d5:51:22:7b:d8:1c:f7:9c:74:3a:55:71:
0c:31:a7:00:a1:29:58:2d:d2:c4:5c:21:9d:29:e4:
aa:ce:e5:72:cc:d3:77:43:ba:c8:58:87:c1:c8:b4:
ae:23:f5:72:7b:ad:46:37:df:42:3c:55:e7:3e:7b:
16:ca:21:2a:96:43:33:67:f7:f3:31:fd:dc:51:7f:
83:4e:6e:68:d7:2d:fd:40:e2:cc:e9:1a:4d:97:4e:
d6:93:da:b6:0f:ce:de:40:d3:c4:7c:de:a6:08:4f:
34:25:69:8c:5e:f3:f6:f1:42:c9:ef:e6:31:65:d1:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:3B:F9:84:56:3D:95:20:A5:0F:20:AA:AB:C7:53:FF:54:8F:68
X509v3 Authority Key Identifier:
keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e3135342e34312e302f32342d3234203d3e20313331343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.41.0/24
Signature Algorithm: sha256WithRSAEncryption
74:55:32:a6:65:84:15:86:19:ed:3d:47:f6:3e:71:7c:94:c1:
b6:13:a8:5b:c1:f5:bf:d9:20:e6:05:5d:73:a1:bf:d2:4b:28:
00:ae:a7:e1:04:d4:fa:6b:18:a1:87:ed:52:16:31:db:e4:93:
ad:51:64:91:d5:11:e4:93:50:87:ab:06:d0:f4:bf:9f:d3:3b:
63:43:24:0f:19:de:87:06:42:48:46:e5:cf:c8:33:dc:30:82:
07:c1:a4:66:75:81:39:24:76:74:67:27:9a:86:76:00:84:80:
8d:f0:67:49:0d:bc:92:5b:a4:ac:ec:7b:c0:36:e1:2d:36:b7:
b7:2e:72:d9:e5:91:81:cb:61:d2:17:ec:ad:33:32:85:a2:74:
42:d1:fe:ff:4f:3c:b2:dc:ad:af:0b:f7:b3:e6:5f:1c:d4:dd:
9b:9b:3f:55:e6:1c:e5:65:ee:2b:3a:4a:07:ad:9b:05:12:fd:
47:02:03:15:0d:35:32:a4:d9:fc:96:00:a6:b5:41:75:e9:58:
e4:09:71:16:1d:07:93:b1:92:44:36:b2:72:a8:67:cc:1b:70:
52:26:93:63:dd:13:ec:85:a7:85:01:e5:1f:9d:29:ba:0c:2f:
45:6d:a8:53:71:df:65:16:5b:39:6c:19:a0:f6:35:93:cf:f3:
b8:b0:88:b0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUFog6wh05J/Fh+y+r3Tr7P87zLqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRF
RTlBQjQxNTAeFw0yNjA4MTkwOTA0NDNaFw0yNzA4MTgwOTA5NDNaMDMxMTAvBgNV
BAMTKEU5NjQzQkY5ODQ1NjNEOTUyMEE1MEYyMEFBQUJDNzUzRkY1NDhGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUvF5PWi8ZmywhIQgTBKI2GKdc
/YOAJ25WM5Mwc/T+70A6RnUTBSW7TGcdB9ok6BFRREFqbpMrXw6S9914G67q9lcI
uw2PYjbGMj7UtziLu7quUaoDXODUoi2y91ib7Imnl5Zbbe7pPVfwMB1ZTjcVRP4o
XhyYjoxRr6/Blj3KwmKtaa/RNsFGCdVRInvYHPecdDpVcQwxpwChKVgt0sRcIZ0p
5KrO5XLM03dDushYh8HItK4j9XJ7rUY330I8Vec+exbKISqWQzNn9/Mx/dxRf4NO
bmjXLf1A4szpGk2XTtaT2rYPzt5A08R83qYITzQlaYxe8/bxQsnv5jFl0S2NAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU6WQ7+YRWPZUgpQ8gqqvHU/9Uj2gwHwYDVR0j
BBgwFoAUkLkLcAPESXoNgsuBor1NpO6atBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjAzNTI3OTYxOTI5MzE5Ny8wLzkwQjkwQjcwMDNDNDQ5N0EwRDgyQ0I4MUEyQkQ0
REE0RUU5QUI0MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRFRTlBQjQxNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDYwMzUyNzk2MTkyOTMxOTcvMC8zMTMwMzMyZTMx
MzUzNDJlMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeaKTANBgkqhkiG9w0BAQsFAAOCAQEAdFUypmWEFYYZ7T1H9j5x
fJTBthOoW8H1v9kg5gVdc6G/0ksoAK6n4QTU+msYoYftUhYx2+STrVFkkdUR5JNQ
h6sG0PS/n9M7Y0MkDxnehwZCSEblz8gz3DCCB8GkZnWBOSR2dGcnmoZ2AISAjfBn
SQ28klukrOx7wDbhLTa3ty5y2eWRgcth0hfsrTMyhaJ0QtH+/088stytrwv3s+Zf
HNTdm5s/VeYc5WXuKzpKB62bBRL9RwIDFQ01MqTZ/JYAprVBdelY5AlxFh0Hk7GS
RDaycqhnzBtwUiaTY90T7IWnhQHlH50pugwvRW2oU3HfZRZbOWwZoPY1k8/zuLCI
sA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:04 2026 by rpki-client