
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2030.roa
File: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (raw, json)
Hash identifier: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=
Subject key identifier: 40:4C:22:17:5B:1F:91:49:BF:A4:13:C1:1D:4B:99:BD:3A:04:C5:49
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 2EE4DE23651D799F95488DD93B55B7E7AD8ACEC4
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2030.roa
Signing time: Wed 17 Jun 2026 02:41:41 +0000
ROA not before: Wed 17 Jun 2026 02:36:41 +0000
ROA not after: Wed 16 Jun 2027 02:41:41 +0000
asID: 0
IP address blocks: 119.38.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e4:de:23:65:1d:79:9f:95:48:8d:d9:3b:55:b7:e7:ad:8a:ce:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 17 02:36:41 2026 GMT
Not After : Jun 16 02:41:41 2027 GMT
Subject: CN=404C22175B1F9149BFA413C11D4B99BD3A04C549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:cd:c5:2d:54:b6:fd:3c:4a:54:81:51:de:
78:ab:7d:4a:8a:5f:c1:3a:93:fd:1e:14:b9:72:e3:
07:7c:6b:a8:1e:ad:54:8d:30:80:47:55:ec:68:04:
9a:93:81:59:2c:88:9a:0c:f6:d7:11:24:69:64:3d:
e5:4a:7b:97:bb:dd:c8:19:29:2f:a4:13:53:5e:5f:
61:3a:97:61:ae:97:d9:1c:96:8a:2a:d7:3d:32:e6:
9d:e4:c7:1f:29:85:95:62:f8:e4:d2:f9:9d:fa:94:
3d:57:89:44:ea:4f:9d:b1:89:37:6f:94:87:72:a7:
fa:08:18:98:db:5b:85:f1:ed:69:a5:cc:e3:da:fb:
33:5f:bf:c3:b6:e4:9a:d2:21:bb:b7:4f:1f:41:4d:
12:99:a0:ac:33:ab:ac:17:e1:75:cb:04:fb:09:45:
80:39:df:0d:9a:3c:11:81:05:19:4e:08:17:d8:3f:
56:58:56:d7:47:26:b3:d2:d0:33:69:cb:01:0f:94:
86:6b:d7:2c:72:cc:fc:97:3c:a1:ae:3b:77:8e:46:
46:f6:2b:d4:06:ad:d6:0f:63:be:12:dd:6f:c8:ff:
02:92:dc:9d:07:98:ab:88:b2:0d:14:20:1e:b0:dd:
b7:d7:6c:76:68:a9:21:50:6b:0f:15:48:83:30:6c:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4C:22:17:5B:1F:91:49:BF:A4:13:C1:1D:4B:99:BD:3A:04:C5:49
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.38.128.0/18
Signature Algorithm: sha256WithRSAEncryption
45:13:cc:ca:a9:fd:e5:5b:71:cf:54:3e:04:31:31:62:12:39:
4f:ba:3e:47:44:ee:8c:79:4e:e7:ee:26:72:9a:fc:12:36:c8:
5c:bd:71:97:27:3f:6f:3a:37:b1:50:74:f5:6b:ec:67:01:c0:
9a:dc:44:c1:b7:11:e5:5d:d2:24:1c:66:ec:d1:dc:51:87:6b:
92:8d:39:96:56:68:aa:fd:68:83:aa:43:da:48:36:44:c1:de:
a3:b6:6b:70:c8:f3:e2:15:44:ce:ef:f2:2d:c1:65:79:7e:cf:
f3:56:cc:12:47:d7:f2:bf:e3:77:ad:44:f6:88:7f:be:bf:7b:
ed:5f:24:2f:88:e1:74:6c:af:99:0e:ec:cd:bf:d1:bd:55:ef:
74:22:92:d8:24:ca:eb:70:cb:0a:b9:72:6a:b9:14:69:e2:84:
97:be:27:1d:2a:c3:df:3b:f0:c3:62:d8:7e:58:90:72:d7:4d:
2c:ad:b0:31:19:a1:8a:89:0c:d3:b0:ce:6d:bd:8d:32:71:4c:
58:5e:6a:c0:6d:b6:7b:af:3a:23:93:d6:a8:7c:04:46:17:dd:
ce:d2:90:fc:e5:0d:b8:56:28:85:b7:3d:93:cf:38:19:99:e6:
87:e1:7d:8a:97:fb:f2:2e:b1:84:46:10:b9:3f:61:a5:1d:40:
a6:9f:0b:97
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIULuTeI2UdeZ+VSI3ZO1W3562KzsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjA2MTcwMjM2NDFaFw0yNzA2MTYwMjQxNDFaMDMxMTAvBgNV
BAMTKDQwNEMyMjE3NUIxRjkxNDlCRkE0MTNDMTFENEI5OUJEM0EwNEM1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq7M3FLVS2/TxKVIFR3nirfUqK
X8E6k/0eFLly4wd8a6gerVSNMIBHVexoBJqTgVksiJoM9tcRJGlkPeVKe5e73cgZ
KS+kE1NeX2E6l2Gul9kclooq1z0y5p3kxx8phZVi+OTS+Z36lD1XiUTqT52xiTdv
lIdyp/oIGJjbW4Xx7WmlzOPa+zNfv8O25JrSIbu3Tx9BTRKZoKwzq6wX4XXLBPsJ
RYA53w2aPBGBBRlOCBfYP1ZYVtdHJrPS0DNpywEPlIZr1yxyzPyXPKGuO3eORkb2
K9QGrdYPY74S3W/I/wKS3J0HmKuIsg0UIB6w3bfXbHZoqSFQaw8VSIMwbKsNAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUQEwiF1sfkUm/pBPBHUuZvToExUkwHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMTM5MmUzMzM4
MmUzMTMyMzgyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBncm
gDANBgkqhkiG9w0BAQsFAAOCAQEARRPMyqn95Vtxz1Q+BDExYhI5T7o+R0TujHlO
5+4mcpr8EjbIXL1xlyc/bzo3sVB09WvsZwHAmtxEwbcR5V3SJBxm7NHcUYdrko05
llZoqv1og6pD2kg2RMHeo7ZrcMjz4hVEzu/yLcFleX7P81bMEkfX8r/jd61E9oh/
vr977V8kL4jhdGyvmQ7szb/RvVXvdCKS2CTK63DLCrlyarkUaeKEl74nHSrD3zvw
w2LYfliQctdNLK2wMRmhiokM07DObb2NMnFMWF5qwG22e686I5PWqHwERhfdztKQ
/OUNuFYohbc9k884GZnmh+F9ipf78i6xhEYQuT9hpR1App8Llw==
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:41 2026 by rpki-client