
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e20323037353530.roa
File: 3131392e33382e3132382e302f31382d3234203d3e20323037353530.roa (raw, json)
Hash identifier: /2YCd0ZSD1ET9DQ5ashJP1h6NxFtnG1uEo+55i8Scds=
Subject key identifier: 7F:F8:C9:21:9E:B4:D3:D3:E9:7F:FA:A1:C3:22:11:FF:23:63:9F:C5
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 7DB131985061A8FA65D30C05C606C72D46D800C9
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 08:18:50 +0000
ROA not before: Tue 02 Jun 2026 08:13:50 +0000
ROA not after: Tue 01 Jun 2027 08:18:50 +0000
asID: 207550
IP address blocks: 119.38.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b1:31:98:50:61:a8:fa:65:d3:0c:05:c6:06:c7:2d:46:d8:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 2 08:13:50 2026 GMT
Not After : Jun 1 08:18:50 2027 GMT
Subject: CN=7FF8C9219EB4D3D3E97FFAA1C32211FF23639FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:9c:eb:55:1f:66:e4:1f:98:82:f5:ae:4c:
9f:41:9f:cb:e6:e7:df:04:9d:3b:a1:67:be:db:be:
d2:4b:64:24:7b:51:1f:0d:45:04:78:3f:eb:88:88:
59:a1:84:32:42:68:e6:ec:77:87:82:c0:a7:c7:f2:
f0:a2:8d:e0:ec:e3:a5:87:7d:60:89:ef:69:a1:3f:
5f:c0:f1:fe:ee:98:03:31:eb:7f:06:d7:7b:2a:2f:
5b:4a:51:d5:90:32:17:92:f7:59:c0:91:e6:4a:1a:
c6:34:f1:b9:76:3c:e3:8b:e9:68:67:93:5d:07:ab:
f9:dd:4a:e4:fe:67:4c:8b:31:7e:43:1a:65:e8:d0:
cb:53:3c:97:93:82:ad:7c:05:2f:58:b6:5c:8f:b3:
f1:41:b7:c3:95:9b:fa:3d:ac:fc:1d:4f:38:3c:b5:
a6:85:91:ec:b1:74:12:a8:ef:89:81:ec:2e:36:68:
9c:6b:3d:8b:67:4e:94:82:e5:14:34:05:0a:cd:25:
36:b7:ce:40:17:15:de:4a:44:09:42:57:fd:d1:29:
85:bd:7c:7c:c5:32:5a:96:b4:39:1f:e0:47:1e:47:
b6:c6:3c:79:0c:16:b3:49:35:b7:22:32:61:5d:2b:
17:8f:9c:9a:97:bb:e0:26:26:a0:e5:bd:37:d0:94:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:C9:21:9E:B4:D3:D3:E9:7F:FA:A1:C3:22:11:FF:23:63:9F:C5
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.38.128.0/18
Signature Algorithm: sha256WithRSAEncryption
53:8a:8a:8b:f5:ed:c4:7d:cb:55:6e:0b:22:d9:14:eb:8a:9c:
75:9d:df:df:3f:3e:f9:ec:cf:59:61:a4:ff:8c:0e:30:df:01:
f4:46:3d:b2:ef:b3:8e:69:a9:38:55:4f:a1:6a:da:95:d1:4c:
06:35:d1:1f:57:0b:19:83:41:26:67:a9:51:9b:45:24:06:1e:
04:22:82:e5:9b:ab:b4:7c:f3:be:cf:f5:96:6e:5a:6a:7b:e8:
54:41:09:8e:23:35:f1:ad:ad:ec:3c:f3:73:8e:da:1f:a2:3c:
29:7a:20:f8:1d:1b:ab:b3:58:49:f5:3e:ac:0c:0c:30:2c:a7:
68:b0:22:49:07:f5:4d:22:db:3c:24:8e:f9:7a:08:4e:f2:69:
89:62:8d:86:4a:f5:e7:08:b5:a7:39:bc:55:4a:1a:f3:44:5f:
b6:11:2f:97:7e:26:0f:39:0a:8a:2a:51:0c:9d:c7:fe:a1:ea:
69:4e:d4:e2:6a:75:66:be:8e:b6:d2:5a:4d:5d:ee:67:a6:cd:
3b:d8:ab:7d:f3:f0:89:ef:c2:f0:3c:cd:79:17:7b:ea:a2:58:
60:9a:a7:5d:cf:d6:ce:29:ef:f4:29:48:53:83:69:6a:b6:4e:
6b:08:2a:b8:68:d8:e4:39:34:4b:03:df:8a:48:60:66:d4:6b:
e7:a9:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:17 2026 by rpki-client