
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2039333034.roa
File: 3131392e33382e3132382e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier: 4u/DVJKcQmubt9g1/TXQ8gODMdExk8VdVWXkLT1a7T8=
Subject key identifier: 62:41:55:D5:9B:9D:FE:41:A0:86:0B:9F:E9:77:F4:D3:1B:FD:AA:1C
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 02748550369C3B052A9B3C55F52572926EED3A4C
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2039333034.roa
Signing time: Tue 26 May 2026 08:03:29 +0000
ROA not before: Tue 26 May 2026 07:58:29 +0000
ROA not after: Tue 25 May 2027 08:03:29 +0000
asID: 9304
IP address blocks: 119.38.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:74:85:50:36:9c:3b:05:2a:9b:3c:55:f5:25:72:92:6e:ed:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 07:58:29 2026 GMT
Not After : May 25 08:03:29 2027 GMT
Subject: CN=624155D59B9DFE41A0860B9FE977F4D31BFDAA1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:30:18:ea:c4:c3:54:0b:42:90:17:fa:7c:
77:7e:a2:f0:8c:70:08:e2:ac:34:b5:d6:2b:2e:b8:
16:27:e1:7c:64:96:70:0e:9f:71:8d:3b:85:62:d6:
e0:5e:7d:6a:8e:17:dc:2a:57:98:12:07:73:f5:05:
51:50:37:a0:e4:1a:fe:24:a5:e0:52:7a:aa:f0:72:
d5:fe:e2:c8:00:2b:e9:7e:c7:d4:9c:3d:55:69:10:
a9:7e:37:61:0f:65:8d:cf:4b:0f:5c:ff:ab:0c:df:
1a:26:5f:84:c6:5e:83:b6:e5:29:41:cd:db:8e:c4:
dc:41:6a:7b:48:ff:f0:f1:b2:79:4e:5c:37:34:c7:
0d:01:9f:ec:ce:a5:b1:45:0f:86:9c:1f:40:24:da:
33:6b:32:df:5e:9c:79:0d:04:6d:09:eb:02:03:c3:
83:1a:d8:d1:4e:f1:2d:83:75:b0:9e:35:1b:8c:ae:
78:d5:2a:3a:58:59:5f:3a:e2:fa:08:c9:f3:f7:ef:
57:1a:16:3d:29:d1:4a:1c:e5:26:93:aa:36:1b:28:
21:cd:b3:fe:f8:75:a9:79:f5:c5:2f:1d:cb:84:6b:
9e:24:03:84:37:e8:2c:4c:9e:35:a1:e5:05:e6:a6:
d0:38:76:b5:f7:f7:45:66:78:76:4a:53:b9:85:3f:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:55:D5:9B:9D:FE:41:A0:86:0B:9F:E9:77:F4:D3:1B:FD:AA:1C
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.38.128.0/18
Signature Algorithm: sha256WithRSAEncryption
be:b0:92:70:03:62:02:65:5b:34:88:2d:c9:0c:6d:f8:6f:3b:
c2:40:01:b0:87:0c:ec:0c:47:e4:41:7f:6b:36:b8:5c:f4:28:
68:88:49:09:41:48:1c:87:d8:d5:fc:a0:49:b2:5f:a4:50:98:
7a:5c:8a:45:fc:14:88:5c:01:9d:69:1c:a3:1f:9b:cf:25:7c:
fa:07:c1:a0:05:be:1c:45:fc:c2:70:49:0e:02:3c:d5:63:77:
11:1e:c2:97:01:e5:d1:54:ea:71:d0:01:c5:e3:e9:da:a3:0b:
03:a3:33:1e:23:8c:5e:61:0d:9f:3c:2a:b0:60:bc:3d:b0:84:
dc:4b:ea:ca:20:19:f0:8e:c8:64:59:ec:bc:a5:dd:d8:7e:e8:
36:55:bd:5c:20:b2:24:17:ee:67:b5:ae:bc:68:4e:f5:23:6f:
ff:e5:43:18:72:09:a3:ce:00:f2:a6:0b:13:4c:5e:ec:a7:f9:
c0:1e:49:5d:a7:ec:ce:b9:b0:ad:58:a1:82:b4:5a:9b:26:ff:
1b:0c:81:15:a6:47:71:61:1b:0d:26:e5:f9:50:3c:18:26:72:
fb:70:64:d4:73:61:2c:4a:2d:6a:e3:fc:ff:64:bb:a2:d8:a8:
1a:4c:b4:8a:1b:d5:16:27:7b:65:75:31:1b:86:6b:16:da:f2:
80:76:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:08 2026 by rpki-client