
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2033343931.roa
File: 3132302e33312e302e302f31382d3234203d3e2033343931.roa (raw, json)
Hash identifier: LYGiBvH6u6NvrCQGQqyRHDBOyApzHHDWnnTnZyNadyo=
Subject key identifier: 61:7B:81:BD:4E:DB:C9:27:6B:6E:3E:C7:10:65:90:1B:9F:1F:68:99
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 2940ADBCDCD205B68DC8606B16663AC8925901CD
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:07:10 +0000
ROA not before: Tue 26 May 2026 08:02:10 +0000
ROA not after: Tue 25 May 2027 08:07:10 +0000
asID: 3491
IP address blocks: 120.31.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:40:ad:bc:dc:d2:05:b6:8d:c8:60:6b:16:66:3a:c8:92:59:01:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 08:02:10 2026 GMT
Not After : May 25 08:07:10 2027 GMT
Subject: CN=617B81BD4EDBC9276B6E3EC71065901B9F1F6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:e2:9e:09:01:f2:32:4e:bc:dc:cc:68:70:
ec:31:07:c9:76:a7:db:7f:5e:40:67:46:22:94:1c:
dd:82:a0:00:95:21:3b:ee:ca:7d:2b:85:a0:be:c3:
c8:69:19:d5:9a:08:48:d5:4b:75:c2:5f:b6:bd:8d:
4c:5e:ac:5d:fa:3e:df:09:99:6e:7d:ce:9b:e1:1b:
c7:29:a1:2f:0e:27:ef:9b:69:91:dd:77:36:11:0e:
b2:4c:19:02:e0:94:c4:29:d1:15:2a:b9:36:72:43:
bf:12:5c:33:6a:63:7d:2d:0e:bc:9e:5a:94:30:6d:
cf:25:7d:d0:31:56:65:f0:76:d9:d7:4a:bd:89:66:
fc:8a:4f:ca:00:80:63:6f:04:d7:ab:d7:ab:b9:37:
fc:7a:52:10:91:77:32:f4:92:42:9a:6d:93:76:d6:
5d:59:04:09:aa:8f:c1:2c:22:50:58:be:25:d7:4c:
71:25:0c:0f:2f:0a:77:12:68:69:8b:74:82:fe:4f:
21:ac:83:dc:5f:4b:d7:c4:09:44:a9:e2:26:7c:9d:
dd:56:32:2f:b0:db:09:b5:f8:82:59:43:0a:b5:c7:
4e:80:94:27:b1:29:a2:43:72:38:ff:48:db:c7:bc:
00:92:e5:79:a1:dc:f8:f1:73:cc:07:90:a2:20:a5:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:81:BD:4E:DB:C9:27:6B:6E:3E:C7:10:65:90:1B:9F:1F:68:99
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.0.0/18
Signature Algorithm: sha256WithRSAEncryption
30:5d:86:02:89:80:c0:77:5e:75:a7:f6:f3:e7:db:ae:76:68:
86:32:dd:31:23:90:f0:02:9b:57:d5:cf:e5:62:4c:e2:63:dc:
9c:52:28:f2:9d:bb:20:b2:9b:65:fa:73:63:60:4f:6d:94:1d:
6e:72:f5:12:ac:23:3b:d6:8c:23:3d:0f:86:83:38:ae:7f:96:
54:59:e9:7e:47:04:47:6f:7a:2b:02:1c:68:44:95:11:01:50:
87:53:03:08:c8:85:4e:fe:bc:32:76:b7:60:4f:f8:88:63:b5:
44:e3:a2:5c:a1:ec:3e:4a:06:75:58:86:1a:94:6c:5c:e0:1d:
a0:25:8d:f2:e4:ff:58:76:b9:70:f9:a6:28:4e:8c:f0:f1:2f:
09:8f:93:98:61:c5:97:cf:1a:af:23:d8:29:80:5e:2f:2b:9e:
ec:4c:29:88:aa:2d:18:a8:e4:ee:fa:bd:e2:d9:28:7b:51:c2:
5e:81:1f:cf:14:b0:6f:c6:b0:84:ed:62:15:58:25:82:07:65:
3d:4b:3f:d0:9a:d4:f6:a2:95:67:a2:85:d3:09:30:64:e4:3d:
5d:12:b0:c8:a9:00:2b:28:0c:5a:cd:13:86:5a:03:03:3b:33:
b7:a9:10:d7:82:dc:bc:0d:b2:47:21:2e:5d:30:b4:1c:cc:86:
98:f3:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:53:53 2026 by rpki-client