
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e2030.roa
File: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=
Subject key identifier: 9D:59:1E:D9:D2:07:7E:C0:F4:4A:2C:77:49:E8:A7:34:F9:53:6C:3A
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 53ADB0FCF5923FD5EEE9D8894CEE4A34990787D4
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e2030.roa
Signing time: Wed 17 Jun 2026 02:41:41 +0000
ROA not before: Wed 17 Jun 2026 02:36:41 +0000
ROA not after: Wed 16 Jun 2027 02:41:41 +0000
asID: 0
IP address blocks: 120.31.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ad:b0:fc:f5:92:3f:d5:ee:e9:d8:89:4c:ee:4a:34:99:07:87:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 17 02:36:41 2026 GMT
Not After : Jun 16 02:41:41 2027 GMT
Subject: CN=9D591ED9D2077EC0F44A2C7749E8A734F9536C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:fe:17:89:47:23:2f:b5:ef:71:d0:70:72:
dd:1b:9b:8a:3c:ab:aa:59:8f:ef:95:4b:13:ce:42:
d4:8f:bb:7b:81:83:90:a1:09:cd:17:28:c7:a4:0f:
9b:10:59:41:13:b5:ed:55:75:79:60:25:71:d1:29:
10:e0:b7:af:1d:6e:57:ec:f8:db:2e:77:73:3a:e6:
86:f7:a7:74:3d:40:fd:fc:bb:03:4f:dc:b5:bb:42:
49:f5:e6:49:9e:16:9c:21:87:ec:c0:a2:c0:d0:0a:
e3:42:e3:06:b9:b2:17:6a:a7:77:d0:35:fb:7c:52:
21:d5:60:c7:64:9a:f0:7a:d8:27:d8:1f:35:cb:6b:
25:8f:3a:1f:96:5e:c9:a1:14:21:1f:c4:0a:9f:fd:
6f:d4:02:fd:b0:54:a7:3a:4b:b6:86:80:fd:55:43:
88:89:c7:c3:c5:a2:73:e8:4f:51:ed:f2:8d:74:d3:
d0:ad:7d:ea:12:db:ed:37:d8:6b:cf:fc:0a:aa:46:
75:0e:67:19:06:47:7b:e1:9a:3e:37:9c:77:0e:f2:
37:fb:ed:9f:db:fa:75:8d:99:59:65:44:1d:d3:4e:
fa:85:45:fe:23:d1:65:49:eb:93:33:3d:43:0e:81:
2e:37:50:36:68:1c:10:e3:f6:c7:b2:98:65:83:14:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:59:1E:D9:D2:07:7E:C0:F4:4A:2C:77:49:E8:A7:34:F9:53:6C:3A
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
72:04:ce:b0:84:38:4b:59:32:12:46:66:12:81:04:67:a6:40:
c3:4c:67:0d:30:3e:a3:8c:75:8a:5d:0f:8b:32:8f:47:9f:b2:
8e:f8:8a:aa:91:c7:1b:49:57:e1:18:57:57:15:8e:ab:44:98:
03:34:ab:42:9e:e8:86:ee:e3:e3:85:3b:8c:a2:24:63:8e:8e:
91:f9:b4:77:cf:17:0d:fa:41:bd:9d:78:c1:32:06:e3:44:85:
14:d7:14:64:ce:d1:f9:d2:23:ee:9a:89:dd:c7:4f:53:e5:c0:
41:88:ee:85:98:f7:89:04:c9:6a:55:55:07:1a:90:9e:f7:7b:
db:85:01:55:15:ce:8a:64:68:b5:8b:30:27:8d:e4:49:63:bb:
6e:d5:d4:5c:62:bd:1c:d3:00:1d:26:01:06:99:35:b7:dc:97:
f4:2a:bd:94:92:8a:15:1a:65:fa:94:a6:66:cb:98:8f:72:82:
0f:3e:39:05:fb:90:32:5d:1c:5f:86:1c:1c:b5:8b:30:3b:8e:
c6:aa:89:87:63:63:26:ad:9d:e5:45:98:02:7f:34:12:ea:33:
e8:15:29:a0:a7:9d:b3:b6:45:c6:a2:f5:b3:1a:bd:fd:5c:f0:
95:61:6a:d5:10:0d:6f:0a:1c:84:c0:9b:ea:af:4f:76:e3:11:
3e:2b:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:53 2026 by rpki-client