
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e20323037353530.roa
File: 3132302e33312e3134352e302f32342d3234203d3e20323037353530.roa (raw, json)
Hash identifier: C2Jci7qSvnwlgMY5QoJh06LBhXfQWmLwGFMCO3hHjiQ=
Subject key identifier: C0:0D:E3:51:15:CC:87:41:ED:20:CC:85:32:A1:5E:C6:B6:16:CC:89
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 247496CEEE04068BCB7FA9003D918AB93F5CBFFB
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 08:18:50 +0000
ROA not before: Tue 02 Jun 2026 08:13:50 +0000
ROA not after: Tue 01 Jun 2027 08:18:50 +0000
asID: 207550
IP address blocks: 120.31.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:74:96:ce:ee:04:06:8b:cb:7f:a9:00:3d:91:8a:b9:3f:5c:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 2 08:13:50 2026 GMT
Not After : Jun 1 08:18:50 2027 GMT
Subject: CN=C00DE35115CC8741ED20CC8532A15EC6B616CC89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:8a:4d:28:08:7a:00:b7:9c:ab:be:0d:da:
69:03:e4:3d:03:4b:18:f9:a6:5e:cc:54:e3:f6:5d:
4c:57:b0:dd:7b:61:31:7d:67:a1:f2:92:5c:57:20:
f2:6a:a2:66:26:65:4a:68:56:25:85:be:02:00:92:
f7:13:65:27:a8:0a:ee:81:ce:0b:00:aa:0c:2b:b4:
7f:e1:e5:a6:c5:3c:62:c7:07:ad:f2:57:ce:c6:db:
a0:9a:0e:c9:38:fb:c2:fc:2c:cf:f1:21:77:ce:a0:
2a:48:a0:44:3d:90:d9:8f:f6:6c:21:10:56:5c:ea:
91:5f:79:b0:6d:31:90:c1:b0:78:7d:d6:ce:df:4d:
9d:6c:b9:b5:4a:ae:49:7e:37:72:22:73:90:1e:b4:
fc:12:2d:75:0b:f9:45:ef:9e:f6:69:c9:ea:7d:d4:
ad:2f:a1:4a:2b:4a:77:e4:69:26:7f:be:60:c1:1b:
ff:a0:dc:73:b5:f0:6c:ec:ac:db:81:e2:4a:7e:19:
46:41:02:dc:e9:44:1a:3d:2f:b3:16:f5:a2:c4:09:
3e:af:e3:51:11:54:fd:84:7b:03:ac:90:60:9d:45:
69:29:ab:ca:7a:c4:44:55:55:30:5d:51:dc:b1:a8:
4a:be:3c:64:30:02:3c:41:b3:6a:5d:7e:13:84:fa:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:E3:51:15:CC:87:41:ED:20:CC:85:32:A1:5E:C6:B6:16:CC:89
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4d:55:ae:32:9b:9f:fc:1d:cf:cb:4b:fc:2f:44:43:1f:c7:
98:83:21:30:39:d1:46:da:27:bc:bf:e9:ca:3f:01:6a:62:b5:
c2:d6:5e:8a:cc:17:ee:ca:4c:05:e2:5d:dc:1a:31:c5:74:05:
4f:b7:13:2d:be:4d:05:b9:0a:a2:b0:ab:cd:e2:db:d3:3f:10:
d3:ad:cc:0b:4f:62:f5:f4:40:75:d8:df:62:9c:23:dd:fd:4d:
61:ac:3e:8e:30:af:b1:0b:d4:6c:24:e5:0e:4a:5f:09:60:15:
be:8b:4c:93:01:07:f7:1f:d6:12:56:12:90:a7:ce:42:9d:57:
14:a0:fb:f1:a6:0f:e3:18:19:f4:e1:4d:51:cf:71:31:9c:af:
10:7b:fd:87:a2:ed:56:c3:6a:8b:4c:f5:dc:8f:30:d6:25:4d:
6f:30:90:39:bf:d9:1f:ff:aa:de:b2:c2:30:4f:bd:79:d1:9e:
46:0d:ac:4f:51:d7:d2:3d:cc:51:06:64:4b:04:64:67:52:5a:
a0:fe:99:e3:48:9e:14:d0:05:6e:2f:ba:32:6a:93:d8:be:a6:
b3:1c:ad:6f:ef:90:6a:b1:37:8f:93:17:e8:52:15:eb:d2:7e:
cc:fc:ec:9d:8c:df:c3:64:c9:e9:fa:c9:58:05:c1:9f:3f:f9:
ed:f3:60:1b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJHSWzu4EBovLf6kAPZGKuT9cv/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjA2MDIwODEzNTBaFw0yNzA2MDEwODE4NTBaMDMxMTAvBgNV
BAMTKEMwMERFMzUxMTVDQzg3NDFFRDIwQ0M4NTMyQTE1RUM2QjYxNkNDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KYpNKAh6ALecq74N2mkD5D0D
Sxj5pl7MVOP2XUxXsN17YTF9Z6HyklxXIPJqomYmZUpoViWFvgIAkvcTZSeoCu6B
zgsAqgwrtH/h5abFPGLHB63yV87G26CaDsk4+8L8LM/xIXfOoCpIoEQ9kNmP9mwh
EFZc6pFfebBtMZDBsHh91s7fTZ1subVKrkl+N3Iic5AetPwSLXUL+UXvnvZpyep9
1K0voUorSnfkaSZ/vmDBG/+g3HO18GzsrNuB4kp+GUZBAtzpRBo9L7MW9aLECT6v
41ERVP2EewOskGCdRWkpq8p6xERVVTBdUdyxqEq+PGQwAjxBs2pdfhOE+sKlAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUwA3jURXMh0HtIMyFMqFexrYWzIkwHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8zMTMyMzAyZTMz
MzEyZTMxMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHgfkTANBgkqhkiG9w0BAQsFAAOCAQEACE1VrjKbn/wdz8tL/C9E
Qx/HmIMhMDnRRtonvL/pyj8BamK1wtZeiswX7spMBeJd3BoxxXQFT7cTLb5NBbkK
orCrzeLb0z8Q063MC09i9fRAddjfYpwj3f1NYaw+jjCvsQvUbCTlDkpfCWAVvotM
kwEH9x/WElYSkKfOQp1XFKD78aYP4xgZ9OFNUc9xMZyvEHv9h6LtVsNqi0z13I8w
1iVNbzCQOb/ZH/+q3rLCME+9edGeRg2sT1HX0j3MUQZkSwRkZ1JaoP6Z40ieFNAF
bi+6MmqT2L6msxytb++QarE3j5MX6FIV69J+zPzsnYzfw2TJ6frJWAXBnz/57fNg
Gw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:15 2026 by rpki-client