
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2030.roa
File: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=
Subject key identifier: FA:30:42:09:1B:65:90:80:E8:5A:5A:22:B5:99:0A:C0:3C:99:5D:53
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 57AE240538234B39FC2714CDCDD843FC15F21BAF
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2030.roa
Signing time: Wed 17 Jun 2026 02:41:41 +0000
ROA not before: Wed 17 Jun 2026 02:36:41 +0000
ROA not after: Wed 16 Jun 2027 02:41:41 +0000
asID: 0
IP address blocks: 120.31.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ae:24:05:38:23:4b:39:fc:27:14:cd:cd:d8:43:fc:15:f2:1b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 17 02:36:41 2026 GMT
Not After : Jun 16 02:41:41 2027 GMT
Subject: CN=FA3042091B659080E85A5A22B5990AC03C995D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:94:57:5c:74:1d:f4:d1:d1:80:a1:9d:bf:
e9:51:77:fc:01:87:cd:f7:65:47:9b:06:0d:4c:c1:
28:1d:52:2d:00:55:b1:98:bf:70:4e:95:ec:df:4d:
8e:44:c6:db:7b:c4:5a:48:ca:1a:49:a4:ed:75:3c:
73:09:da:86:08:59:2b:d8:0d:0d:60:ca:b6:22:48:
e6:cf:63:5d:d3:7d:6f:65:e3:56:a6:b8:e6:1c:a7:
dc:b2:48:cf:76:77:98:e6:93:3d:c5:9c:eb:e8:01:
b6:8f:c0:94:0a:22:6e:5b:61:6c:10:18:3f:ac:d1:
12:b6:9e:9e:6c:06:53:0f:5e:ac:14:cb:3c:d9:91:
3e:19:6b:2d:79:2a:a3:31:c8:75:ac:c1:c2:a7:da:
c2:84:49:a9:fb:89:cf:88:df:47:77:73:9d:bf:91:
33:1a:7d:15:1f:cc:ab:e3:d6:d7:f1:d4:55:69:34:
7b:f8:07:25:3a:59:68:78:0d:c9:42:c8:7a:ed:41:
0c:70:d4:73:9e:51:55:53:1b:14:73:ff:83:00:3e:
a7:e6:82:c4:28:3b:15:ca:c1:d0:02:f6:9a:5d:bf:
ad:66:87:94:fe:1a:d8:2b:45:e7:b8:f0:9e:33:22:
d8:35:9c:46:a0:86:c9:e7:f2:fc:80:bb:6c:82:b9:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:42:09:1B:65:90:80:E8:5A:5A:22:B5:99:0A:C0:3C:99:5D:53
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.146.0/23
Signature Algorithm: sha256WithRSAEncryption
73:58:13:90:d4:1e:2b:64:b2:9f:d9:1d:37:a2:5c:d5:0b:69:
cc:e6:59:91:eb:4f:dc:ea:5b:e2:cf:54:8a:c6:e2:74:29:3c:
16:84:40:a8:6c:00:b4:7d:07:03:f1:01:3a:75:dc:58:4e:0c:
14:40:e3:36:19:e7:28:db:4e:e3:07:b2:02:68:ab:ef:60:28:
dd:85:30:cc:55:13:bd:3f:b4:47:b7:e0:71:00:d8:b1:d0:e0:
07:ef:03:c0:96:79:d4:1d:f3:78:30:02:e5:b7:82:79:d5:93:
c7:69:03:e7:ad:7b:7d:a8:06:2d:7d:0e:cd:89:5f:7b:9e:da:
5b:fd:6a:de:42:25:ed:1f:87:53:74:31:b9:d8:9a:d0:74:d4:
37:b1:72:97:e7:c1:09:cc:ce:66:64:ac:81:78:5c:7c:17:77:
9b:97:bf:bf:c9:9e:f5:80:b1:08:4a:5e:85:45:a9:be:76:22:
6b:fa:ef:2e:f0:fc:94:a6:a7:ae:5a:ba:d9:5b:27:86:3b:99:
d5:3c:ca:ba:4a:58:6a:71:64:09:9d:76:53:8b:13:b9:55:ad:
8d:6c:d8:77:fd:a0:c9:c0:e5:c4:78:0c:d5:35:32:69:c4:0b:
24:38:67:6b:6b:a1:c1:f1:cd:d8:76:e2:29:b4:16:fa:46:31:
82:0d:a4:e9
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUV64kBTgjSzn8JxTNzdhD/BXyG68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjA2MTcwMjM2NDFaFw0yNzA2MTYwMjQxNDFaMDMxMTAvBgNV
BAMTKEZBMzA0MjA5MUI2NTkwODBFODVBNUEyMkI1OTkwQUMwM0M5OTVENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIZRXXHQd9NHRgKGdv+lRd/wB
h833ZUebBg1MwSgdUi0AVbGYv3BOlezfTY5Extt7xFpIyhpJpO11PHMJ2oYIWSvY
DQ1gyrYiSObPY13TfW9l41amuOYcp9yySM92d5jmkz3FnOvoAbaPwJQKIm5bYWwQ
GD+s0RK2np5sBlMPXqwUyzzZkT4Zay15KqMxyHWswcKn2sKESan7ic+I30d3c52/
kTMafRUfzKvj1tfx1FVpNHv4ByU6WWh4DclCyHrtQQxw1HOeUVVTGxRz/4MAPqfm
gsQoOxXKwdAC9ppdv61mh5T+GtgrRee48J4zItg1nEaghsnn8vyAu2yCuTW3AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU+jBCCRtlkIDoWloitZkKwDyZXVMwHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMjMwMmUzMzMx
MmUzMTM0MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXgf
kjANBgkqhkiG9w0BAQsFAAOCAQEAc1gTkNQeK2Syn9kdN6Jc1QtpzOZZketP3Opb
4s9UisbidCk8FoRAqGwAtH0HA/EBOnXcWE4MFEDjNhnnKNtO4weyAmir72Ao3YUw
zFUTvT+0R7fgcQDYsdDgB+8DwJZ51B3zeDAC5beCedWTx2kD5617fagGLX0OzYlf
e57aW/1q3kIl7R+HU3Qxudia0HTUN7Fyl+fBCczOZmSsgXhcfBd3m5e/v8me9YCx
CEpehUWpvnYia/rvLvD8lKanrlq62VsnhjuZ1TzKukpYanFkCZ12U4sTuVWtjWzY
d/2gycDlxHgM1TUyacQLJDhna2uhwfHN2HbiKbQW+kYxgg2k6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:40 2026 by rpki-client