
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2039333034.roa
File: 3132302e33312e3134362e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: tYHOlvV6DEW04hCData8uAKjziRpk5YfPRydExB/69w=
Subject key identifier: 92:A6:BA:18:0B:11:3F:C4:93:4B:D1:88:5E:8A:44:B3:5E:39:E6:0D
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 59DC0C5A8C907D8BCD2EDF2C61684005856068BF
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2039333034.roa
Signing time: Tue 26 May 2026 08:11:40 +0000
ROA not before: Tue 26 May 2026 08:06:40 +0000
ROA not after: Tue 25 May 2027 08:11:40 +0000
asID: 9304
IP address blocks: 120.31.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dc:0c:5a:8c:90:7d:8b:cd:2e:df:2c:61:68:40:05:85:60:68:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 08:06:40 2026 GMT
Not After : May 25 08:11:40 2027 GMT
Subject: CN=92A6BA180B113FC4934BD1885E8A44B35E39E60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:c8:01:38:1f:7c:3f:87:16:d7:57:00:b3:
79:ad:d7:28:6a:1b:f9:b6:9c:75:cb:e7:ad:1e:34:
0c:49:06:97:2b:93:ce:14:5b:ef:23:7b:a1:68:d1:
0f:b5:fe:ce:59:8b:74:a9:da:4b:83:66:19:24:61:
6c:61:6f:5d:8a:0a:65:a3:43:4c:4c:79:6b:3c:41:
14:cb:7f:ee:b9:81:19:b7:b0:c1:db:63:82:4f:e2:
f0:17:b4:c2:ce:d3:6a:35:f0:2b:58:bb:f1:b9:b3:
ac:ce:52:95:7b:2f:ec:5f:47:fd:27:6e:b6:e5:de:
76:42:55:98:e4:9e:f9:c0:72:6f:04:4b:91:82:94:
0d:05:09:91:65:3d:fe:03:31:6e:fc:dc:d0:e8:45:
c0:42:8d:ee:4a:19:0b:35:67:0b:aa:0e:cd:de:5b:
ff:9a:2b:75:26:de:a1:0b:d1:72:69:c4:c0:6a:c4:
6b:66:7c:71:fd:94:4a:42:04:55:1a:bb:ae:16:98:
ef:fe:48:bf:8d:5e:c1:12:3b:e4:8e:9a:5c:35:89:
cf:89:9c:14:a9:5c:2e:c3:ca:33:7c:51:6d:69:c7:
ee:19:f8:7d:26:ea:f5:c1:40:1d:30:17:12:3c:4e:
61:67:32:68:ac:1f:85:af:9a:ad:7b:11:dc:b1:ab:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:BA:18:0B:11:3F:C4:93:4B:D1:88:5E:8A:44:B3:5E:39:E6:0D
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.146.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:2e:03:c1:93:07:74:c8:f8:5f:e4:de:99:6b:83:a2:f8:2d:
08:78:02:fa:cb:f8:ce:f1:ac:f8:51:35:5b:65:bc:6a:a7:c0:
56:27:ef:46:ce:06:98:56:bf:a8:3d:95:40:e0:40:08:14:8d:
0f:d8:e5:a2:fc:e9:39:7c:ed:82:9e:8d:e7:c5:7f:4e:41:65:
93:a4:a9:57:ef:ca:0d:b6:14:30:ac:3e:2e:e9:4a:a4:9a:61:
3a:06:10:f5:51:ab:8c:51:e8:e9:14:b9:82:53:6f:d0:eb:f7:
d9:e8:c5:51:62:12:f7:d7:9a:bb:f1:bf:d0:96:8d:1e:bb:b1:
81:74:f8:4c:7d:f0:1a:b6:a4:70:a2:b1:2c:3c:96:93:a6:5a:
23:9c:00:29:10:97:5e:ea:4b:c5:c3:08:9f:b6:7d:12:75:65:
4c:19:6e:8a:90:ad:ed:34:5a:c3:ea:3a:ac:32:ee:42:75:b5:
17:0e:d5:a0:62:40:81:b6:0b:ae:72:47:a7:33:9c:b5:b1:d9:
61:4f:0c:45:9e:c5:65:0c:c0:af:95:41:26:f5:ed:b3:76:e7:
16:ff:3d:ed:04:bc:0e:25:0a:be:99:87:b2:38:20:13:76:a8:
a6:fb:c8:6e:29:c5:a9:eb:e1:00:2d:a7:d3:4d:16:c0:3a:b8:
82:ee:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:12 2026 by rpki-client