
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134382e302f32322d3234203d3e2033343931.roa
File: 3132302e33312e3134382e302f32322d3234203d3e2033343931.roa (raw, json)
Hash identifier: Dk2vzhhMA9nFAhNDXqzDa0LdWBD5+GpvNI5Ospe3OQw=
Subject key identifier: 1F:9C:F9:6B:65:0D:4C:90:9E:4F:B0:FE:A4:62:33:21:FD:0F:BD:D4
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 362C38C4DDE45B7C26BD97C2C388EF4B97ED3D2C
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134382e302f32322d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:10:31 +0000
ROA not before: Tue 26 May 2026 08:05:31 +0000
ROA not after: Tue 25 May 2027 08:10:31 +0000
asID: 3491
IP address blocks: 120.31.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2c:38:c4:dd:e4:5b:7c:26:bd:97:c2:c3:88:ef:4b:97:ed:3d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 08:05:31 2026 GMT
Not After : May 25 08:10:31 2027 GMT
Subject: CN=1F9CF96B650D4C909E4FB0FEA4623321FD0FBDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:2c:53:d0:0c:61:48:b5:48:b0:69:76:3d:
0a:0e:19:0a:c3:2a:56:7b:9d:84:00:b8:61:3d:1d:
ea:6b:d6:e3:64:96:2c:6c:f3:ae:f1:d8:de:ca:e4:
f1:b4:16:de:fd:ea:e3:f1:ee:49:0b:fe:58:cb:4e:
3b:63:d6:8b:3f:37:80:9e:44:64:64:0b:77:78:9a:
6a:c9:02:c8:97:0c:ad:cb:35:4a:2c:0f:af:99:e8:
da:89:81:b6:8a:6f:57:75:09:6f:f5:62:b8:55:28:
07:16:f5:f5:31:1b:b8:2c:f4:2e:85:d2:d4:95:e5:
a0:aa:54:2d:ac:9a:7f:e6:d0:35:83:4e:49:60:78:
c3:55:02:2a:56:9f:a7:36:f4:36:83:1b:e6:b8:dc:
48:36:85:0b:53:43:a7:61:d4:5c:d4:6d:4f:3d:a6:
17:45:eb:4b:07:df:3f:ab:d2:53:3b:d0:06:ca:2b:
ad:a7:ac:05:86:20:23:86:02:bf:f1:c6:45:fe:05:
84:60:47:15:2f:dd:ec:21:63:56:61:21:43:00:d7:
54:97:1c:14:40:1c:7e:e8:7e:22:38:09:55:8e:56:
4a:7f:f3:2d:cb:1a:cf:77:6c:e0:7e:07:46:ec:8d:
e7:2f:67:a8:26:f0:d1:42:cf:cd:4c:d5:12:49:19:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:F9:6B:65:0D:4C:90:9E:4F:B0:FE:A4:62:33:21:FD:0F:BD:D4
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134382e302f32322d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:6d:e3:27:d2:80:18:1f:0e:a5:45:3d:0d:7a:99:d8:31:12:
68:03:89:0f:96:a1:24:b9:3a:fc:21:34:99:2a:b7:85:80:58:
3c:d5:c3:d3:34:20:e9:ad:c4:50:7c:d7:5c:4f:b3:14:97:0f:
3d:f9:3f:f1:fe:b7:b7:44:2c:fa:9f:0b:c4:22:a8:ec:75:50:
b9:34:d1:a9:b4:de:fd:11:d7:6e:16:86:fe:d3:21:ab:ce:5c:
58:8b:c4:04:6d:ee:c9:30:40:9c:7e:6d:2b:06:25:37:31:c4:
01:7c:49:ae:34:eb:f6:d2:e1:9e:85:4b:3b:24:07:bd:c1:20:
69:3f:fd:dd:01:9e:cd:ce:50:d1:4b:a4:07:4b:c7:1d:74:04:
df:86:3f:10:7f:51:9b:bb:50:1b:3b:ea:e4:a6:8c:18:ea:d8:
44:1c:d4:81:c0:b5:84:b2:8e:2f:a5:28:ec:16:f3:64:9b:be:
3c:cd:41:ba:97:8d:48:3c:66:f2:87:3a:fb:4c:39:1f:b1:24:
d7:ae:b8:c5:dd:05:7f:b3:34:94:90:92:c9:1d:14:25:51:8f:
5c:2f:14:5a:ec:35:29:be:d1:ce:11:8d:e0:3a:08:30:05:66:
05:28:9e:43:cc:d7:f6:24:68:86:1f:49:38:98:51:d5:87:14:
64:32:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:41 2026 by rpki-client