
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e20323037353530.roa
File: 3132302e33312e3135322e302f32312d3234203d3e20323037353530.roa (raw, json)
Hash identifier: jGWYmchKx1w3p1RmzVr+y3rfj+vffp79BgAHDnZU7zc=
Subject key identifier: EF:57:C3:F4:2E:D1:CC:F7:DC:4E:36:4B:64:78:87:68:73:F2:4A:9A
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 50E35485F2363A445CB1AA4D1234F6445D1B5937
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 08:18:50 +0000
ROA not before: Tue 02 Jun 2026 08:13:50 +0000
ROA not after: Tue 01 Jun 2027 08:18:50 +0000
asID: 207550
IP address blocks: 120.31.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e3:54:85:f2:36:3a:44:5c:b1:aa:4d:12:34:f6:44:5d:1b:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 2 08:13:50 2026 GMT
Not After : Jun 1 08:18:50 2027 GMT
Subject: CN=EF57C3F42ED1CCF7DC4E364B6478876873F24A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:9a:60:a0:11:f5:33:63:c6:fa:ed:db:11:
65:f2:82:31:f3:11:f6:be:eb:4c:cd:73:b1:35:9a:
b1:b6:8f:56:82:46:15:d7:fb:e7:d9:36:a5:20:0a:
a0:dd:18:ce:bc:12:78:61:35:0b:15:69:83:7b:14:
66:c4:bd:ef:fa:c2:95:55:72:8b:bb:41:75:1a:81:
08:a9:08:15:88:95:06:7b:3c:b6:b8:a8:3d:bd:1c:
56:57:0e:61:d9:45:63:d9:7e:3d:86:ce:b0:4c:9a:
3b:6e:47:04:0a:16:23:a6:09:1c:d0:19:61:03:51:
49:ed:84:57:d5:ba:f2:cd:84:4b:57:7e:a2:22:22:
3c:3d:97:84:a3:1b:70:01:a3:d3:a7:83:48:a0:e8:
80:48:6a:3a:ce:50:de:cf:ca:8b:3e:a4:df:6d:de:
18:36:38:aa:c8:37:86:4f:52:e7:fc:06:35:67:77:
71:f1:38:20:e0:e6:55:ba:75:af:ae:e0:d1:e0:57:
20:bd:5b:25:f0:67:b0:8d:cd:fb:ed:fb:ae:36:c7:
98:42:4e:d2:d7:de:f2:87:e0:cd:f4:e4:80:13:16:
bd:4f:b6:1d:9f:5e:90:e0:1f:81:fb:c0:05:ed:ab:
45:c6:b2:7a:63:f6:57:22:66:a1:e7:68:c2:4a:74:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:57:C3:F4:2E:D1:CC:F7:DC:4E:36:4B:64:78:87:68:73:F2:4A:9A
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.152.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:75:81:e6:13:97:6c:3e:6e:5d:84:d3:97:94:5e:31:d1:69:
c3:4d:74:e9:e6:be:9c:d7:86:11:17:fe:09:7f:de:2f:21:58:
db:a5:bc:e6:a6:c8:cf:30:c6:f6:a5:c2:b6:38:31:f9:bc:8a:
8d:fa:cf:ff:36:56:ad:ae:04:ff:e2:3c:3b:5f:8b:18:5e:56:
a6:2d:41:bf:79:19:01:9a:12:e2:35:10:d6:ff:2e:60:08:d0:
1d:17:62:c2:55:d3:14:bf:75:5e:a9:1b:a1:92:9c:c3:7d:e3:
bd:1b:f5:73:49:f7:a1:dc:25:5b:d8:f2:d0:d0:f2:95:51:60:
0f:7c:0e:7f:01:4d:fe:c2:b8:3f:b4:02:f7:7b:41:c5:81:7d:
f5:ea:3a:63:26:f0:b6:82:ac:24:fa:84:c2:0e:a9:b2:4f:9e:
ce:95:28:d0:e1:ac:00:8e:cd:eb:e7:a9:0e:0d:76:ec:80:63:
e9:bd:4a:a9:4f:39:fa:70:4c:9a:45:55:df:35:a0:70:6e:fe:
ff:16:fe:f2:7e:46:cd:73:36:a4:eb:47:45:4f:0b:c9:55:95:
af:89:65:79:71:64:7a:ae:67:55:8d:87:8c:ae:21:20:18:cc:
c1:f6:2c:28:75:ac:d9:39:e4:c4:4f:27:9f:a3:40:5e:03:22:
56:98:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:15 2026 by rpki-client