
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e2033343931.roa
File: 3132302e33312e3135322e302f32312d3234203d3e2033343931.roa (raw, json)
Hash identifier: BB2TXwUHQxkk3C3Pf/OpK/kFQJf/9MdYx0ENqKBSt0o=
Subject key identifier: 5B:2E:63:FB:04:DA:E7:4B:3D:3B:29:5D:2C:E9:64:DC:29:CB:87:A8
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 43E0F2F20E2C300DEB2F6B935C5659FD96BF45E5
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:07:10 +0000
ROA not before: Tue 26 May 2026 08:02:10 +0000
ROA not after: Tue 25 May 2027 08:07:10 +0000
asID: 3491
IP address blocks: 120.31.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e0:f2:f2:0e:2c:30:0d:eb:2f:6b:93:5c:56:59:fd:96:bf:45:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 08:02:10 2026 GMT
Not After : May 25 08:07:10 2027 GMT
Subject: CN=5B2E63FB04DAE74B3D3B295D2CE964DC29CB87A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:a1:90:a5:00:f6:aa:5d:c7:b9:34:ed:50:
77:11:a6:35:ba:3d:ba:af:20:31:8e:90:21:ed:53:
fe:79:2d:fe:e8:09:6a:e5:ab:af:7b:fd:7e:48:ba:
3c:0f:b8:01:30:c6:48:d4:de:3e:c3:31:1a:5c:47:
76:ee:14:04:10:79:2e:c0:28:aa:02:53:2c:6d:e8:
44:05:d6:27:87:77:c1:bf:a9:d8:cc:40:9f:f8:eb:
20:a2:7d:c8:ef:bf:1e:f4:e5:b4:e3:7c:f9:b0:2e:
bc:91:29:c8:3c:09:71:5b:6f:a7:3b:ee:bd:19:63:
bd:33:51:56:ba:a0:5b:3e:fd:17:77:3d:dd:98:55:
2e:2c:07:87:d3:15:eb:bc:c9:2f:6b:11:8a:51:47:
4f:35:b7:33:61:e6:40:11:46:19:46:0f:27:e0:b1:
42:dd:ae:86:5f:78:58:0f:05:c8:b0:33:bb:c1:fb:
02:73:b7:7c:0b:a6:21:e5:90:fe:aa:71:8c:17:5f:
06:a0:44:6d:72:e1:ca:17:bd:cf:54:29:b8:8b:c7:
f3:1e:c4:17:ed:8f:81:4f:ae:1b:4a:1e:00:83:cc:
51:a9:d4:7a:5a:87:d0:ee:5d:9e:10:61:8f:69:15:
01:d0:f4:2e:a7:3f:16:cd:ce:69:69:04:8f:3a:d4:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:63:FB:04:DA:E7:4B:3D:3B:29:5D:2C:E9:64:DC:29:CB:87:A8
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.152.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:e2:40:c4:53:5b:be:2a:59:24:35:a8:05:c1:26:8b:eb:90:
bd:03:4f:68:35:c6:11:7d:64:23:00:2e:a5:ec:9e:4f:c2:40:
92:4b:53:af:e3:c1:65:24:e3:9f:ed:2c:a8:02:aa:39:23:58:
80:a9:78:c6:15:23:f2:06:7a:c4:c6:f0:d3:23:f2:d4:16:3b:
00:ef:5d:e0:07:c5:b5:07:c0:50:8e:ec:b4:e4:27:2a:2f:52:
2f:2d:54:78:b2:87:ad:63:86:6a:7b:15:f8:99:7e:10:33:59:
e7:cd:13:36:79:f5:dc:20:1a:5f:93:c9:48:70:df:f7:7a:8a:
0b:7b:e3:a4:37:67:1f:33:bc:6a:0b:85:86:fd:86:fd:87:fb:
e4:9b:47:ef:5c:3a:01:f3:db:4a:64:ac:7c:06:cc:0b:d6:ae:
33:e6:95:87:c4:75:51:de:de:34:75:a6:46:ec:a7:59:49:90:
b9:54:1c:1d:76:46:01:d1:78:48:0d:43:82:49:5c:f4:34:c8:
8c:fd:3e:76:a1:13:e5:0b:1a:2a:b2:b3:81:36:df:d1:5e:53:
57:e7:1e:1c:5d:e8:f1:ac:5f:a2:a5:71:0d:ac:5a:9d:68:95:
00:8c:29:fa:a1:86:95:21:33:83:6c:48:60:62:59:76:04:45:
7c:77:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:42 2026 by rpki-client