
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e2030.roa
File: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (raw, json)
Hash identifier: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=
Subject key identifier: CC:23:66:9B:0B:EC:2E:13:E0:8F:CB:7B:A5:DC:5E:67:FD:33:B2:3F
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 492D9FDD88343FAA4966FD4CBE49E71FAC400B0C
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e2030.roa
Signing time: Wed 17 Jun 2026 02:41:41 +0000
ROA not before: Wed 17 Jun 2026 02:36:41 +0000
ROA not after: Wed 16 Jun 2027 02:41:41 +0000
asID: 0
IP address blocks: 120.31.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2d:9f:dd:88:34:3f:aa:49:66:fd:4c:be:49:e7:1f:ac:40:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 17 02:36:41 2026 GMT
Not After : Jun 16 02:41:41 2027 GMT
Subject: CN=CC23669B0BEC2E13E08FCB7BA5DC5E67FD33B23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:a5:3f:6e:82:4a:f4:04:af:ac:82:89:26:
23:70:a8:1e:66:6d:61:9c:3c:fc:4a:ce:3c:f3:7d:
69:0e:b4:2e:df:32:9b:a3:f7:52:e6:f2:9e:c9:b4:
e0:78:97:58:81:ee:3a:de:ca:36:f4:58:0b:6b:7f:
89:3a:32:eb:cd:ae:66:31:07:49:fb:4b:dc:18:16:
24:e1:33:31:56:06:b3:b8:df:69:c5:f8:80:dc:06:
63:4d:ec:68:cf:c9:98:57:5d:64:e2:e4:1f:a8:39:
f6:e0:a5:20:81:d8:07:8a:c1:35:f8:94:56:c7:9a:
d3:00:db:a0:eb:48:91:96:0e:15:64:46:eb:be:ee:
80:5d:f8:72:36:fc:a5:81:97:cd:fa:a2:42:d6:9e:
b0:53:ea:97:d6:d7:3f:2c:01:76:36:a1:79:37:fb:
6f:33:ca:94:55:cf:63:1f:38:2b:e9:ec:5a:3b:75:
c3:e6:03:22:72:11:a1:95:6d:27:17:27:a3:70:37:
2d:fe:4d:d7:f9:0e:ef:24:a3:ad:2e:6f:8f:33:1e:
57:4c:6f:ef:af:76:c1:55:fa:41:35:2e:7b:98:72:
ae:b2:8d:ce:87:c3:c8:7a:f4:c2:3e:24:2d:62:02:
0c:ad:d5:f3:4c:9f:da:0d:ac:ee:95:3a:3f:c3:9c:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:66:9B:0B:EC:2E:13:E0:8F:CB:7B:A5:DC:5E:67:FD:33:B2:3F
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:6d:95:83:6a:d9:ad:f4:15:e2:b6:8f:4c:21:c6:2a:8b:d4:
17:69:80:39:2d:c9:94:e8:61:f4:17:6a:7b:08:eb:18:95:20:
56:59:cd:32:7a:61:18:43:92:7e:ab:b2:3a:e8:5a:e3:e6:8e:
df:06:c5:6b:cf:af:13:38:be:db:06:e1:bf:fe:06:10:6e:e8:
23:89:04:de:16:f9:8b:ca:91:a6:88:c7:76:b1:0b:91:6d:2b:
c7:19:a2:31:c8:56:2e:7d:32:b4:26:65:57:c2:b3:05:76:a4:
41:2d:e9:8d:38:13:8b:e0:95:25:9f:11:15:71:fe:08:d2:6f:
b7:d3:9b:24:b1:58:40:04:bc:4c:e1:66:50:24:fd:f8:29:39:
30:62:6b:e0:e4:78:8b:75:2f:b0:ca:04:3b:d6:bc:9a:be:c1:
b1:a5:4e:b1:71:33:30:6c:1c:39:0c:e8:d2:57:ca:45:ce:a9:
4f:fa:9f:da:9b:b7:3e:fc:5d:13:d6:40:82:4b:8f:32:d1:42:
f3:1b:1f:a5:52:60:06:b7:ea:67:70:8a:d2:61:69:9e:be:c5:
18:c8:66:a4:ad:2c:c9:aa:a0:f5:f8:3e:c2:5e:5f:23:11:68:
5c:3d:48:86:e2:cc:a8:67:f1:e3:24:e6:2d:fd:e2:f5:a7:33:
92:fc:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:40 2026 by rpki-client