
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e20323037353530.roa
File: 3132302e33312e3136302e302f31392d3234203d3e20323037353530.roa (raw, json)
Hash identifier: dgZZuruQBPe0meWVuN7TPo2weazrXSiGsYqQOsIHKBM=
Subject key identifier: 7A:85:54:9C:04:44:24:5B:52:AC:CF:37:A1:B0:AE:31:D4:D7:06:9C
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 5AD4E91EC8C4CAB5D564B9E7089B9B5E84CF3EA7
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 08:18:50 +0000
ROA not before: Tue 02 Jun 2026 08:13:50 +0000
ROA not after: Tue 01 Jun 2027 08:18:50 +0000
asID: 207550
IP address blocks: 120.31.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d4:e9:1e:c8:c4:ca:b5:d5:64:b9:e7:08:9b:9b:5e:84:cf:3e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 2 08:13:50 2026 GMT
Not After : Jun 1 08:18:50 2027 GMT
Subject: CN=7A85549C0444245B52ACCF37A1B0AE31D4D7069C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:47:39:88:44:6a:b7:f4:b6:d2:8c:07:57:
e2:be:03:33:b2:c7:54:cb:3d:1c:62:02:c1:6b:a0:
27:33:87:ef:4d:bd:82:70:39:e0:fb:bb:72:a6:6e:
2e:fc:ee:c0:fc:4b:ea:22:08:05:c8:68:e8:a7:62:
3c:0c:8b:6e:43:0d:f1:59:64:82:db:17:2a:c9:a6:
ec:25:d0:58:13:8a:3d:e6:6a:89:dd:f9:61:e5:1d:
f5:29:60:03:56:24:5e:c5:38:a1:87:dd:7b:07:e0:
9a:66:0d:3f:ae:41:5a:c6:d1:ba:77:c1:67:72:dc:
ca:e1:96:62:72:8b:83:dd:be:d4:33:bd:4b:d3:2c:
b8:70:24:f1:f5:91:46:c3:38:b8:29:ad:9e:36:26:
99:48:1e:f6:52:39:95:bb:59:e1:a7:96:21:6b:f8:
f6:dc:42:75:de:1e:47:c0:e5:8d:d6:29:fe:e9:70:
c4:12:69:a4:64:2d:83:13:82:69:ef:b8:4f:3a:1e:
30:39:a3:97:fb:f0:be:f0:4b:6a:30:55:6c:53:6c:
a0:27:c8:20:7f:60:31:58:ce:e9:de:9d:a8:b2:4c:
73:34:dc:d2:a2:37:a6:8b:93:02:71:65:e5:13:bc:
8c:50:63:1c:43:86:c8:f5:54:c2:e5:9d:b6:3c:a5:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:85:54:9C:04:44:24:5B:52:AC:CF:37:A1:B0:AE:31:D4:D7:06:9C
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:c9:71:26:64:04:c7:ef:4a:09:37:40:bd:ce:f5:c4:1c:40:
b6:1c:cc:be:42:dd:71:40:0a:09:9c:de:72:26:87:05:c0:ad:
69:f1:bf:63:88:bc:2f:ee:57:b3:6f:30:ef:56:9f:12:cf:e3:
5f:e7:50:06:c7:71:2e:23:4c:e4:ed:ca:e2:32:0c:96:49:6c:
94:af:01:4b:b0:98:98:9b:dd:71:64:f2:d9:2a:ef:7d:84:34:
23:1f:14:a5:8b:92:2e:07:de:ab:c3:38:ea:18:8f:c0:9b:f1:
06:46:73:76:d1:04:a9:6e:49:96:c8:11:d3:f7:38:a3:9f:21:
69:43:8b:88:6f:88:b9:57:4e:b5:27:43:98:3c:0b:ed:13:c8:
4f:e4:9a:bd:20:b2:34:c2:e7:2a:83:58:79:47:4b:00:63:c3:
32:85:e4:b2:e2:fd:1e:67:51:c6:f7:cf:e0:51:14:de:3a:00:
8d:f2:96:f1:8d:b6:7f:4b:b5:71:89:d2:8a:06:17:98:d7:cb:
b4:86:04:5e:60:a8:93:8a:1a:5c:20:7a:ee:71:79:9a:79:49:
1a:15:78:c4:57:77:71:89:c7:85:f7:25:89:ec:6c:4b:0a:bf:
bf:8d:bd:99:28:5f:23:c2:1b:b2:22:88:70:c0:96:69:bd:85:
7f:f9:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:16 2026 by rpki-client