
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa
File: 3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa (raw, json)
Hash identifier: G0rZMHqe+PAJHwE84BgTMh18+HAvAvGd4CT0wpSupDo=
Subject key identifier: 8F:22:EA:88:12:98:D6:E2:D7:29:77:40:CB:02:81:8C:CD:9B:2A:96
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 37FBA52BBEB3A31CFCAF1179BE9EC63F18B19A32
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 08:18:51 +0000
ROA not before: Tue 02 Jun 2026 08:13:51 +0000
ROA not after: Tue 01 Jun 2027 08:18:51 +0000
asID: 207550
IP address blocks: 120.31.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:fb:a5:2b:be:b3:a3:1c:fc:af:11:79:be:9e:c6:3f:18:b1:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 2 08:13:51 2026 GMT
Not After : Jun 1 08:18:51 2027 GMT
Subject: CN=8F22EA881298D6E2D7297740CB02818CCD9B2A96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:1d:36:fe:e6:0b:98:50:a2:a4:69:9a:9c:
9f:ed:09:ff:8d:53:b6:3b:ab:a2:0f:80:58:7f:ae:
b5:45:78:58:ec:db:ec:df:29:f2:b4:89:59:2e:dd:
a9:37:39:40:c7:89:d7:c1:e0:8d:03:db:8a:1a:62:
cb:aa:04:e7:68:11:58:9b:77:03:c6:95:0d:35:33:
2d:84:ef:cf:b3:17:76:8f:2d:76:6d:99:d7:e2:90:
fb:2f:c9:8f:a7:02:78:74:8b:bd:00:81:24:ef:b2:
70:02:49:88:5e:01:2d:f1:88:38:80:dd:fc:0d:65:
b5:1a:97:ff:4e:4f:ba:e9:ca:09:4d:b6:a6:75:80:
e8:d7:22:ae:d6:9a:08:31:16:e0:fa:1f:c4:5a:0a:
2c:6b:64:db:00:32:9a:e9:39:98:71:97:c5:ac:f5:
f3:1c:50:2b:6c:4a:08:10:c6:f8:2b:22:95:bb:72:
1a:13:5e:cd:30:cb:19:36:f3:53:b0:6b:eb:1e:93:
78:93:73:b3:08:ee:b9:a6:4d:ca:dc:b4:9e:d4:da:
19:2f:d8:2b:2b:b8:6f:5d:19:55:b8:13:e0:75:f2:
39:ff:87:fb:96:3e:a6:bf:67:f7:74:5a:7b:d1:97:
a6:da:fe:92:3c:2f:c1:aa:cb:20:1b:8c:31:a3:6a:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:22:EA:88:12:98:D6:E2:D7:29:77:40:CB:02:81:8C:CD:9B:2A:96
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.192.0/18
Signature Algorithm: sha256WithRSAEncryption
93:00:97:80:3a:d4:05:b6:1c:73:99:5b:af:1f:8a:e4:e7:a2:
44:7e:3c:90:d6:a4:4b:60:24:b5:16:f7:03:cb:46:c6:25:eb:
89:69:6b:15:6f:ee:cd:e7:93:c6:94:7f:c9:fb:40:57:77:f7:
cd:27:75:3e:df:dd:9d:52:76:d1:29:07:5f:43:3f:0a:22:16:
53:b3:0c:f2:a4:f8:9c:d5:77:84:d8:c5:3a:2a:3b:f7:6d:47:
ad:da:46:db:83:43:c6:43:31:b1:47:84:d6:6c:d2:10:09:49:
7c:48:d7:23:d8:4c:b1:01:ff:1e:e7:cd:1f:22:cf:64:e4:63:
7b:62:a1:1b:d5:4c:af:a6:e1:13:6f:53:4e:4f:02:ab:ed:8b:
ca:da:5a:b6:e8:8d:8e:77:eb:bc:19:d9:dc:48:5f:94:80:56:
21:cb:18:0c:a4:cd:e3:47:d3:c7:f6:47:3d:08:fe:62:df:b7:
f6:1f:ec:02:ae:20:2a:dd:23:eb:6e:bd:88:7a:9e:ee:37:af:
d2:67:f0:69:6a:e7:7f:25:ce:e7:cf:24:a9:0b:c6:b8:cb:cc:
66:51:cf:8b:52:44:27:8b:4f:06:91:b4:0b:04:8d:c0:4f:d1:
3a:55:c2:f0:5e:92:20:91:6b:bc:16:61:82:9a:43:c4:ea:10:
ee:bb:fd:d8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUN/ulK76zoxz8rxF5vp7GPxixmjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjA2MDIwODEzNTFaFw0yNzA2MDEwODE4NTFaMDMxMTAvBgNV
BAMTKDhGMjJFQTg4MTI5OEQ2RTJENzI5Nzc0MENCMDI4MThDQ0Q5QjJBOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa3R02/uYLmFCipGmanJ/tCf+N
U7Y7q6IPgFh/rrVFeFjs2+zfKfK0iVku3ak3OUDHidfB4I0D24oaYsuqBOdoEVib
dwPGlQ01My2E78+zF3aPLXZtmdfikPsvyY+nAnh0i70AgSTvsnACSYheAS3xiDiA
3fwNZbUal/9OT7rpyglNtqZ1gOjXIq7WmggxFuD6H8RaCixrZNsAMprpOZhxl8Ws
9fMcUCtsSggQxvgrIpW7choTXs0wyxk281Owa+sek3iTc7MI7rmmTcrctJ7U2hkv
2CsruG9dGVW4E+B18jn/h/uWPqa/Z/d0WnvRl6ba/pI8L8GqyyAbjDGjaqnfAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUjyLqiBKY1uLXKXdAywKBjM2bKpYwHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8zMTMyMzAyZTMz
MzEyZTMxMzkzMjJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBngfwDANBgkqhkiG9w0BAQsFAAOCAQEAkwCXgDrUBbYcc5lbrx+K
5OeiRH48kNakS2AktRb3A8tGxiXriWlrFW/uzeeTxpR/yftAV3f3zSd1Pt/dnVJ2
0SkHX0M/CiIWU7MM8qT4nNV3hNjFOio7921HrdpG24NDxkMxsUeE1mzSEAlJfEjX
I9hMsQH/HufNHyLPZORje2KhG9VMr6bhE29TTk8Cq+2LytpatuiNjnfrvBnZ3Ehf
lIBWIcsYDKTN40fTx/ZHPQj+Yt+39h/sAq4gKt0j6269iHqe7jev0mfwaWrnfyXO
588kqQvGuMvMZlHPi1JEJ4tPBpG0CwSNwE/ROlXC8F6SIJFrvBZhgppDxOoQ7rv9
2A==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:16 2026 by rpki-client