
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2033343931.roa
File: 3132302e33312e3139322e302f31382d3234203d3e2033343931.roa (raw, json)
Hash identifier: K1mrK3cfB5tuhieBt2DQyf4ulKUb6E6mRSD2Tf3Nklo=
Subject key identifier: AE:D9:55:68:48:B3:0C:75:CD:77:0C:A5:DF:D6:8F:23:B1:DD:2B:FF
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 0FFC58C6182CB7E05F4B1DFA374AFB1B52F737FC
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:07:10 +0000
ROA not before: Tue 26 May 2026 08:02:10 +0000
ROA not after: Tue 25 May 2027 08:07:10 +0000
asID: 3491
IP address blocks: 120.31.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fc:58:c6:18:2c:b7:e0:5f:4b:1d:fa:37:4a:fb:1b:52:f7:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 08:02:10 2026 GMT
Not After : May 25 08:07:10 2027 GMT
Subject: CN=AED9556848B30C75CD770CA5DFD68F23B1DD2BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:0e:8f:4a:48:f1:cc:1d:a9:da:4a:f2:ec:
02:8e:bf:15:4f:95:f2:af:da:63:b9:28:16:8c:17:
46:6d:ce:7c:fd:55:fa:17:11:3b:62:a5:1a:06:17:
f5:b0:df:3b:3e:28:4b:8c:16:48:f0:1a:02:1c:95:
af:eb:19:37:8f:d6:fa:32:53:27:3d:d8:b8:91:75:
3d:6e:5e:9d:6f:de:4d:47:c2:6a:94:ce:e6:d6:b1:
bd:a1:9c:0f:fa:44:89:6f:28:db:3a:7a:2a:3d:14:
0b:44:4a:0f:d2:24:68:bc:de:e8:96:71:eb:91:55:
f0:68:6d:42:b5:30:96:1a:fa:21:ff:9d:ca:a2:4a:
f3:25:c2:96:10:f5:e8:54:82:2a:66:7e:3e:a0:55:
3e:c4:b0:48:1e:b9:3b:cb:0c:24:bc:01:b1:3d:4a:
fa:14:d5:e2:f2:96:a2:c8:e5:d9:93:8e:69:f9:6e:
6c:15:90:0a:57:e3:44:0b:41:47:a2:da:cd:a3:f9:
8b:2b:b5:01:32:35:3d:54:16:fc:fe:b9:74:ba:b4:
fe:81:ff:f6:8f:9b:69:62:6a:27:65:c3:b1:2a:a2:
14:a1:b3:87:d4:58:54:63:7a:b0:f7:5d:b0:67:9a:
86:59:8e:a9:3b:16:75:fe:17:0f:29:71:34:da:1d:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:55:68:48:B3:0C:75:CD:77:0C:A5:DF:D6:8F:23:B1:DD:2B:FF
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.192.0/18
Signature Algorithm: sha256WithRSAEncryption
bd:5a:d8:21:3a:6e:b7:5c:c4:c7:0a:04:e4:1d:e9:d3:9f:65:
b2:2e:45:7f:8f:5a:d6:d7:37:62:46:4b:d3:af:e2:cf:1c:28:
4e:31:03:fb:b7:5e:c4:b9:a6:a6:e8:3f:bc:4b:1e:21:ab:fc:
f6:31:37:fd:52:b1:98:45:ba:7a:55:3e:d0:8e:3e:44:41:cc:
f8:e3:12:d7:6e:db:61:3a:0d:69:fc:93:fa:fa:b4:68:aa:c6:
31:52:e2:9a:30:a4:d5:bb:be:58:20:f0:34:8a:7e:75:a4:36:
ab:93:e0:bc:ab:31:7f:e9:ba:ed:1b:84:99:a3:37:90:f8:a6:
c8:6c:2f:42:cb:2e:7d:3e:99:f5:c5:81:3a:e3:d6:5b:d9:4d:
00:14:38:3a:aa:32:67:a5:a9:94:76:c3:92:6d:fc:d4:4b:42:
12:6a:92:b4:29:86:d8:2c:3d:95:d0:1f:47:5f:86:b1:0e:88:
00:0b:31:74:e4:be:74:3d:4b:15:20:14:da:09:90:64:fb:9e:
b1:65:b8:d2:9c:b0:b7:5b:86:e7:fe:c7:53:88:b4:d5:87:01:
a9:2d:bb:ee:48:a0:28:35:09:0f:fd:ff:46:ef:c4:4c:a2:82:
2e:cc:4a:9e:b6:07:8a:b4:1b:90:51:b4:9f:4d:30:34:1f:00:
25:da:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:15 2026 by rpki-client