
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2039333034.roa
File: 3132302e33312e3139322e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier: I7oIM8t/faHLI5V4xZqtJF+WC8bZsPk947q433aU/hE=
Subject key identifier: B1:97:A6:C6:2B:C7:0D:77:57:6F:2F:E6:29:CF:41:20:D2:A2:18:ED
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 03026FA6DEFA447DB3F5896A81B3A07FEDB6E4D4
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2039333034.roa
Signing time: Tue 26 May 2026 08:03:29 +0000
ROA not before: Tue 26 May 2026 07:58:29 +0000
ROA not after: Tue 25 May 2027 08:03:29 +0000
asID: 9304
IP address blocks: 120.31.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:02:6f:a6:de:fa:44:7d:b3:f5:89:6a:81:b3:a0:7f:ed:b6:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 07:58:29 2026 GMT
Not After : May 25 08:03:29 2027 GMT
Subject: CN=B197A6C62BC70D77576F2FE629CF4120D2A218ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:de:53:e0:90:10:33:2b:1b:b7:17:05:70:
70:ec:9b:38:10:a6:fd:08:e7:79:dd:e6:92:0d:f2:
b8:25:e0:0d:6b:7c:b2:c2:08:b8:d2:a2:8f:17:86:
3a:60:b9:97:73:d2:c8:cd:a3:f3:94:09:09:9c:90:
85:1f:e0:b5:45:bc:6c:99:cb:17:46:28:fa:d2:c9:
4f:99:22:da:5a:44:5a:81:1e:7d:88:4a:20:39:38:
e2:32:9b:d4:0d:95:44:17:4b:e4:d3:7d:ce:97:97:
cd:24:9f:50:9d:67:f9:5f:fa:b0:3d:da:d5:96:f6:
23:5d:9a:e8:f6:a7:81:12:56:71:e1:81:32:ca:68:
45:02:ff:f6:14:fa:e5:68:51:1b:80:c1:f6:26:78:
8a:12:00:0c:b4:c6:54:b8:88:17:59:b4:b7:28:fd:
15:34:a3:38:57:35:40:0a:8b:9a:72:38:09:db:3f:
c0:9c:16:fc:0b:8e:1f:05:fd:ae:3d:d6:fa:31:2d:
43:e9:7c:06:6c:69:52:95:e6:a1:57:25:56:c7:74:
a6:21:03:10:09:91:59:d1:b2:df:aa:0d:c5:e9:ef:
9a:07:64:f1:03:00:b3:6c:66:62:fb:be:5a:15:66:
1e:25:1c:40:c3:13:44:cc:df:ed:88:99:ba:67:3c:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:97:A6:C6:2B:C7:0D:77:57:6F:2F:E6:29:CF:41:20:D2:A2:18:ED
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:75:59:3c:a1:4b:0e:fd:72:38:94:10:04:aa:71:b6:d9:ba:
ca:1e:45:7a:dc:dd:a5:ae:02:fd:d9:88:34:f3:f9:f6:8d:9a:
59:83:11:de:c3:bd:ec:64:1f:76:c3:7c:b3:a0:a4:2c:8f:b9:
12:45:6a:ea:f1:34:e5:b5:2b:c7:45:a2:3b:39:5f:90:86:a1:
1e:65:6e:87:f8:7e:43:df:3a:12:f2:b2:06:75:dd:3a:bf:3d:
6c:b2:19:c0:bd:68:ef:d4:08:cd:c3:77:f5:2a:66:a4:f5:61:
52:d7:29:12:5a:c1:b0:86:6b:a4:f5:19:6b:c3:2c:45:18:99:
30:da:0d:8c:f6:e0:17:e0:2a:bc:2c:a8:9e:02:78:2c:bd:e4:
fc:4e:42:04:d7:2d:3a:a6:fe:c2:02:b9:23:5f:5e:f3:b4:f2:
b1:77:8d:e5:77:1a:7b:c4:d3:ad:7d:0a:b5:e5:69:25:1c:c7:
e4:76:76:15:ed:50:9d:45:58:8d:fa:9b:cb:02:80:05:d8:8d:
f1:4b:f0:df:5c:bc:fd:aa:25:65:6d:f0:cc:68:e9:07:cb:18:
25:55:b0:d4:49:2a:ec:01:5f:d8:8d:52:57:4c:1b:51:c5:e8:
26:98:c6:b0:86:64:1f:ae:f1:f6:0a:7f:5d:40:43:36:4b:c7:
ab:20:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:13 2026 by rpki-client