
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e36342e302f32332d3234203d3e2039333034.roa
File: 3132302e33312e36342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: geKUuytqmou89qAXIb/R5VN6tVL4dbW/h071U4C1J/U=
Subject key identifier: 5F:64:81:DD:34:CB:FA:52:C9:DA:B5:CF:8C:19:5A:04:40:58:F1:E2
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 7BE415848383DFD1F766B0A3B606E9CC93E315DF
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e36342e302f32332d3234203d3e2039333034.roa
Signing time: Tue 26 May 2026 07:58:12 +0000
ROA not before: Tue 26 May 2026 07:53:12 +0000
ROA not after: Tue 25 May 2027 07:58:12 +0000
asID: 9304
IP address blocks: 120.31.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e4:15:84:83:83:df:d1:f7:66:b0:a3:b6:06:e9:cc:93:e3:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: May 26 07:53:12 2026 GMT
Not After : May 25 07:58:12 2027 GMT
Subject: CN=5F6481DD34CBFA52C9DAB5CF8C195A044058F1E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c3:0b:a7:43:30:61:dd:0d:0c:13:2e:3c:ab:
c6:7a:0b:37:68:06:74:5e:63:5c:8b:5d:35:08:1e:
0b:ae:ff:11:2d:ba:5a:e0:5a:30:d6:11:3f:85:3a:
bf:b1:4f:2d:c2:28:82:34:45:e9:ce:d4:7e:5e:d3:
3f:ab:3c:3d:e4:db:a9:d0:c3:4f:c5:9e:a3:fd:3a:
12:30:20:00:b4:53:e2:f2:c4:ae:be:b5:d5:dd:b7:
d5:0f:74:49:92:c6:5e:08:f7:63:9b:a8:86:41:57:
b2:ef:eb:b0:92:31:54:fa:9f:44:85:4e:38:fb:cf:
ae:c7:a5:ea:0c:06:dd:80:86:94:4e:af:1a:22:a0:
0a:28:ba:14:05:ab:a4:10:80:a1:4d:3c:a9:ba:59:
c2:22:87:f6:fb:f8:d7:48:69:b3:f9:bd:96:e5:d2:
5c:14:45:a8:7e:a1:11:fc:f7:48:b9:88:8f:61:70:
1b:bf:98:b2:aa:58:a2:02:2b:49:0c:9a:d9:92:72:
81:53:18:2d:e0:0d:76:01:c9:17:03:fa:56:b6:9d:
5e:3f:6b:b4:4a:a6:46:85:19:98:b7:0a:fc:a1:38:
c7:21:3d:dd:39:0b:a7:00:1c:77:45:45:6d:1e:ef:
f5:ff:75:dc:65:ab:0a:9a:b7:e3:5d:23:2b:c6:a4:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:64:81:DD:34:CB:FA:52:C9:DA:B5:CF:8C:19:5A:04:40:58:F1:E2
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e36342e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.64.0/23
Signature Algorithm: sha256WithRSAEncryption
00:e7:e8:af:83:62:1c:df:99:bf:2a:dc:32:f8:b2:a4:fd:df:
51:23:14:b6:e7:be:9f:54:da:49:2f:d9:1b:53:7f:e0:4d:44:
da:ba:84:ba:32:90:be:11:8c:15:d3:2b:c8:78:33:ec:e9:8f:
d5:5e:a7:31:ce:df:17:7b:28:16:ed:cb:74:73:90:8e:f7:f5:
86:75:3b:74:04:6a:e2:8a:54:f7:6e:49:b7:f3:29:19:10:59:
b8:e0:88:14:e5:9d:1d:0a:8c:4f:1c:7e:e0:3b:4f:14:49:70:
37:c9:ae:a5:5b:43:4e:84:e2:1d:9d:02:2f:b0:75:79:e8:bf:
5e:bc:0d:37:44:33:0c:cd:71:58:dd:48:4f:1a:27:48:ca:93:
8c:88:3a:99:c6:be:b4:bd:04:90:72:05:f5:1e:7d:d7:e6:c8:
17:ca:e8:c5:93:5c:e5:54:de:13:a9:0b:16:f5:25:e3:a7:3c:
a4:15:e3:18:26:fd:42:75:a9:66:05:02:87:71:92:e7:74:5e:
11:2f:b8:a1:a7:a3:61:5c:af:38:0c:09:00:8d:e5:69:5f:d8:
a2:62:d2:9b:3f:07:91:7b:f8:4e:5a:f8:a6:8c:4f:cb:49:1e:
c9:cc:e0:70:9b:fc:33:5a:3f:9c:f6:72:49:76:b9:17:11:70:
0c:56:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:10 2026 by rpki-client