
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e38302e302f32302d3234203d3e20323037353530.roa
File: 3132302e33312e38302e302f32302d3234203d3e20323037353530.roa (raw, json)
Hash identifier: ZdF5InBvnKWOYOBH7UKKuxm7FK3yhWC4S6h94boKkKM=
Subject key identifier: 92:26:ED:15:90:D7:3F:F8:BF:B6:01:18:F0:9A:F6:1F:32:35:97:F6
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 2C74E8C89AE463851754B1A139F976C1E290884F
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e38302e302f32302d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 08:18:51 +0000
ROA not before: Tue 02 Jun 2026 08:13:51 +0000
ROA not after: Tue 01 Jun 2027 08:18:51 +0000
asID: 207550
IP address blocks: 120.31.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:74:e8:c8:9a:e4:63:85:17:54:b1:a1:39:f9:76:c1:e2:90:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 2 08:13:51 2026 GMT
Not After : Jun 1 08:18:51 2027 GMT
Subject: CN=9226ED1590D73FF8BFB60118F09AF61F323597F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:fb:ac:ca:88:47:bb:d2:d5:41:1d:4a:e1:
47:b4:8c:0f:e7:8b:de:40:d4:bb:93:44:9d:cb:1c:
04:96:ec:ef:1b:f1:18:38:77:21:5d:39:14:b0:3a:
ea:29:24:96:b7:b7:8a:6a:8e:65:5e:e1:33:4e:40:
ea:66:f7:82:5c:be:cc:70:fe:44:07:4a:3f:01:05:
2c:0f:4a:04:dd:bc:e9:35:17:08:ae:4d:c4:68:d2:
68:ae:9d:99:74:15:2e:d2:03:a2:7f:f8:02:06:66:
7b:8e:65:51:48:87:53:bc:bc:98:0f:ad:43:d5:08:
c3:3c:a7:23:6f:f6:40:3a:9b:0e:29:1c:ae:bb:8a:
c9:93:4e:5c:ad:d7:59:b5:b0:7f:14:73:56:58:fd:
86:76:16:be:f2:47:0a:16:cd:34:ed:fb:64:11:fa:
64:dd:80:c6:ea:ed:75:76:44:5a:72:96:b2:67:d5:
60:a9:34:76:60:13:3b:50:8c:6e:f4:bf:ed:49:a4:
5c:af:88:55:2f:a6:1e:d4:aa:97:15:f7:d2:64:c0:
80:5b:b7:40:ac:6a:14:86:0f:57:16:80:f8:d6:49:
ea:59:84:c6:78:77:47:50:06:a9:f9:3d:ac:0d:17:
ba:6e:66:6c:e7:c5:c0:25:a5:08:f5:7c:26:bc:f1:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:ED:15:90:D7:3F:F8:BF:B6:01:18:F0:9A:F6:1F:32:35:97:F6
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e38302e302f32302d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.80.0/20
Signature Algorithm: sha256WithRSAEncryption
be:45:c4:c8:e1:0c:77:de:93:3f:02:c9:77:3f:7d:b7:a2:4d:
7b:66:20:55:bf:67:82:8b:a4:f2:dc:92:08:af:e3:77:ef:ca:
79:07:3a:71:f0:66:c7:1d:9e:e5:fa:21:38:b4:f1:7b:45:48:
37:88:14:03:3a:1e:56:4e:3a:66:3c:8f:e7:1e:e0:a6:31:e4:
0e:ac:b7:61:d6:4b:26:eb:17:f3:fd:f5:e7:e4:59:fc:96:45:
a3:4e:f4:b0:2e:eb:5e:48:e8:3f:c3:11:69:75:9e:7e:8b:6e:
c9:23:17:d9:de:cb:a1:25:24:a1:9f:69:80:4f:38:5a:89:b6:
e5:ea:26:90:40:54:7a:a5:a2:85:b7:65:ee:3a:6b:29:8e:38:
60:ba:4c:21:ee:e7:a2:59:99:8f:54:ef:c7:ff:71:c4:34:71:
9b:e8:0b:ef:2c:1a:25:1e:49:bb:ce:ed:ab:61:1e:72:f0:b1:
0e:16:ac:18:41:47:7f:b8:7c:0b:0f:1a:54:fa:63:d5:cf:10:
18:f8:ba:90:75:7c:66:02:93:ff:95:8e:8f:61:b5:5d:5f:64:
ab:f7:fb:06:2d:a1:ed:4b:ef:53:36:af:25:c4:4e:f0:23:f9:
d2:0c:76:73:0b:4d:98:6d:1d:68:2f:40:b3:64:b7:be:04:47:
8e:79:cb:de
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:22 2026 by rpki-client