
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e2030.roa
File: 3132302e33312e39362e302f31392d3234203d3e2030.roa (raw, json)
Hash identifier: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=
Subject key identifier: F1:4C:2B:4F:79:2C:C2:25:2D:04:0C:67:AB:54:5A:CB:71:EF:2F:2A
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 5B1FDF556FCC5C1BF23F9512B3BCDD7394F54004
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e2030.roa
Signing time: Wed 17 Jun 2026 02:41:41 +0000
ROA not before: Wed 17 Jun 2026 02:36:41 +0000
ROA not after: Wed 16 Jun 2027 02:41:41 +0000
asID: 0
IP address blocks: 120.31.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1f:df:55:6f:cc:5c:1b:f2:3f:95:12:b3:bc:dd:73:94:f5:40:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 17 02:36:41 2026 GMT
Not After : Jun 16 02:41:41 2027 GMT
Subject: CN=F14C2B4F792CC2252D040C67AB545ACB71EF2F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:1b:56:2f:a0:74:4b:57:71:65:15:a1:2a:
70:60:e5:d4:09:5d:01:52:1b:33:9a:9d:ce:80:68:
6c:91:3f:74:ed:82:32:95:e6:e9:92:dd:76:40:5e:
7a:3e:2e:b4:4a:9e:04:f0:9a:d5:65:38:4d:e0:50:
e2:3f:59:4b:64:c0:10:4b:62:ad:ba:20:1b:02:71:
8c:d7:a7:a5:27:27:2a:94:8d:ea:a7:38:ec:14:af:
a5:e0:98:b0:ff:7f:ad:17:77:d0:ba:bb:9e:db:0d:
ce:4c:7d:2f:f4:07:0d:b0:f3:cc:ea:79:c4:d1:b2:
4e:d0:12:e6:27:48:72:c3:ee:fe:6b:43:53:5a:0c:
6e:cf:98:b3:47:c1:38:77:af:04:3e:bf:22:23:ca:
b4:f1:51:32:9f:11:c2:ba:03:86:26:ef:90:be:86:
fb:54:65:1b:24:62:26:bc:a9:a2:d0:69:17:2d:02:
15:9b:00:3f:89:32:d0:5a:10:ce:1a:96:58:06:58:
4d:94:60:63:a3:db:37:c1:60:21:0d:ff:48:40:fb:
96:b4:a8:78:1c:de:0d:ab:7b:b0:36:78:62:25:c5:
a0:75:44:4e:52:d8:93:0a:8c:eb:65:c5:6d:9d:be:
e4:88:53:4e:c6:f9:aa:c5:87:c2:ce:83:25:1a:95:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4C:2B:4F:79:2C:C2:25:2D:04:0C:67:AB:54:5A:CB:71:EF:2F:2A
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.96.0/19
Signature Algorithm: sha256WithRSAEncryption
c5:92:ab:68:f5:08:11:d2:3d:1e:23:98:37:ca:6b:6c:d1:96:
33:06:07:05:84:61:de:b8:d3:10:88:3c:ea:cd:68:5d:0b:82:
7f:64:e1:1b:d9:6b:de:67:71:f0:58:02:bb:2b:46:07:a5:61:
b4:b9:90:63:e3:37:23:a6:cb:36:6e:24:d2:dd:ce:63:30:10:
08:c0:41:d0:d8:ef:8a:c9:c5:00:4f:be:f5:6f:60:d2:b9:1a:
aa:3a:a8:8d:58:68:34:a5:10:ed:0d:64:4f:ee:c7:42:47:c2:
27:6b:1a:b8:f6:88:c0:89:45:ec:97:17:e9:62:4c:40:20:e3:
e5:59:e8:ed:a2:6a:ec:98:cd:bd:44:ec:1d:91:e9:90:7c:e4:
bb:df:68:c2:a1:94:23:41:4d:f5:5b:22:dc:a4:18:21:f3:cd:
1a:c8:73:21:29:66:fb:a4:c4:c8:12:ea:3b:d7:6c:d2:6a:cc:
14:5a:cf:35:80:bb:52:59:04:4a:3e:e2:e0:6b:54:d1:6d:3a:
64:99:61:67:97:69:64:af:50:a2:2b:52:9d:3f:1a:3b:39:71:
90:72:d5:f0:d0:0a:df:c1:3f:79:20:1d:de:38:88:3b:36:a4:
bc:d8:0d:b7:e3:e0:51:60:61:0f:f8:a1:e7:06:51:09:d0:56:
b0:29:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:42 2026 by rpki-client