
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e20323037353530.roa
File: 3132302e33312e39362e302f31392d3234203d3e20323037353530.roa (raw, json)
Hash identifier: Xmn3yTVlPTNEG1FvN2y7ZUR2nsJnIEfnGIg3DjaaJAM=
Subject key identifier: 2B:21:51:07:25:8F:E4:13:18:97:DA:9C:1F:6E:38:F4:C5:2C:3B:3A
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 02E8431612F637798D788583C0E03C12BC4192D1
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 08:18:51 +0000
ROA not before: Tue 02 Jun 2026 08:13:51 +0000
ROA not after: Tue 01 Jun 2027 08:18:51 +0000
asID: 207550
IP address blocks: 120.31.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e8:43:16:12:f6:37:79:8d:78:85:83:c0:e0:3c:12:bc:41:92:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Jun 2 08:13:51 2026 GMT
Not After : Jun 1 08:18:51 2027 GMT
Subject: CN=2B215107258FE4131897DA9C1F6E38F4C52C3B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:f1:ea:e2:24:09:83:7d:c4:6e:6f:77:4c:
20:0d:54:a9:72:81:e9:c1:ef:b3:e8:a1:f3:2a:20:
01:df:96:5c:cf:bb:0b:46:60:2e:a7:72:c2:c1:a9:
2f:49:19:d7:77:5f:c2:3c:19:c7:6b:8f:af:f8:74:
86:fb:12:73:7d:3a:c5:23:78:8e:ed:d7:60:ff:a1:
3b:1e:f3:b0:bf:2a:24:4d:83:24:dc:9c:82:f2:66:
53:63:c5:9a:c1:ac:93:26:ce:ae:bd:c7:30:6b:df:
d6:f6:57:d7:e2:36:b0:d8:98:ee:d8:6a:e2:a9:e5:
f5:e6:bc:aa:c4:88:6a:a9:06:1c:21:3e:2d:22:17:
e3:19:9d:f7:65:9f:45:2b:39:92:4b:c5:28:5e:ec:
f4:98:8c:13:e0:44:44:41:67:fc:54:40:f4:02:aa:
56:8f:06:dc:15:49:ff:90:92:6d:8b:43:a2:c9:85:
df:cd:eb:54:78:71:22:c0:69:03:86:8a:b4:87:ad:
fb:01:eb:c8:16:46:0a:da:2c:8f:fb:68:d5:25:f3:
67:7c:12:8e:fb:34:ba:03:ee:eb:a9:99:f3:b9:0a:
1f:6e:82:6b:a6:67:51:3e:c8:c4:59:d6:22:cb:02:
11:73:71:39:5b:7e:09:50:5b:05:3a:40:fe:1e:4b:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:51:07:25:8F:E4:13:18:97:DA:9C:1F:6E:38:F4:C5:2C:3B:3A
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.31.96.0/19
Signature Algorithm: sha256WithRSAEncryption
53:af:e9:b0:1b:c0:54:54:7f:61:f8:46:e8:12:d4:91:d8:88:
31:f7:de:be:0a:ab:56:36:cc:d2:0e:eb:39:69:e5:75:81:2e:
4c:c2:a5:e4:2e:c7:37:82:9d:89:a5:9b:bf:00:9b:dd:1d:83:
68:af:39:9d:26:b6:e0:ab:54:96:a7:b4:05:5c:30:4b:c0:ec:
4b:37:73:cb:9f:fb:69:a3:99:d5:c6:09:00:0c:1d:db:00:2b:
82:21:07:e6:3a:95:fd:49:7f:17:6c:2e:c8:88:6f:df:2f:a2:
8e:72:5f:26:c6:fd:12:c1:fa:bb:dd:50:26:72:2e:88:75:16:
52:9d:24:17:84:f5:fc:0b:07:9b:73:16:c8:40:cc:a4:35:b9:
67:5b:2a:4d:cf:7e:da:a1:b4:6a:12:58:db:1b:39:d5:72:e4:
4a:f9:8b:e8:82:aa:80:77:be:24:f8:81:92:1f:7a:85:0b:f3:
1f:73:aa:35:5b:a3:6d:81:5d:4a:e0:94:44:7a:7c:cf:c8:ea:
ac:50:53:9d:45:75:74:71:a5:3e:4b:07:9f:dc:2d:e0:12:c5:
1d:cd:cf:a2:3c:e4:49:ea:98:57:0d:30:b3:ca:58:28:13:4f:
a4:5c:e5:d6:e3:c4:a7:d1:5f:a4:6e:0a:32:14:a2:9f:6e:7b:
5b:64:57:a9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUAuhDFhL2N3mNeIWDwOA8ErxBktEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjA2MDIwODEzNTFaFw0yNzA2MDEwODE4NTFaMDMxMTAvBgNV
BAMTKDJCMjE1MTA3MjU4RkU0MTMxODk3REE5QzFGNkUzOEY0QzUyQzNCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxfHq4iQJg33Ebm93TCANVKly
genB77PoofMqIAHfllzPuwtGYC6ncsLBqS9JGdd3X8I8Gcdrj6/4dIb7EnN9OsUj
eI7t12D/oTse87C/KiRNgyTcnILyZlNjxZrBrJMmzq69xzBr39b2V9fiNrDYmO7Y
auKp5fXmvKrEiGqpBhwhPi0iF+MZnfdln0UrOZJLxShe7PSYjBPgRERBZ/xUQPQC
qlaPBtwVSf+Qkm2LQ6LJhd/N61R4cSLAaQOGirSHrfsB68gWRgraLI/7aNUl82d8
Eo77NLoD7uupmfO5Ch9ugmumZ1E+yMRZ1iLLAhFzcTlbfglQWwU6QP4eS2yDAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUKyFRByWP5BMYl9qcH2449MUsOzowHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzU4NjE3OS8wLzMxMzIzMDJlMzMz
MTJlMzkzNjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBXgfYDANBgkqhkiG9w0BAQsFAAOCAQEAU6/psBvAVFR/YfhG6BLUkdiI
MffevgqrVjbM0g7rOWnldYEuTMKl5C7HN4KdiaWbvwCb3R2DaK85nSa24KtUlqe0
BVwwS8DsSzdzy5/7aaOZ1cYJAAwd2wArgiEH5jqV/Ul/F2wuyIhv3y+ijnJfJsb9
EsH6u91QJnIuiHUWUp0kF4T1/AsHm3MWyEDMpDW5Z1sqTc9+2qG0ahJY2xs51XLk
SvmL6IKqgHe+JPiBkh96hQvzH3OqNVujbYFdSuCURHp8z8jqrFBTnUV1dHGlPksH
n9wt4BLFHc3PojzkSeqYVw0ws8pYKBNPpFzl1uPEp9FfpG4KMhSin257W2RXqQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:19 2026 by rpki-client