
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa
File: 3131392e35392e3230382e302f32322d3234203d3e203139323131.roa (raw, json)
Hash identifier: W/n7XKLdnIOv9Uo8AUx50mOCSux9ge6DUqwt/XvxYGU=
Subject key identifier: F2:73:6B:68:7B:A1:00:4B:7B:C4:C8:25:3D:5D:F6:8D:4A:B6:E0:B0
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 421612419891521BA31CDD20C39A6307E5209995
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa
Signing time: Thu 14 May 2026 06:33:36 +0000
ROA not before: Thu 14 May 2026 06:28:36 +0000
ROA not after: Thu 13 May 2027 06:33:36 +0000
asID: 19211
IP address blocks: 119.59.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 31 May 2026 08:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:16:12:41:98:91:52:1b:a3:1c:dd:20:c3:9a:63:07:e5:20:99:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 14 06:28:36 2026 GMT
Not After : May 13 06:33:36 2027 GMT
Subject: CN=F2736B687BA1004B7BC4C8253D5DF68D4AB6E0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:b8:79:81:df:8b:a8:c4:51:dd:de:95:4d:
70:fe:ce:1f:78:78:33:4a:98:eb:4d:f7:16:43:b3:
54:66:be:fc:11:ed:1d:ac:7d:d6:f9:09:b9:d2:61:
41:d8:ce:c2:18:4f:8e:c1:ec:65:46:8c:af:f3:f4:
09:17:5e:bc:0f:07:f6:61:cf:52:27:fe:af:f7:44:
66:e4:fc:07:19:cf:d4:43:a7:49:fb:5e:51:dc:aa:
5a:29:1b:1d:e2:04:85:84:d8:06:b0:78:c7:87:bc:
ae:5a:1e:3d:04:f4:04:e1:f3:cf:99:e1:44:36:1d:
fc:f7:73:72:58:ed:bd:34:b2:2c:07:d0:03:5f:2e:
3e:ba:c0:f7:9f:ef:fd:81:12:e0:2d:47:55:e5:9a:
37:1c:a6:c6:9c:30:e8:54:fb:be:77:63:47:39:af:
1d:f3:70:66:fd:21:10:28:04:6f:3c:80:0c:7b:f6:
38:2a:bd:c2:19:e2:59:6f:e2:d1:54:2b:bd:10:88:
91:eb:2a:a0:bb:a5:06:1f:73:c2:1c:4e:21:c4:79:
70:b5:cc:24:cd:80:26:24:12:75:bb:1f:34:fd:67:
26:7f:56:f5:73:69:dd:19:39:0e:39:df:be:ff:3b:
97:80:c7:6e:66:3f:2a:df:f7:32:95:e0:7b:34:98:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:6B:68:7B:A1:00:4B:7B:C4:C8:25:3D:5D:F6:8D:4A:B6:E0:B0
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.208.0/22
Signature Algorithm: sha256WithRSAEncryption
36:72:6b:3c:d3:c2:3a:2f:e7:2b:72:a7:c1:85:f8:60:48:30:
ff:86:d3:03:28:47:0d:87:8b:9a:b6:58:ba:b8:21:a2:da:ce:
dd:80:40:16:51:21:8d:5b:1e:f4:4c:74:49:1b:2b:c7:7d:cc:
af:44:c7:8c:9d:94:e8:7c:0d:8f:1e:68:c6:bb:28:82:11:05:
98:a4:fc:26:e7:e0:b7:3a:73:9f:54:d0:57:75:04:cb:64:36:
6b:a9:96:6b:06:97:25:1a:b6:f5:02:e4:da:56:c2:01:24:ce:
40:48:8b:f6:12:83:48:5a:5e:1a:0b:7a:98:03:78:4e:df:d6:
b0:46:53:77:c5:34:c5:02:3d:d0:7e:11:e0:31:30:62:f4:2b:
2c:f4:19:be:04:09:19:b3:2b:e1:df:aa:57:51:d3:bc:98:76:
3b:d0:47:36:35:f2:8a:a5:9d:96:5d:d0:7a:f2:89:66:d1:15:
0e:49:0f:b4:34:fb:89:a4:d5:c5:f5:89:a0:26:6a:58:8e:b8:
c6:34:e2:1a:f0:e0:ca:b7:17:d6:e6:56:33:26:d3:f2:4f:a9:
91:5e:b1:4c:d4:43:49:b3:06:76:e4:70:d9:5c:b7:7e:58:0e:
22:db:94:44:7c:eb:88:2f:23:13:50:78:11:a6:f4:0c:08:e6:
9a:af:d9:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 13:47:09 2026 by rpki-client