
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e3132302e302f32322d3232203d3e20313431373731.roa
File: 3138322e31382e3132302e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier: 5yNLXOFaWADHNXXtKJCVhdEyzeiaYgHXMize5X88wLk=
Subject key identifier: 73:40:B8:26:31:9E:65:03:3A:0F:6A:86:85:A1:46:CC:9C:BB:21:3C
Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial: 01E53452E32C1E8B765D87546FAA3B540011D165
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e3132302e302f32322d3232203d3e20313431373731.roa
Signing time: Wed 27 May 2026 05:34:32 +0000
ROA not before: Wed 27 May 2026 05:29:32 +0000
ROA not after: Wed 26 May 2027 05:34:32 +0000
asID: 141771
IP address blocks: 182.18.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e5:34:52:e3:2c:1e:8b:76:5d:87:54:6f:aa:3b:54:00:11:d1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Validity
Not Before: May 27 05:29:32 2026 GMT
Not After : May 26 05:34:32 2027 GMT
Subject: CN=7340B826319E65033A0F6A8685A146CC9CBB213C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:40:c1:1d:2e:1f:f7:41:5e:45:9f:bc:5f:
dd:75:b3:3b:87:8c:57:52:45:62:ef:bf:20:e3:2d:
85:d1:6f:25:59:64:6c:19:e1:3c:12:0d:d6:66:31:
a8:5f:56:97:c9:e8:08:d8:0b:ea:3f:4f:73:09:83:
0f:26:75:36:85:15:02:58:e3:65:84:e3:58:49:c7:
be:07:4d:b9:c8:0b:ec:4a:f8:19:b4:63:5f:30:08:
89:ff:85:46:fe:7e:0f:73:30:a6:97:ce:0d:84:ea:
71:b0:37:39:c1:79:bd:0a:85:4f:cc:a2:cb:3f:6f:
44:69:ef:ae:37:4f:76:2c:b0:34:a6:5e:b5:e9:bb:
cc:b5:d4:80:d7:76:6a:32:ae:d7:14:c8:31:3e:e0:
6a:22:ec:85:0a:7e:0c:c2:bc:e5:f1:da:06:db:72:
a7:e2:fd:6e:7e:41:bd:d0:64:74:43:79:c1:c5:cf:
d0:aa:5c:64:da:6d:4e:df:12:e0:5d:af:c3:86:b4:
d8:7a:a8:76:73:64:3d:94:e5:7d:52:ca:ec:07:33:
c5:f8:dc:54:66:99:46:1a:a6:cd:e0:b1:c1:96:62:
fb:be:16:08:ce:40:87:d7:61:3e:bc:3f:c7:06:eb:
6b:0a:71:d6:3d:35:bb:c8:7b:25:85:e2:b8:bc:be:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:B8:26:31:9E:65:03:3A:0F:6A:86:85:A1:46:CC:9C:BB:21:3C
X509v3 Authority Key Identifier:
keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e3132302e302f32322d3232203d3e20313431373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.18.120.0/22
Signature Algorithm: sha256WithRSAEncryption
83:b7:51:c6:50:85:ce:73:70:50:d7:5d:f2:ad:17:93:3d:86:
e1:6a:36:4a:f8:69:d0:96:92:fb:a4:d4:5b:f0:48:11:f3:ae:
e9:d8:63:8b:4f:6f:8b:0f:cf:86:8d:03:9c:3c:38:02:32:d3:
05:26:ec:6e:c8:33:b8:ec:56:c4:60:c1:77:e9:7e:0a:66:b4:
a4:8d:a4:73:cf:74:4a:9a:dd:38:6d:0b:ae:a2:36:db:97:cc:
b1:d6:36:0d:f8:fe:0e:72:8f:07:72:85:24:69:03:66:d3:5a:
e1:c8:db:f6:cb:4f:a4:0d:97:f3:1a:fa:a6:00:fb:a8:66:c2:
b1:08:60:34:31:c2:57:86:df:28:f6:62:1a:94:c5:ff:c1:b5:
a4:0f:0f:0b:f3:27:b1:68:13:6f:cb:ce:a7:4b:17:a9:1f:19:
81:a3:be:e2:56:b0:ac:ea:b4:04:f2:51:c6:60:35:2c:79:f8:
3b:fb:54:9e:6d:e8:f5:11:69:e0:75:77:db:43:2d:da:19:34:
5a:fc:76:5c:ec:2f:03:a7:21:c3:3a:e2:f7:b1:8d:7a:b7:e8:
4a:7c:3f:6e:70:2e:28:e2:d6:ae:6c:0a:e4:58:81:4b:a1:90:
32:5f:29:c5:81:35:ad:4d:90:30:66:f1:28:08:9f:29:7d:d2:
bb:d6:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:19 2026 by rpki-client