
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e302e302f31372d3137203d3e203233373234.roa
File: 3131392e36312e302e302f31372d3137203d3e203233373234.roa (raw, json)
Hash identifier: k9oYKjGIXZaSuzUmQ2AAGCKqO0tvJoefFtfoI0N/fyo=
Subject key identifier: 47:71:A3:0B:6B:82:14:E8:BA:48:74:38:9A:93:12:E3:B1:84:99:B6
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 1C182FC0DA0FB5B8949A60E4F6BEF0540E822015
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e302e302f31372d3137203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 06:48:37 +0000
ROA not before: Mon 13 Apr 2026 06:43:37 +0000
ROA not after: Mon 12 Apr 2027 06:48:37 +0000
asID: 23724
IP address blocks: 119.61.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:18:2f:c0:da:0f:b5:b8:94:9a:60:e4:f6:be:f0:54:0e:82:20:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 06:43:37 2026 GMT
Not After : Apr 12 06:48:37 2027 GMT
Subject: CN=4771A30B6B8214E8BA4874389A9312E3B18499B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:00:6a:9b:6f:cd:ee:33:cd:3e:b2:54:8f:
4b:9f:3e:c4:82:66:1c:24:54:54:e9:b1:9a:70:f2:
84:61:99:98:db:93:27:93:5c:bf:ec:85:ec:8a:e2:
f9:7c:ad:5d:bc:3f:95:08:9d:40:06:81:70:c0:8a:
c2:29:99:e5:c5:39:03:08:8e:4a:ba:71:12:d0:31:
3f:b8:d3:b7:7f:16:c5:fc:67:8f:70:e6:02:84:23:
3a:0c:d6:d5:ad:70:78:20:a9:30:d2:23:7c:98:d8:
c2:53:da:38:1d:72:b9:d9:4b:fb:8a:ab:f1:97:ea:
80:0f:42:11:a2:fa:4b:45:c8:be:22:e7:6c:9b:c3:
56:71:94:da:e1:25:21:18:36:d3:59:97:cc:39:06:
d2:4a:dc:95:70:54:6b:e3:ec:dc:87:ae:62:7a:be:
03:60:e3:14:e7:b0:58:6e:57:df:00:a3:d2:05:03:
72:dc:65:bc:6c:ff:28:92:e9:10:6c:24:3e:81:89:
16:93:88:6a:90:0d:f9:72:84:74:51:e2:6e:b4:6e:
c2:b1:03:e1:bb:33:fd:09:1d:2d:a2:ac:c4:0a:33:
f7:75:0f:83:e6:4d:8b:93:34:65:a5:94:6f:35:d7:
6a:c7:e8:96:2b:23:53:99:cd:aa:36:81:8e:28:0c:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:A3:0B:6B:82:14:E8:BA:48:74:38:9A:93:12:E3:B1:84:99:B6
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e302e302f31372d3137203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.61.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:c4:d8:5f:c9:a4:60:9a:2c:65:e4:b7:2c:85:a2:38:f1:07:
4d:5c:cd:3b:9b:ea:c6:cf:59:51:d2:b8:dd:6d:3c:3e:7d:24:
14:a6:6e:60:11:38:65:3f:e7:0a:49:97:6c:ec:b8:6e:38:0c:
0b:28:7b:b1:57:30:c8:0e:31:de:a8:d4:64:d8:f6:f0:d2:54:
e3:25:98:40:ed:57:f9:d5:63:e0:00:ee:6e:34:8c:ef:06:71:
7e:d5:be:43:e0:8c:08:9f:7d:35:1a:0b:e5:36:d7:d1:4d:6b:
f1:84:ea:c6:27:94:90:ee:9d:e1:4f:e1:b9:2c:49:cd:0a:6f:
0f:d5:e3:8e:98:c6:05:15:f9:ae:9b:c9:6a:e9:a8:16:d9:f3:
8a:d8:3f:fc:6b:f7:5c:2b:e6:94:e4:13:15:ec:91:26:8b:e3:
60:42:53:14:03:96:8f:0d:83:13:87:46:8b:c7:c6:0c:98:4c:
e0:e4:74:8b:14:c9:36:98:0f:3b:b8:7b:31:bb:85:67:e7:21:
05:22:2e:fc:66:2e:b7:3d:b7:16:5d:c6:a8:0a:38:81:93:07:
98:de:e4:f6:e2:92:c0:28:18:7c:f8:2d:86:7b:22:c4:c3:51:
51:75:86:c4:e3:0a:a8:33:e5:4e:b4:40:6c:43:c0:39:7a:a0:
0c:84:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:22 2026 by rpki-client