
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e302e302f31392d3139203d3e203233373234.roa
File: 3131392e36312e302e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: K3LP5dwQaXcx4MuNYyKZrH4G4kDDCKExunXmrKN3ytE=
Subject key identifier: A6:B7:2B:35:BE:7B:3B:0E:73:E1:23:5E:69:48:E4:72:25:C5:CF:48
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 7204C1E7BC75E6F4ABEB939F3DA3823BC8556F9F
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e302e302f31392d3139203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 06:48:09 +0000
ROA not before: Mon 13 Apr 2026 06:43:09 +0000
ROA not after: Mon 12 Apr 2027 06:48:09 +0000
asID: 23724
IP address blocks: 119.61.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:04:c1:e7:bc:75:e6:f4:ab:eb:93:9f:3d:a3:82:3b:c8:55:6f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 06:43:09 2026 GMT
Not After : Apr 12 06:48:09 2027 GMT
Subject: CN=A6B72B35BE7B3B0E73E1235E6948E47225C5CF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:aa:dc:1c:93:5e:70:66:cc:dd:e0:4c:8f:
5f:da:37:b1:42:f6:4d:3c:ea:e1:5a:47:8a:a0:b6:
2b:53:9c:43:a5:7c:d6:66:f2:fd:53:1f:9b:b2:30:
1d:5b:8f:d8:61:98:88:04:0d:ae:af:29:18:18:ce:
be:a6:c0:50:7a:53:68:3e:5c:87:5c:3d:9d:bf:9c:
f7:01:fe:1a:0e:82:d3:56:e6:b8:df:94:fc:9d:6f:
d8:9f:85:53:25:92:42:86:71:b4:fa:1d:04:77:ba:
93:38:ff:7d:c1:b3:af:ec:a9:ea:95:21:66:e8:4d:
47:33:91:3a:ae:6c:95:42:a0:d1:92:18:be:4e:d5:
bb:ea:48:9c:f8:b8:9e:77:a7:64:0a:70:19:0e:90:
3c:f1:7b:03:7c:1f:1e:97:ad:e3:3c:bb:07:2a:51:
2f:02:d9:7d:40:23:9d:fb:c7:da:ac:76:82:bc:1d:
19:85:9c:2a:4c:3c:9f:ba:62:dd:bb:ef:87:b4:93:
2c:ff:a2:24:9d:7f:b1:57:a1:aa:6c:b2:3d:33:bd:
c2:53:e8:85:38:43:4b:cd:e5:36:e4:cb:63:74:d4:
1e:ad:f6:fd:72:16:3d:e4:ae:23:32:b8:b2:48:47:
81:4e:4f:5c:04:8a:1f:68:d2:3d:6f:55:69:c1:a8:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:2B:35:BE:7B:3B:0E:73:E1:23:5E:69:48:E4:72:25:C5:CF:48
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e302e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.61.0.0/19
Signature Algorithm: sha256WithRSAEncryption
66:96:52:a0:e1:13:bf:35:59:3b:0d:23:57:dd:02:95:73:59:
a1:81:8e:a5:9b:75:45:2e:dc:4c:c7:8d:07:66:b5:35:d7:bc:
21:0b:cc:02:9e:af:eb:e0:99:4b:0f:91:24:7f:50:03:d7:27:
59:a0:dd:09:0a:fe:a9:5a:cd:43:ed:8c:2f:82:33:c4:da:18:
9f:46:e3:28:d2:d5:b0:74:79:ff:b9:f2:08:d8:7c:b9:52:c8:
f7:d0:99:77:2b:09:30:aa:ef:94:c3:df:e8:65:9e:6a:36:1e:
3a:d3:bf:29:6f:f2:f6:6e:2c:78:54:5c:6f:dd:57:49:f3:f0:
7e:27:f8:ca:de:04:6d:f3:64:b1:be:97:c7:ee:98:b3:de:a0:
41:5f:44:2f:c5:6c:11:06:b9:c9:c8:c9:a7:66:75:91:bf:1b:
97:22:27:ab:ba:7b:c1:fd:f0:00:47:ac:f1:73:0c:8a:3c:62:
87:68:65:a4:3e:14:f6:30:a6:bb:97:6f:c8:ea:c1:36:60:c3:
09:03:24:70:7e:47:62:de:c7:a6:ee:d5:e5:43:4a:11:e3:dd:
06:61:c9:dd:72:d9:e8:ae:dd:60:82:b7:b5:1f:f5:d6:6f:c7:
57:b8:b9:e1:e8:15:ee:6a:ac:6f:38:b9:da:b2:96:64:6b:4e:
95:85:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:23 2026 by rpki-client