
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e33322e302f31392d3139203d3e203233373234.roa
File: 3131392e36312e33322e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: IeOir/13vFrTa9hbeyjvtXntQyqmWY0jkXl8kwqfY3w=
Subject key identifier: 38:F2:B3:22:44:97:1E:CB:8B:CB:3B:61:99:D3:24:F2:86:43:8A:55
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 7DEACB3F3D6C71E39FA2E39C8E2DDDB1D3867030
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e33322e302f31392d3139203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 05:59:56 +0000
ROA not before: Mon 13 Apr 2026 05:54:56 +0000
ROA not after: Mon 12 Apr 2027 05:59:56 +0000
asID: 23724
IP address blocks: 119.61.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ea:cb:3f:3d:6c:71:e3:9f:a2:e3:9c:8e:2d:dd:b1:d3:86:70:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 05:54:56 2026 GMT
Not After : Apr 12 05:59:56 2027 GMT
Subject: CN=38F2B32244971ECB8BCB3B6199D324F286438A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:46:13:9a:3b:d2:0b:56:d9:a1:f0:45:70:
e6:ae:45:2e:46:a3:b6:12:0c:d4:26:a9:a6:c2:85:
82:47:d7:c2:19:65:4d:bf:ab:98:fa:34:9d:36:55:
98:41:16:1d:33:1b:a6:4c:2f:58:c3:50:d7:88:47:
58:3a:16:f2:5d:84:a5:2b:0b:39:e4:98:27:25:13:
9d:7f:1e:18:60:61:8b:a8:05:c1:30:e5:16:7f:39:
96:46:a6:73:47:3b:f9:70:34:a8:23:3b:00:bd:cf:
a6:65:0f:22:29:a1:f6:b2:15:2f:84:d0:af:20:c4:
cb:9f:3e:33:3b:f8:7e:44:11:74:6e:2e:3a:0e:a9:
a5:0e:d8:1b:94:b2:94:a1:f1:00:fc:cb:64:a3:f9:
8a:ab:e9:fb:c2:93:0e:45:17:73:96:e8:07:41:dc:
83:50:d6:5d:06:5b:1e:77:a7:b4:81:f9:ec:d8:3e:
9e:07:be:d7:45:c2:e9:de:28:a8:80:18:2f:f7:2f:
01:5a:af:1c:95:1d:7e:e7:d5:df:28:eb:8d:a3:c6:
ef:d6:b2:8c:bc:a2:40:ec:45:5c:f1:e1:c4:61:69:
62:1f:8b:59:96:ac:5a:1b:d0:b5:1d:35:cb:52:ef:
4d:f2:3c:be:8f:7f:34:a0:79:9a:0b:5f:7d:d0:0b:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F2:B3:22:44:97:1E:CB:8B:CB:3B:61:99:D3:24:F2:86:43:8A:55
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3131392e36312e33322e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.61.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:68:6e:b8:fb:96:f2:df:aa:20:e6:2d:59:f1:ee:a6:23:4b:
c1:93:b9:c8:05:b8:ac:97:8d:57:f8:2c:a9:0e:ac:0c:bd:5d:
18:f2:2b:90:ed:b4:84:0d:d0:ae:63:69:76:83:2d:f7:61:6f:
53:a7:2c:e3:f2:86:ae:17:35:bf:0e:62:78:84:22:11:e5:9d:
04:6f:a3:a9:ae:e3:9b:97:31:9e:4d:fe:13:95:1c:fd:c5:38:
f1:e6:da:32:38:f4:57:33:46:e1:9c:7e:ee:78:42:78:77:7b:
89:02:08:23:80:59:41:89:4f:1d:13:c2:06:a8:f9:9b:f8:d8:
83:b9:43:61:3d:84:c8:cb:d6:d0:0f:2f:73:2e:70:22:0a:87:
ad:1f:c1:9e:68:e7:69:26:c7:e0:b1:98:18:e4:f0:1f:f3:d4:
52:77:77:c9:aa:e1:ed:fa:01:35:5f:57:9c:49:8a:0e:af:f4:
8e:6a:ae:a2:88:af:0c:cc:3e:c3:3a:4f:21:f4:62:c5:7d:45:
c9:62:93:f6:5b:40:60:ad:8d:78:85:4a:73:15:9b:da:d4:8d:
28:2d:1d:f6:d1:3c:2a:e9:7d:c3:ea:87:1f:30:70:7b:44:a0:
fd:d2:9d:6b:a7:83:d2:84:0f:98:6c:3b:1e:2e:99:02:43:eb:
f0:3a:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:10 2026 by rpki-client