
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/3131392e3233332e3132382e302f31372d3137203d3e2034383337.roa
File: 3131392e3233332e3132382e302f31372d3137203d3e2034383337.roa (raw, json)
Hash identifier: Fz4qfvSST16gBg21iieaHgJ7/ugJeC1cb2masKZYjks=
Subject key identifier: 92:3D:B2:98:DD:38:A6:60:0F:3F:29:7A:5F:A8:4F:D7:53:E6:33:2E
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 44A4D3DE330A1116DB1B013469C97F6705488072
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/3131392e3233332e3132382e302f31372d3137203d3e2034383337.roa
Signing time: Wed 27 May 2026 07:03:57 +0000
ROA not before: Wed 27 May 2026 06:58:57 +0000
ROA not after: Wed 26 May 2027 07:03:57 +0000
asID: 4837
IP address blocks: 119.233.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a4:d3:de:33:0a:11:16:db:1b:01:34:69:c9:7f:67:05:48:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: May 27 06:58:57 2026 GMT
Not After : May 26 07:03:57 2027 GMT
Subject: CN=923DB298DD38A6600F3F297A5FA84FD753E6332E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:40:1a:7e:8e:95:55:c7:b3:8b:91:f8:ff:
aa:6f:d8:1f:78:12:c3:f1:db:57:38:4f:97:cc:14:
f5:25:4f:70:6b:51:0d:52:6a:9d:14:3c:b5:f0:62:
a9:11:91:c2:c2:e1:a8:13:a1:67:cf:81:5c:ca:ce:
65:1a:33:45:b2:95:09:ab:c8:f1:e2:be:be:0f:91:
5e:f7:8f:30:a9:1c:04:bc:19:bd:cd:16:55:c9:22:
b2:75:b4:bc:97:68:bf:dc:49:ae:39:4a:f6:a0:c5:
0e:c8:3d:46:ea:ad:32:49:ef:68:7d:2a:6f:78:41:
fd:4d:bf:40:5a:01:24:ef:b7:15:57:d3:b5:06:47:
7a:84:aa:0e:96:a3:17:0b:be:c6:c3:af:36:5d:2d:
0f:65:d1:73:ce:d0:5c:82:e3:fe:4c:5c:37:35:b3:
fb:37:a2:f4:26:d5:45:55:d2:19:55:9a:d3:87:9b:
24:57:67:bb:85:f2:b5:0b:a2:78:43:b4:da:ea:be:
6a:55:6f:d7:b3:8f:a9:ec:37:45:64:7a:6a:34:c3:
10:2f:5d:2d:b3:a2:3b:86:9e:3a:0a:a3:28:7e:6d:
01:b8:a3:79:0b:20:76:c5:e2:da:5f:d9:4f:96:c9:
19:16:b2:46:4d:2f:38:0c:6a:bf:8a:00:43:00:db:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:B2:98:DD:38:A6:60:0F:3F:29:7A:5F:A8:4F:D7:53:E6:33:2E
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/3131392e3233332e3132382e302f31372d3137203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.233.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ab:2a:5f:28:7d:12:de:f3:c7:90:42:9e:2d:73:e7:32:a0:1e:
77:71:c3:b7:4f:29:4a:c1:c3:b0:4f:30:91:ff:0c:08:45:f9:
38:83:02:87:ae:01:d4:ac:6f:5d:71:45:15:a2:ff:ae:41:ef:
5b:39:c2:8c:b2:20:f1:36:f5:0e:94:0a:7b:2c:8c:7d:3f:80:
ca:60:f0:8b:c8:5f:4d:7e:21:99:ee:87:29:c7:b6:fd:b7:ba:
36:dc:fc:b9:f9:4b:c0:e2:d5:25:16:a6:2a:66:15:fd:d8:03:
70:9e:af:a0:70:54:29:a2:4e:82:66:4c:05:b8:ea:0a:40:79:
d2:ce:87:43:71:9f:fe:12:92:55:a2:d0:1a:64:ad:59:9b:cf:
20:d6:af:a5:74:ba:20:5c:0b:8d:c1:d9:7a:d0:71:04:27:dc:
d6:4d:7c:d5:90:46:7b:ca:0f:51:b3:75:a9:72:56:b4:bd:e4:
b0:19:6f:40:53:a8:a6:de:ef:de:2f:13:f0:72:73:0e:78:be:
50:7b:12:f5:95:89:ff:7a:78:4d:af:36:41:8d:32:71:c7:12:
a8:9c:36:be:87:de:9b:35:b3:3d:fd:cb:04:14:4e:73:61:b9:
84:ea:de:71:d3:ab:0a:f6:e7:74:66:4b:db:18:f1:ad:0b:7b:
3e:c4:38:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:09 2026 by rpki-client