
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33372e3230302e302f32312d3231203d3e2030.roa
File: 3131392e33372e3230302e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier: zdBC+EHpW4XQvPuhARTt0tW6lKLHfCnmfuZt8cM9pMY=
Subject key identifier: BD:07:5D:30:9C:A3:47:C1:96:F5:33:37:46:F9:21:6C:9C:29:52:7C
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 5B39B85EE0747FD19DB0C4AA0DEB20B384EA578B
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33372e3230302e302f32312d3231203d3e2030.roa
Signing time: Thu 28 May 2026 02:09:10 +0000
ROA not before: Thu 28 May 2026 02:04:10 +0000
ROA not after: Thu 27 May 2027 02:09:10 +0000
asID: 0
IP address blocks: 119.37.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:39:b8:5e:e0:74:7f:d1:9d:b0:c4:aa:0d:eb:20:b3:84:ea:57:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 02:04:10 2026 GMT
Not After : May 27 02:09:10 2027 GMT
Subject: CN=BD075D309CA347C196F5333746F9216C9C29527C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:d5:d5:30:9c:34:1a:7d:9c:e1:7f:c9:96:
72:2f:73:31:c8:f2:fe:ac:59:0e:8f:8f:69:0c:c5:
8b:12:22:e6:63:49:98:3c:cd:8a:03:9c:f9:d9:d2:
45:73:d1:6a:5a:06:2b:8b:ad:b2:76:95:52:a6:28:
d4:84:08:5f:c0:16:99:ae:cb:e0:3d:4f:e4:61:ca:
ad:78:79:26:d2:01:c6:f4:24:82:b0:09:45:4e:a8:
31:21:5a:13:a8:2a:cb:72:41:ef:50:c3:7e:c7:82:
1c:43:2a:4f:37:74:0c:0b:1a:8f:6f:53:d0:d2:2e:
94:3b:cd:fd:57:13:09:18:d0:66:65:23:53:b8:b9:
d8:65:dd:05:59:db:bc:66:05:b9:70:45:6e:e6:55:
df:16:88:04:65:31:1f:ea:c5:13:62:e1:e1:d0:34:
b2:e6:60:b8:07:34:92:e6:43:6c:a9:cb:d0:e5:07:
81:3b:2a:83:f5:e8:e2:87:8d:f5:dd:0f:b0:16:67:
dd:96:a6:a5:11:18:f2:2e:46:08:0b:b5:d1:6d:99:
b2:d0:11:60:88:ba:15:a9:2f:9e:0b:4c:fc:b2:64:
aa:27:09:83:4f:6d:9f:17:20:db:91:ee:fc:56:db:
cf:19:3e:5b:84:fc:68:e6:d1:52:e7:34:f9:b7:c8:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:5D:30:9C:A3:47:C1:96:F5:33:37:46:F9:21:6C:9C:29:52:7C
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33372e3230302e302f32312d3231203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.37.200.0/21
Signature Algorithm: sha256WithRSAEncryption
87:e5:3b:4a:29:b7:3d:da:7e:d2:23:db:e1:3a:e9:8c:c4:e2:
5e:a2:e3:09:d1:34:b3:7a:58:16:68:e2:c7:16:a8:b2:94:d1:
e6:23:fa:e3:86:78:b8:cd:6a:f1:56:ee:cc:24:bf:80:0c:52:
1b:c7:da:0c:2c:4f:be:e9:ac:da:3b:a4:bc:0a:08:9c:34:04:
9c:10:49:f8:c6:44:56:6b:27:7e:84:bb:2b:8f:fc:71:eb:cd:
7c:61:8a:3f:ee:e3:85:d9:8d:a2:65:31:37:b3:9f:33:a7:4b:
f2:d2:c2:bf:a6:56:6a:af:50:2d:b3:48:74:6d:ea:e6:18:8d:
c5:9b:90:7a:75:46:ce:7f:78:63:0f:67:53:fb:19:bb:e6:f6:
85:37:0e:d2:ee:37:2f:35:4f:49:b4:3a:c1:51:0b:0e:0f:65:
0f:26:2c:85:8f:67:af:e1:41:53:68:55:02:ff:5d:e9:70:b0:
c1:23:57:d9:33:21:9a:f9:27:9e:88:65:45:36:07:e3:e9:fa:
77:cb:15:3a:69:c6:9c:4a:a8:e7:58:0f:c4:d8:6e:9e:18:c3:
41:8d:6c:ac:eb:ae:ec:82:e4:ef:30:44:13:a9:d2:1d:75:50:
b3:cd:e3:58:18:2a:41:7c:bc:0d:90:9b:97:57:c1:e1:3e:bd:
87:ea:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:54 2026 by rpki-client