
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33382e33322e302f31392d3139203d3e2030.roa
File: 3131392e33382e33322e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier: pll4icFO4h01ZMkqbPFVtyMz7qEmYEJXCQzrFMaJrDc=
Subject key identifier: 58:F2:16:22:B9:C7:8F:09:EC:A2:45:39:E9:97:ED:0F:76:61:0B:8E
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 1DD02465903A50A5DEC2CFCD833A2E872BCA9024
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33382e33322e302f31392d3139203d3e2030.roa
Signing time: Thu 28 May 2026 01:36:50 +0000
ROA not before: Thu 28 May 2026 01:31:50 +0000
ROA not after: Thu 27 May 2027 01:36:50 +0000
asID: 0
IP address blocks: 119.38.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d0:24:65:90:3a:50:a5:de:c2:cf:cd:83:3a:2e:87:2b:ca:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 01:31:50 2026 GMT
Not After : May 27 01:36:50 2027 GMT
Subject: CN=58F21622B9C78F09ECA24539E997ED0F76610B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:4a:d0:b1:f5:f8:46:58:44:81:2b:e4:f4:
b5:89:7e:3e:df:30:bf:9b:57:c8:f3:be:dc:12:60:
50:ef:22:9a:53:a1:33:c7:42:67:91:9a:e2:d9:b2:
d6:e6:6f:39:0d:6b:1f:ec:a1:2d:83:aa:56:6d:45:
f6:9c:a5:af:f5:ee:7e:a0:cc:10:e8:6d:33:a5:67:
f3:f6:6c:16:51:63:65:c7:5e:b6:b5:1a:7c:4b:08:
bb:df:42:0f:0b:0c:15:44:1c:c4:3d:0c:8e:2a:bb:
a3:fb:91:be:4f:87:21:c4:b1:d6:5e:ee:b2:49:6a:
03:ce:bc:12:dc:0c:73:37:c0:7d:e9:7f:7e:a4:74:
c8:21:c2:14:ff:a4:5a:6e:92:60:fc:80:ba:76:88:
cf:71:49:98:c0:a5:ae:d8:55:d7:45:e7:a4:e5:ba:
51:2e:a6:64:90:af:1f:60:e5:6b:2c:54:eb:13:22:
c9:82:0b:44:92:de:16:b8:f9:e6:b9:59:c9:35:32:
59:72:84:a6:8a:9e:ba:0b:c5:95:d1:0d:0f:3b:7e:
31:82:40:5f:05:59:8f:a3:19:5b:79:eb:a2:18:6f:
86:82:84:bb:0f:fd:bc:b5:c8:62:a7:e4:ba:05:31:
da:20:be:1c:c4:c1:07:04:d3:0d:79:23:4b:4c:89:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:16:22:B9:C7:8F:09:EC:A2:45:39:E9:97:ED:0F:76:61:0B:8E
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33382e33322e302f31392d3139203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.38.32.0/19
Signature Algorithm: sha256WithRSAEncryption
93:04:65:da:a2:35:de:c4:dd:9d:6e:8b:a3:77:a9:cf:f8:a9:
fa:44:d9:b2:5a:f9:14:ec:3e:82:c2:3d:db:64:50:5d:c3:96:
81:06:41:27:bd:79:a2:21:e9:0b:e6:7f:d0:8b:2e:05:b7:c4:
2f:11:f6:6c:a7:02:07:18:c7:45:58:24:86:f0:1d:ba:b1:26:
1c:69:d6:53:21:29:82:2d:e5:89:95:e3:db:5b:6d:84:aa:ce:
ba:93:d8:cb:2e:68:8b:12:50:76:d9:78:d9:d3:b2:fc:ad:5e:
28:30:65:29:9a:23:76:4f:46:17:24:cb:10:b0:90:f1:de:ed:
6a:e5:68:09:3e:a1:45:8f:42:90:29:20:a4:25:14:d4:b3:79:
80:65:66:d2:b8:6d:2a:76:c8:37:1a:2e:ee:6d:a7:0a:3f:c0:
bb:00:b6:38:ba:73:fd:cc:9d:75:97:47:c2:a9:06:8b:0c:ed:
e5:2a:ee:a8:7c:dd:a9:60:9e:2a:30:da:9c:d0:2b:1e:6a:10:
25:56:8a:a9:d6:e2:46:c1:81:15:10:19:0c:db:bb:22:2b:ad:
37:ce:df:90:e8:03:57:91:31:83:d8:db:e3:d9:8b:11:6f:8b:
26:ca:6a:7c:b8:3b:e1:80:aa:8a:73:65:3e:6d:7a:77:dc:b6:
06:93:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:00 2026 by rpki-client