
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa
File: 3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa (raw, json)
Hash identifier: uFOfohZk9A/UaKLNvNgYstYqj7nDfW1AbiiPFY8mFqg=
Subject key identifier: 31:51:D3:51:B6:EA:5A:F8:80:7C:3F:C3:CF:EC:53:11:9F:F8:01:1E
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 6BC14CFD34BE0F55F8159C54908F9CE8554FBA3B
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa
Signing time: Fri 15 May 2026 09:13:50 +0000
ROA not before: Fri 15 May 2026 09:08:50 +0000
ROA not after: Fri 14 May 2027 09:13:50 +0000
asID: 133119
IP address blocks: 120.52.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c1:4c:fd:34:be:0f:55:f8:15:9c:54:90:8f:9c:e8:55:4f:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:08:50 2026 GMT
Not After : May 14 09:13:50 2027 GMT
Subject: CN=3151D351B6EA5AF8807C3FC3CFEC53119FF8011E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:77:04:99:3f:97:bb:e8:37:87:e5:e4:f7:
9f:10:6d:26:e5:3e:fe:01:6b:02:95:a5:d2:30:36:
d8:d5:0b:59:e3:c8:02:12:d3:f6:44:de:ad:3d:66:
b3:c3:db:b9:84:10:89:cf:ab:db:1c:24:de:8a:74:
dc:ee:48:00:2d:ef:cf:b6:3c:05:3f:2a:cf:47:f6:
45:2a:0d:b1:14:45:6b:77:8d:20:6e:ad:a4:cb:ac:
b0:02:d9:5f:bf:ab:d2:1d:e3:1e:e6:ea:9e:c2:bc:
11:8f:f4:e6:0d:f0:f4:48:55:25:7c:8f:e8:4a:4c:
81:72:06:71:2f:2a:8c:cf:63:ce:61:37:ce:ac:38:
a8:84:f1:b0:0e:c8:23:28:f0:e9:e1:7e:f4:2c:37:
2a:22:d3:5e:b8:aa:c1:2a:ef:95:32:0f:f4:9b:fa:
3d:06:61:90:fa:1d:4a:f3:af:14:20:3f:8b:0d:a0:
3f:00:4b:c4:db:ce:fd:44:a1:28:6a:5f:3b:cd:a4:
a6:39:4e:6b:8c:d3:7f:05:51:d7:8a:9c:f4:5f:af:
dc:9f:38:57:a7:6e:ce:c4:e8:f4:a8:ab:4d:9f:13:
2d:75:d0:48:b8:f7:ea:9f:27:a7:d5:54:2a:cb:d5:
05:e4:67:65:b8:49:bb:a4:8f:78:54:28:c3:f1:85:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:D3:51:B6:EA:5A:F8:80:7C:3F:C3:CF:EC:53:11:9F:F8:01:1E
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e3132382e302f31372d3137203d3e20313333313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.52.128.0/17
Signature Algorithm: sha256WithRSAEncryption
78:19:2e:65:2a:13:97:90:ea:c9:bf:76:4b:6e:d4:7c:f6:b0:
e5:67:71:f6:14:69:73:eb:65:2d:89:1d:2e:4e:bf:75:0f:6a:
74:e6:86:13:3d:69:68:28:d0:e2:82:9e:d9:af:51:16:37:52:
f7:28:5a:37:3a:8a:0a:e2:56:50:90:c0:21:f6:b4:af:08:de:
63:d4:1b:9c:53:8b:ef:95:c2:0e:e0:2b:6d:3c:31:bc:62:27:
04:ef:11:f6:e1:0f:a8:6a:58:da:9f:41:21:4a:66:ae:f7:c7:
2b:b9:41:05:dc:f6:ba:19:9d:06:b5:b7:72:d4:2f:67:8d:14:
32:c0:7b:09:7e:94:16:79:86:30:dc:ab:4a:90:e3:5c:27:73:
c3:68:90:57:df:1a:32:cc:00:35:23:63:5b:31:81:64:73:25:
c8:8a:24:4e:90:41:b1:50:a0:3a:85:18:11:ff:12:3b:57:a3:
4b:22:04:9a:f3:ea:55:73:df:15:20:d3:a7:37:2f:f3:81:35:
9f:88:e1:23:ad:d6:2a:2b:02:50:9f:73:46:9b:fd:fd:ee:4e:
f3:f8:d5:10:5d:fa:57:90:6d:b6:1f:ff:a9:c6:c3:f8:a0:03:
87:3f:8c:ca:46:89:dc:6f:06:2f:e7:52:50:27:75:df:b1:c2:
f2:92:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:49 2026 by rpki-client