
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e31322e302f32342d3234203d3e2034383131.roa
File: 3131392e33372e31322e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: 8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=
Subject key identifier: 4D:CC:CA:DE:B2:EE:86:83:BB:96:81:7F:E0:63:B8:7C:19:2E:0A:CA
Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E
Certificate serial: 578533E51E0D07B35E378DF499D49EB90C2B518F
Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e31322e302f32342d3234203d3e2034383131.roa
Signing time: Fri 05 Jun 2026 08:06:05 +0000
ROA not before: Fri 05 Jun 2026 08:01:05 +0000
ROA not after: Fri 04 Jun 2027 08:06:05 +0000
asID: 4811
IP address blocks: 119.37.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 13:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:85:33:e5:1e:0d:07:b3:5e:37:8d:f4:99:d4:9e:b9:0c:2b:51:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E
Validity
Not Before: Jun 5 08:01:05 2026 GMT
Not After : Jun 4 08:06:05 2027 GMT
Subject: CN=4DCCCADEB2EE8683BB96817FE063B87C192E0ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:a9:5c:0b:c3:73:68:bb:a0:0a:d3:3c:55:
ee:b1:61:b6:b6:25:d4:5c:72:ea:5f:50:f2:9f:55:
b1:85:1b:45:ae:2e:d3:3e:80:e4:b2:21:e4:0c:18:
97:b4:60:73:e1:f8:0f:7a:27:e1:08:ce:11:50:c8:
57:e7:74:8e:b9:82:b0:63:73:17:b0:ca:20:07:f5:
d6:57:cc:94:b1:a5:58:71:6a:92:6d:03:ea:3d:81:
45:f3:12:29:f1:7e:fe:cc:72:28:ea:ff:38:54:a1:
8a:6e:b5:3d:f2:e8:df:d1:3a:67:aa:87:ee:b1:a7:
d6:76:e9:d3:7c:ce:c9:a3:a6:2b:61:03:78:13:ea:
53:fb:43:be:57:de:80:e1:80:70:6d:d3:d4:24:a7:
f5:a2:bf:d9:a4:8e:47:5f:0b:0a:a4:61:70:28:ed:
e9:b1:ba:83:7e:fe:6e:fb:1e:36:36:b1:74:bb:31:
77:06:93:b5:e8:90:53:47:8b:9d:ba:6b:78:27:46:
43:d4:38:56:b1:e0:68:a9:66:40:dc:65:36:cf:1f:
04:3e:d3:6c:93:76:81:0e:0b:83:93:dc:14:4c:9d:
03:31:ad:d2:e2:24:39:c5:fa:03:ac:5e:e4:39:4e:
48:a7:85:d2:d1:73:7e:f8:be:16:65:12:67:95:08:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:CA:DE:B2:EE:86:83:BB:96:81:7F:E0:63:B8:7C:19:2E:0A:CA
X509v3 Authority Key Identifier:
keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e31322e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.37.12.0/24
Signature Algorithm: sha256WithRSAEncryption
09:85:8d:08:11:bd:53:63:c0:30:11:76:f8:7e:bb:56:de:36:
f4:c6:4b:b2:72:af:98:4d:14:0c:09:a8:5b:88:03:ab:ff:a5:
6c:8f:37:f2:59:84:0d:bf:c3:e7:a1:97:36:2c:1d:75:91:43:
92:8a:b0:e5:25:39:43:49:cb:16:fe:86:02:2d:79:ef:4f:46:
9d:6a:2f:d2:a3:9a:35:65:c5:93:12:22:98:d5:44:37:be:24:
39:07:ac:69:0b:93:40:f7:c6:9d:e0:76:e0:18:06:3a:39:48:
ca:36:56:a8:c8:05:11:05:fe:85:8b:81:6c:2b:a6:80:bc:6e:
7d:40:c1:a7:ea:ee:97:99:dc:22:a6:5e:d3:a6:37:33:f2:46:
87:78:0c:97:a2:06:5b:ac:06:14:fd:bf:54:71:f1:9f:d4:d2:
f8:bd:21:54:23:c2:b6:c5:e2:0e:9d:16:f6:d6:ac:6a:75:0b:
d1:93:90:8a:8d:7d:6f:aa:5d:ef:0d:37:fc:3e:d7:c1:77:57:
ee:d6:4b:38:c7:0e:fc:2e:d8:2f:18:c6:f1:8e:8f:c0:8b:48:
47:8f:fd:54:f9:95:a2:29:f8:98:16:64:8f:d3:87:39:a7:28:
dc:36:dc:25:27:c0:21:02:01:82:a7:47:fd:5c:82:b6:9f:4a:
82:66:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:19 2026 by rpki-client