
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3132382e302f31392d3139203d3e2030.roa
File: 3131392e38302e3132382e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier: Ct0o7TSSCq4PzJ93SEgUx5TYDYHAXXbcTgI0iDVnxPI=
Subject key identifier: 22:2A:42:25:F4:13:22:8E:B9:E1:46:D3:10:0A:BA:02:64:74:60:7B
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 67BD89B78A26F356ADF7C915F53AA8E5D0B76FDE
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3132382e302f31392d3139203d3e2030.roa
Signing time: Wed 20 May 2026 04:19:18 +0000
ROA not before: Wed 20 May 2026 04:14:18 +0000
ROA not after: Wed 19 May 2027 04:19:18 +0000
asID: 0
IP address blocks: 119.80.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:bd:89:b7:8a:26:f3:56:ad:f7:c9:15:f5:3a:a8:e5:d0:b7:6f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 20 04:14:18 2026 GMT
Not After : May 19 04:19:18 2027 GMT
Subject: CN=222A4225F413228EB9E146D3100ABA026474607B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:60:22:02:a7:d8:0b:2b:0e:94:6a:8a:78:
a8:bc:47:e5:52:2d:ae:e7:63:9a:1e:42:c4:a3:bb:
83:81:ce:08:62:d1:87:e3:14:d1:8a:57:12:2a:45:
58:05:c9:06:28:5a:77:bb:7f:9d:33:63:ea:f6:8d:
a3:d0:25:64:34:17:f4:a8:25:fb:ea:a8:08:14:4d:
21:6b:22:e5:f3:31:5b:35:bd:8f:cb:12:93:8c:84:
63:e7:93:1c:d5:95:cc:cd:be:30:2d:20:0e:60:14:
32:b4:3b:8d:57:2d:43:29:86:44:36:35:6b:09:a9:
ca:28:ae:73:3c:28:9c:d6:13:72:a3:44:1e:9c:aa:
2d:55:22:8e:b1:77:cb:7a:e7:9e:af:73:cc:46:59:
aa:fa:60:30:ed:4e:3e:cd:2a:35:27:81:26:8a:5e:
44:c2:d7:ae:02:f7:a5:4a:d0:e3:4f:37:17:03:e9:
62:39:99:43:cc:ef:bd:34:dc:3f:60:27:cf:aa:e0:
39:68:f5:1e:1c:67:79:1a:79:48:c5:41:1a:61:30:
c6:06:52:45:4d:71:a2:97:9f:4b:ee:b8:19:01:40:
fd:6e:cc:b7:07:d2:fb:02:ec:1c:bc:12:ec:fe:fe:
05:d2:e4:5e:c7:53:e9:5f:c1:6e:2a:8a:15:f9:6c:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:42:25:F4:13:22:8E:B9:E1:46:D3:10:0A:BA:02:64:74:60:7B
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3132382e302f31392d3139203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.128.0/19
Signature Algorithm: sha256WithRSAEncryption
14:89:0e:8d:8b:8c:b7:b0:77:34:63:f1:32:01:f7:0c:b2:46:
46:ad:f3:bc:6e:f5:f7:3d:81:d0:8d:90:b8:52:72:20:09:40:
4b:46:6c:90:04:a1:38:f4:b4:29:48:59:53:1e:31:63:76:f9:
c9:9e:87:8e:74:98:20:64:2d:02:75:eb:17:01:62:bf:79:b3:
48:0f:a0:6a:68:a5:95:96:c9:91:5c:94:93:c2:81:fb:29:d5:
e0:db:bd:b1:28:a9:cb:69:10:dd:ae:cb:18:8d:8b:cb:67:70:
f2:c8:2e:b2:ac:61:b1:1c:86:e7:9d:60:84:51:16:ec:10:ce:
09:3f:8d:cd:0c:01:ed:24:78:a5:e4:cd:0d:1f:c1:d3:75:80:
c9:a7:e6:5a:ea:84:cb:e8:72:30:43:72:90:cd:07:d7:55:5d:
95:2c:93:ba:84:b9:01:67:79:64:5b:e7:39:94:8e:ac:61:ad:
2f:24:39:0b:0c:5e:34:bf:2d:a6:08:85:3c:a6:6e:ae:b0:8f:
99:e5:71:0e:bd:67:25:c7:cd:fa:16:2b:f0:64:2b:92:94:eb:
1d:06:07:61:a2:61:37:ab:22:3e:7e:fe:8b:b0:9b:28:2f:aa:
fd:2c:22:09:f5:bb:1b:ac:7c:1f:55:5b:4b:08:bd:0d:d6:65:
87:3d:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:04:19 2026 by rpki-client