
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136302e302f32342d3234203d3e2034383038.roa
File: 3131392e38302e3136302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: qSXxhC20oRpA+UGtk0r2ggGDZENJxwJyROsMvVIHgOU=
Subject key identifier: 98:38:9C:25:53:12:2C:DB:5F:FC:3A:1C:4A:BF:49:99:7B:9D:E4:36
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 7B78C6FE50A78D44A8999243D727219790BB3622
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136302e302f32342d3234203d3e2034383038.roa
Signing time: Mon 25 May 2026 01:02:19 +0000
ROA not before: Mon 25 May 2026 00:57:19 +0000
ROA not after: Mon 24 May 2027 01:02:19 +0000
asID: 4808
IP address blocks: 119.80.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:78:c6:fe:50:a7:8d:44:a8:99:92:43:d7:27:21:97:90:bb:36:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 25 00:57:19 2026 GMT
Not After : May 24 01:02:19 2027 GMT
Subject: CN=98389C2553122CDB5FFC3A1C4ABF49997B9DE436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:59:71:36:93:5e:e2:53:ff:53:1d:0b:d2:
d1:e0:ac:ac:0e:d9:68:f3:70:63:55:b1:d7:4c:b7:
34:45:34:49:6f:2d:16:9f:18:2f:8b:0b:17:74:c8:
75:d6:7b:95:ba:6a:22:0e:ed:40:29:d8:59:49:b7:
12:3f:ed:74:07:91:75:3c:2c:d9:9e:68:b1:ca:ad:
c7:09:36:fd:aa:fa:f2:64:7b:b4:ee:ca:9f:a8:a6:
98:15:57:8c:09:9b:85:47:9b:82:83:08:12:41:be:
55:c4:97:ba:06:ab:53:ff:5f:2a:06:d8:01:e1:03:
a0:94:42:c8:e5:cc:05:49:9f:7d:7a:22:a6:50:cf:
e2:93:66:ad:18:96:88:80:a6:51:5b:61:db:70:17:
04:20:09:65:e4:f5:e5:8a:14:74:f8:ca:b3:6c:78:
6d:85:04:cd:eb:e5:67:aa:27:a6:15:07:8e:bf:a6:
06:28:8c:5d:52:32:77:d7:bc:fd:f2:c2:a1:19:d1:
02:77:1c:c0:3d:78:54:d8:1d:3e:31:8a:3c:65:f4:
52:b0:2f:99:35:a7:77:0a:48:6c:99:26:9d:8a:2a:
5f:dd:0f:77:35:79:a5:cf:b8:7c:7e:c2:40:41:a1:
29:42:5f:1f:2d:f0:6d:67:ea:ef:3e:3c:5d:dd:51:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:9C:25:53:12:2C:DB:5F:FC:3A:1C:4A:BF:49:99:7B:9D:E4:36
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136302e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a3:f1:6d:99:6f:49:39:e8:3d:e5:e1:82:a8:cf:9b:77:6f:
75:5b:b7:a5:09:73:64:c2:90:c5:d5:48:bb:37:89:d4:80:22:
ef:86:20:db:32:c7:b1:d2:0b:61:2f:9c:dd:28:6b:6a:e9:ea:
d9:52:07:7e:6f:3c:a1:29:6f:89:1a:fb:ed:99:a8:e4:bd:3c:
e1:5f:4d:8e:c6:f6:d5:02:9a:e2:82:46:52:26:9a:6b:79:3b:
f6:21:17:67:83:50:bc:5a:3a:60:5d:64:b5:54:4a:15:aa:5f:
99:c1:c5:83:2c:5d:d8:0f:92:ae:3a:24:78:fb:92:cf:37:ee:
7b:c7:ee:b8:cf:20:f7:9c:9a:49:1e:91:bd:b3:ca:d1:3a:41:
13:9e:8f:af:49:fd:56:1e:06:0a:c1:2a:d1:68:1b:25:e6:e1:
89:3c:69:4f:32:4a:27:6f:e4:25:1e:93:5d:9f:78:bf:cb:e1:
d1:8f:63:6c:04:6c:33:68:70:9f:05:e5:31:43:0b:60:1d:a2:
62:c0:15:3b:52:f4:f7:8b:fe:5c:be:e9:67:54:08:aa:b5:b5:
89:c2:2c:e1:a5:8e:ac:d1:92:9a:3b:a5:9f:ae:47:fc:c2:c6:
bb:5a:3d:de:2d:91:46:7b:e4:14:80:f2:f1:ad:e6:54:d4:f2:
c7:05:21:be
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUe3jG/lCnjUSomZJD1ychl5C7NiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC
NTFBN0M0OTAeFw0yNjA1MjUwMDU3MTlaFw0yNzA1MjQwMTAyMTlaMDMxMTAvBgNV
BAMTKDk4Mzg5QzI1NTMxMjJDREI1RkZDM0ExQzRBQkY0OTk5N0I5REU0MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqVlxNpNe4lP/Ux0L0tHgrKwO
2WjzcGNVsddMtzRFNElvLRafGC+LCxd0yHXWe5W6aiIO7UAp2FlJtxI/7XQHkXU8
LNmeaLHKrccJNv2q+vJke7Tuyp+oppgVV4wJm4VHm4KDCBJBvlXEl7oGq1P/XyoG
2AHhA6CUQsjlzAVJn316IqZQz+KTZq0YloiAplFbYdtwFwQgCWXk9eWKFHT4yrNs
eG2FBM3r5WeqJ6YVB46/pgYojF1SMnfXvP3ywqEZ0QJ3HMA9eFTYHT4xijxl9FKw
L5k1p3cKSGyZJp2KKl/dD3c1eaXPuHx+wkBBoSlCXx8t8G1n6u8+PF3dUewRAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUmDicJVMSLNtf/DocSr9JmXud5DYwHwYDVR0j
BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG
QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw
MmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHdQoDANBgkqhkiG9w0BAQsFAAOCAQEAPaPxbZlvSTnoPeXhgqjPm3dvdVu3
pQlzZMKQxdVIuzeJ1IAi74Yg2zLHsdILYS+c3Shraunq2VIHfm88oSlviRr77Zmo
5L084V9Njsb21QKa4oJGUiaaa3k79iEXZ4NQvFo6YF1ktVRKFapfmcHFgyxd2A+S
rjokePuSzzfue8fuuM8g95yaSR6RvbPK0TpBE56Pr0n9Vh4GCsEq0WgbJebhiTxp
TzJKJ2/kJR6TXZ94v8vh0Y9jbARsM2hwnwXlMUMLYB2iYsAVO1L094v+XL7pZ1QI
qrW1icIs4aWOrNGSmjuln65H/MLGu1o93i2RRnvkFIDy8a3mVNTyxwUhvg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client