
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136312e302f32342d3234203d3e2034383038.roa
File: 3131392e38302e3136312e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: 5sGFVAkwsSFCfdJmEgFc8dvUZwQjRQL81uXxcgJGHj4=
Subject key identifier: 1A:09:02:CF:9C:E4:04:B6:88:1C:E0:48:9C:09:66:1D:7D:7F:0A:DA
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 493D06DC55F310C10049E107789C89629E962CAA
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136312e302f32342d3234203d3e2034383038.roa
Signing time: Mon 25 May 2026 01:02:19 +0000
ROA not before: Mon 25 May 2026 00:57:19 +0000
ROA not after: Mon 24 May 2027 01:02:19 +0000
asID: 4808
IP address blocks: 119.80.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:3d:06:dc:55:f3:10:c1:00:49:e1:07:78:9c:89:62:9e:96:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 25 00:57:19 2026 GMT
Not After : May 24 01:02:19 2027 GMT
Subject: CN=1A0902CF9CE404B6881CE0489C09661D7D7F0ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:11:d7:cb:3b:c6:42:d4:d7:85:15:37:04:
7c:b0:ea:5c:4c:87:64:48:80:d1:f7:e3:e6:3d:f2:
18:bb:f6:76:3d:f5:2a:2f:94:3b:77:71:0c:fd:e3:
25:ae:7e:51:34:5a:14:57:67:0e:94:2b:41:b7:10:
c4:b4:8e:4a:99:00:b2:7d:4e:41:d1:27:c7:49:27:
5a:5b:8c:4e:36:d3:d1:63:bc:8f:cb:2f:ad:dc:ef:
e6:3d:f4:4c:b5:59:a9:7d:9e:62:b4:4e:8f:8c:8a:
6a:5a:d1:51:3d:92:fe:22:c5:79:01:b6:32:1b:74:
47:cd:1f:8b:13:69:92:e1:96:da:c3:ff:c3:ba:b2:
a3:95:7d:c2:80:ea:26:eb:a8:6c:ad:3c:52:93:4f:
cc:e5:40:26:5d:57:4b:c8:7d:c1:f1:01:2e:13:85:
5d:b3:84:a9:67:83:d9:71:c0:9b:9c:22:a0:7c:6d:
31:48:97:ae:53:5f:b8:ab:0e:b7:34:63:fb:4c:75:
ba:12:6e:63:a1:90:76:6b:f3:d2:fe:92:a6:27:52:
75:b7:14:0a:56:64:c1:2c:4e:82:ef:0e:2e:d1:df:
97:1f:c3:31:d7:28:be:e3:b0:9d:c9:29:e3:0e:f9:
d1:a0:bf:ba:e3:b0:6a:14:f5:60:15:c7:e9:e4:f5:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:09:02:CF:9C:E4:04:B6:88:1C:E0:48:9C:09:66:1D:7D:7F:0A:DA
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136312e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.161.0/24
Signature Algorithm: sha256WithRSAEncryption
10:14:03:bb:41:fb:32:f0:3a:c0:67:9a:e1:d1:e4:2e:60:be:
e7:5a:fa:06:2d:e3:a1:c2:a7:d9:56:2e:de:08:c0:27:a5:3b:
54:24:38:4d:be:ca:6b:f4:18:3b:a0:a9:e0:8f:d1:e2:27:b6:
7b:46:82:3f:1f:38:89:72:b8:98:ff:62:17:49:05:b3:17:81:
d2:1f:b3:d9:fa:96:d0:16:a4:64:d6:21:eb:e2:ae:11:46:e5:
68:b0:6d:95:6d:c7:10:a1:2f:09:dc:f0:2d:38:a6:b4:95:32:
c2:e6:50:0b:b7:24:b4:77:b1:3e:d9:9d:a9:ff:ec:0b:04:5c:
68:ee:25:c6:40:24:f3:f0:6e:7f:f3:ad:44:d5:25:e2:b1:2d:
30:5b:f3:82:63:67:ad:06:d0:cd:a7:fc:81:48:80:de:60:46:
17:29:f6:7f:cf:3c:00:f6:8e:ba:b9:3c:61:0f:88:9a:bc:17:
41:e2:cf:66:3c:a3:13:01:b7:76:1e:56:66:95:56:92:28:7b:
a4:ee:f3:21:27:a8:66:7b:b9:c2:e0:bd:47:79:b0:c5:74:7c:
0e:9e:b5:88:43:59:4b:d2:8f:d9:bd:42:02:b6:0a:54:50:1c:
4f:2d:91:c3:4d:e6:c8:84:76:6b:1b:bd:fd:15:db:e1:ce:35:
aa:2b:c5:e3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUST0G3FXzEMEASeEHeJyJYp6WLKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC
NTFBN0M0OTAeFw0yNjA1MjUwMDU3MTlaFw0yNzA1MjQwMTAyMTlaMDMxMTAvBgNV
BAMTKDFBMDkwMkNGOUNFNDA0QjY4ODFDRTA0ODlDMDk2NjFEN0Q3RjBBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrhHXyzvGQtTXhRU3BHyw6lxM
h2RIgNH34+Y98hi79nY99SovlDt3cQz94yWuflE0WhRXZw6UK0G3EMS0jkqZALJ9
TkHRJ8dJJ1pbjE4209FjvI/LL63c7+Y99Ey1Wal9nmK0To+Mimpa0VE9kv4ixXkB
tjIbdEfNH4sTaZLhltrD/8O6sqOVfcKA6ibrqGytPFKTT8zlQCZdV0vIfcHxAS4T
hV2zhKlng9lxwJucIqB8bTFIl65TX7irDrc0Y/tMdboSbmOhkHZr89L+kqYnUnW3
FApWZMEsToLvDi7R35cfwzHXKL7jsJ3JKeMO+dGgv7rjsGoU9WAVx+nk9WXzAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUGgkCz5zkBLaIHOBInAlmHX1/CtowHwYDVR0j
BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG
QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw
MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHdQoTANBgkqhkiG9w0BAQsFAAOCAQEAEBQDu0H7MvA6wGea4dHkLmC+51r6
Bi3jocKn2VYu3gjAJ6U7VCQ4Tb7Ka/QYO6Cp4I/R4ie2e0aCPx84iXK4mP9iF0kF
sxeB0h+z2fqW0BakZNYh6+KuEUblaLBtlW3HEKEvCdzwLTimtJUywuZQC7cktHex
Ptmdqf/sCwRcaO4lxkAk8/Buf/OtRNUl4rEtMFvzgmNnrQbQzaf8gUiA3mBGFyn2
f888APaOurk8YQ+ImrwXQeLPZjyjEwG3dh5WZpVWkih7pO7zISeoZnu5wuC9R3mw
xXR8Dp61iENZS9KP2b1CArYKVFAcTy2Rw03myIR2axu9/RXb4c41qivF4w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:05 2026 by rpki-client