
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3230342e302f32322d3232203d3e2030.roa
File: 3131392e38302e3230342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: v0iOjcbPBQGFDUB3R+arP845clM+A9rO5+kFa/KpAEk=
Subject key identifier: D7:78:E6:EC:FA:2F:C9:8D:EC:9E:7C:72:AD:05:D4:D7:4E:1B:4F:99
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 4804D537E04AEE8773A833806388111BEF2259EE
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3230342e302f32322d3232203d3e2030.roa
Signing time: Wed 20 May 2026 04:19:18 +0000
ROA not before: Wed 20 May 2026 04:14:18 +0000
ROA not after: Wed 19 May 2027 04:19:18 +0000
asID: 0
IP address blocks: 119.80.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:04:d5:37:e0:4a:ee:87:73:a8:33:80:63:88:11:1b:ef:22:59:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 20 04:14:18 2026 GMT
Not After : May 19 04:19:18 2027 GMT
Subject: CN=D778E6ECFA2FC98DEC9E7C72AD05D4D74E1B4F99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:f6:e8:e1:c1:bc:2f:69:5b:85:71:9c:33:
c9:52:10:52:09:23:31:3a:e9:50:a1:a1:06:7d:bf:
ce:71:bb:14:08:69:1c:79:fe:b7:3f:fb:c3:fb:ac:
1f:1f:2b:4d:79:55:5a:79:1d:18:84:bd:35:7c:4f:
89:f7:33:93:80:5f:ea:7e:3c:57:c0:93:c2:fe:ba:
37:8c:68:04:0d:17:9e:f6:34:c8:fd:60:a1:9a:da:
a5:3a:a8:70:a5:97:8a:2a:97:44:b7:45:df:fc:ff:
0d:c3:08:34:ec:8c:0f:5e:fa:69:47:16:2f:22:b0:
c7:3f:af:84:2f:2b:22:21:ec:24:b4:3b:ef:3a:05:
77:3e:51:06:c3:41:85:5d:94:16:bb:e7:fc:98:8b:
53:ba:c5:c1:9b:ea:05:97:5f:2d:12:2d:99:12:7e:
9e:cc:af:2a:9c:e0:fe:c9:77:f1:dc:17:a4:4b:17:
e0:17:a7:17:31:5a:76:6c:8e:35:e6:86:52:43:c9:
dc:17:bd:02:2f:ff:6e:49:03:3d:e3:b2:ee:36:bc:
c2:70:b9:37:fc:00:c5:d6:7f:c6:dd:aa:9f:aa:95:
ec:92:5e:a9:be:93:00:90:49:02:8a:2a:1f:8f:f1:
f2:b8:45:56:54:70:6d:c6:1d:80:60:29:c2:c7:4c:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:E6:EC:FA:2F:C9:8D:EC:9E:7C:72:AD:05:D4:D7:4E:1B:4F:99
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3230342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:70:95:fb:fd:98:24:d5:68:61:7b:13:ab:51:27:e6:98:0a:
6b:1e:9f:1c:4c:e0:ce:9e:fe:70:cb:4e:73:fb:99:80:98:90:
b1:ca:2f:f9:aa:d7:1c:ac:c8:33:07:94:33:d2:41:ed:1c:fb:
8c:03:6c:af:91:4c:56:a4:cb:2c:cf:db:58:1e:e7:3a:82:bc:
f3:d8:e2:83:89:df:7a:63:9c:c8:b6:82:64:e3:8f:ba:38:bc:
0f:58:18:25:d7:1b:eb:33:3d:c0:fe:a7:3c:76:af:52:53:fd:
72:40:04:be:3f:30:e9:e2:f9:fa:92:53:c1:60:25:a2:79:94:
b3:c9:99:b2:44:53:84:34:a6:3a:d6:b7:35:5f:ea:db:f9:d6:
a5:58:a3:d2:49:f1:0f:ea:12:85:e4:39:ce:15:50:fc:73:97:
49:5b:8f:29:22:f4:9a:6c:a8:a8:84:d2:0e:00:6b:c3:90:71:
90:78:0c:fb:5c:35:f5:c8:c8:c0:8f:f3:4c:0b:61:c3:56:d9:
fd:fe:8a:f3:ac:32:4a:42:da:4d:73:a1:b5:87:f2:db:1a:95:
58:f8:d2:50:8c:09:2b:39:d2:e4:29:ec:db:39:a1:e4:be:8f:
d0:3a:9e:8d:cb:2d:5c:14:08:d0:4e:2f:ff:25:e4:21:b7:3d:
57:a4:f9:c2
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUSATVN+BK7odzqDOAY4gRG+8iWe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC
NTFBN0M0OTAeFw0yNjA1MjAwNDE0MThaFw0yNzA1MTkwNDE5MThaMDMxMTAvBgNV
BAMTKEQ3NzhFNkVDRkEyRkM5OERFQzlFN0M3MkFEMDVENEQ3NEUxQjRGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJfbo4cG8L2lbhXGcM8lSEFIJ
IzE66VChoQZ9v85xuxQIaRx5/rc/+8P7rB8fK015VVp5HRiEvTV8T4n3M5OAX+p+
PFfAk8L+ujeMaAQNF572NMj9YKGa2qU6qHCll4oql0S3Rd/8/w3DCDTsjA9e+mlH
Fi8isMc/r4QvKyIh7CS0O+86BXc+UQbDQYVdlBa75/yYi1O6xcGb6gWXXy0SLZkS
fp7Mryqc4P7Jd/HcF6RLF+AXpxcxWnZsjjXmhlJDydwXvQIv/25JAz3jsu42vMJw
uTf8AMXWf8bdqp+qleySXqm+kwCQSQKKKh+P8fK4RVZUcG3GHYBgKcLHTGlrAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU13jm7PovyY3snnxyrQXU104bT5kwHwYDVR0j
BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG
QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw
MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAndQ
zDANBgkqhkiG9w0BAQsFAAOCAQEAonCV+/2YJNVoYXsTq1En5pgKax6fHEzgzp7+
cMtOc/uZgJiQscov+arXHKzIMweUM9JB7Rz7jANsr5FMVqTLLM/bWB7nOoK889ji
g4nfemOcyLaCZOOPuji8D1gYJdcb6zM9wP6nPHavUlP9ckAEvj8w6eL5+pJTwWAl
onmUs8mZskRThDSmOta3NV/q2/nWpVij0knxD+oSheQ5zhVQ/HOXSVuPKSL0mmyo
qITSDgBrw5BxkHgM+1w19cjIwI/zTAthw1bZ/f6K86wySkLaTXOhtYfy2xqVWPjS
UIwJKznS5Cns2zmh5L6P0DqejcstXBQI0E4v/yXkIbc9V6T5wg==
-----END CERTIFICATE-----
Generated at Sat May 23 03:04:21 2026 by rpki-client