
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3230382e302f32302d3230203d3e2030.roa
File: 3131392e38302e3230382e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: 9siWurZqFFFUnpiYmaZ3s2REcqpUg0SQ7bo8u2LJyY0=
Subject key identifier: DC:A7:A0:08:3F:A3:7C:42:FB:8A:32:8A:79:7E:DA:22:20:10:8F:50
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 01C5EE755482A672838BAC66969C064AD766CFA8
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3230382e302f32302d3230203d3e2030.roa
Signing time: Wed 20 May 2026 04:19:17 +0000
ROA not before: Wed 20 May 2026 04:14:17 +0000
ROA not after: Wed 19 May 2027 04:19:17 +0000
asID: 0
IP address blocks: 119.80.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c5:ee:75:54:82:a6:72:83:8b:ac:66:96:9c:06:4a:d7:66:cf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 20 04:14:17 2026 GMT
Not After : May 19 04:19:17 2027 GMT
Subject: CN=DCA7A0083FA37C42FB8A328A797EDA2220108F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:1f:4e:f3:4d:c9:70:1c:65:b6:32:1b:42:
c0:c3:fe:90:90:4f:b7:2d:50:dc:10:bf:da:64:c9:
69:65:85:87:ba:9d:0a:70:72:a9:70:38:d5:98:23:
ef:6d:21:2b:1a:28:5d:47:ff:53:79:32:ab:3e:10:
75:b9:7f:90:87:dc:22:60:89:43:1f:13:6e:e0:72:
22:f6:5c:b2:5e:a9:01:85:ed:b6:3c:c6:24:92:53:
3b:6a:66:bc:c8:65:d5:69:d1:6f:47:43:0e:5d:bc:
00:4e:90:66:b0:cf:6c:66:df:fa:7f:f0:5c:b0:72:
b5:85:69:36:f7:10:93:d5:51:f6:6f:94:83:51:02:
73:d9:b1:42:49:ec:91:00:0b:9e:d8:8a:a7:f4:ad:
c1:1f:cf:4b:bf:f1:5d:31:29:fd:e2:3b:60:99:f3:
9c:ca:e5:e8:31:c3:f1:48:b3:19:e3:77:a8:d7:43:
dc:55:f8:cb:09:f9:da:60:88:26:79:a3:08:08:e9:
ec:3c:db:f2:4a:fb:27:95:53:62:fc:79:c6:63:e6:
a2:74:43:fa:e7:d8:a5:b3:e7:50:70:1e:02:c1:af:
2e:3f:06:4b:93:69:a5:44:ce:aa:df:f7:3d:d6:9b:
2c:08:67:a1:ca:b4:ce:e7:e1:c4:a4:bc:eb:b0:39:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:A0:08:3F:A3:7C:42:FB:8A:32:8A:79:7E:DA:22:20:10:8F:50
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3230382e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.208.0/20
Signature Algorithm: sha256WithRSAEncryption
75:b4:6b:83:35:26:48:d7:7d:91:fb:d0:17:f5:c5:86:63:90:
9c:0b:43:59:82:a0:ec:c1:11:61:85:86:c2:13:67:2d:c5:51:
74:89:da:92:d2:62:a5:ec:4a:53:17:0c:3c:f0:56:4d:ee:93:
ed:f6:1e:fc:f7:07:b7:8b:74:c8:0c:a4:e0:2a:7f:ff:bd:0c:
62:1f:ce:ee:49:21:7f:74:40:a1:d5:21:e0:fc:1d:27:a7:4b:
66:b3:a6:7c:38:8c:38:b2:50:4e:5f:6b:1e:78:c3:97:4e:5e:
ba:7e:c7:06:8a:bc:fa:9b:30:8f:01:c6:c3:91:e4:0d:0f:87:
30:ee:f9:f9:bd:64:78:88:d2:42:f2:72:32:95:8c:19:1d:ff:
f8:f8:ea:1d:19:8f:c9:fe:28:64:0b:0f:17:54:77:61:26:35:
4c:74:7c:20:69:c1:c3:b9:a3:22:d7:42:6c:39:42:4b:30:fe:
02:86:79:22:02:2e:9d:db:89:40:be:aa:60:99:15:ca:9e:e9:
fe:af:2c:93:af:2c:b8:07:2d:13:37:1e:e7:08:54:9a:5a:ab:
0a:b8:5f:f6:8f:68:d3:d9:5f:8c:c2:88:34:01:55:c4:cc:ca:
b0:23:82:c6:8e:ff:61:97:4c:4a:4d:93:5e:3d:44:80:8a:6c:
b1:c5:fb:bc
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUAcXudVSCpnKDi6xmlpwGStdmz6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC
NTFBN0M0OTAeFw0yNjA1MjAwNDE0MTdaFw0yNzA1MTkwNDE5MTdaMDMxMTAvBgNV
BAMTKERDQTdBMDA4M0ZBMzdDNDJGQjhBMzI4QTc5N0VEQTIyMjAxMDhGNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1h9O803JcBxltjIbQsDD/pCQ
T7ctUNwQv9pkyWllhYe6nQpwcqlwONWYI+9tISsaKF1H/1N5Mqs+EHW5f5CH3CJg
iUMfE27gciL2XLJeqQGF7bY8xiSSUztqZrzIZdVp0W9HQw5dvABOkGawz2xm3/p/
8FywcrWFaTb3EJPVUfZvlINRAnPZsUJJ7JEAC57Yiqf0rcEfz0u/8V0xKf3iO2CZ
85zK5egxw/FIsxnjd6jXQ9xV+MsJ+dpgiCZ5owgI6ew82/JK+yeVU2L8ecZj5qJ0
Q/rn2KWz51BwHgLBry4/BkuTaaVEzqrf9z3WmywIZ6HKtM7n4cSkvOuwObOfAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU3KegCD+jfEL7ijKKeX7aIiAQj1AwHwYDVR0j
BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG
QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw
MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHdQ
0DANBgkqhkiG9w0BAQsFAAOCAQEAdbRrgzUmSNd9kfvQF/XFhmOQnAtDWYKg7MER
YYWGwhNnLcVRdInaktJipexKUxcMPPBWTe6T7fYe/PcHt4t0yAyk4Cp//70MYh/O
7kkhf3RAodUh4PwdJ6dLZrOmfDiMOLJQTl9rHnjDl05eun7HBoq8+pswjwHGw5Hk
DQ+HMO75+b1keIjSQvJyMpWMGR3/+PjqHRmPyf4oZAsPF1R3YSY1THR8IGnBw7mj
ItdCbDlCSzD+AoZ5IgIunduJQL6qYJkVyp7p/q8sk68suActEzce5whUmlqrCrhf
9o9o09lfjMKINAFVxMzKsCOCxo7/YZdMSk2TXj1EgIpsscX7vA==
-----END CERTIFICATE-----
Generated at Sat May 23 03:03:28 2026 by rpki-client