
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3232342e302f32302d3230203d3e2030.roa
File: 3131392e38302e3232342e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: PV1qgqVhthMEfnfNIpt+/J7bpkFg342ViVnJ9rGKeiA=
Subject key identifier: 0D:C3:75:2D:1D:78:93:53:6A:61:7F:FC:40:C2:D8:3B:2D:F7:F4:EF
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 3805451139CD4DBF7D7D82D260F2DDC1A7A0627D
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3232342e302f32302d3230203d3e2030.roa
Signing time: Wed 20 May 2026 04:19:17 +0000
ROA not before: Wed 20 May 2026 04:14:17 +0000
ROA not after: Wed 19 May 2027 04:19:17 +0000
asID: 0
IP address blocks: 119.80.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:05:45:11:39:cd:4d:bf:7d:7d:82:d2:60:f2:dd:c1:a7:a0:62:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 20 04:14:17 2026 GMT
Not After : May 19 04:19:17 2027 GMT
Subject: CN=0DC3752D1D7893536A617FFC40C2D83B2DF7F4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:3b:70:ef:78:a6:a0:8c:37:c0:57:be:6c:
8b:a3:4e:0b:0e:73:e4:b8:d5:eb:74:5a:1c:bc:12:
11:3b:1c:37:45:3a:e5:65:0a:43:7d:e8:de:53:0e:
4e:e9:a2:52:ad:bc:de:30:95:55:37:23:f9:b8:73:
c8:35:4b:9d:1d:5c:ca:93:a1:93:d7:4d:8a:a6:28:
ec:e2:63:99:36:85:5b:3b:19:00:3c:be:57:4c:ac:
77:76:77:f0:bd:c5:5b:07:35:02:da:c6:23:82:b0:
76:23:d8:b1:d2:b7:1f:16:85:02:bc:de:a4:4d:7e:
ca:54:41:76:58:2d:43:36:7d:81:99:2f:d6:d3:38:
9a:fb:d2:b9:e2:4b:72:17:93:66:26:9a:b3:57:1f:
95:14:3e:c4:02:76:e0:6a:6a:58:69:a5:ae:91:5a:
0b:ff:74:3c:49:29:c1:2d:32:30:45:3a:5a:fa:f7:
9f:47:b2:94:c9:18:10:45:73:09:39:9e:3f:9e:8f:
55:30:04:19:20:58:af:32:f4:80:b0:ad:87:cf:61:
44:e4:aa:61:3c:9a:ca:c9:e1:a0:09:b5:cc:30:ad:
51:05:d6:25:a0:43:45:86:96:d4:81:e7:73:0c:d7:
03:b8:2f:a1:7d:26:79:52:48:73:99:66:b5:24:62:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:75:2D:1D:78:93:53:6A:61:7F:FC:40:C2:D8:3B:2D:F7:F4:EF
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3232342e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:69:90:b5:ab:89:ad:d1:c9:af:0b:77:1f:6e:f3:09:51:b0:
a2:84:16:65:b9:3a:ae:d9:75:a5:d0:df:61:cc:c0:b5:cf:09:
61:9c:13:ff:32:d6:2c:e2:a5:a8:7e:fb:94:f2:9e:83:ad:d5:
ec:0d:2f:b0:cf:1d:06:bb:7b:4d:d7:0a:8c:98:15:f6:a5:27:
50:f9:1e:be:e9:13:1d:88:82:a3:1a:a7:b3:80:5b:56:db:20:
e7:5d:be:a6:61:c4:9f:cb:25:83:82:b1:0f:d7:98:20:da:78:
0d:94:71:f0:3c:c8:52:f9:2e:0f:e5:6c:02:96:9c:d8:72:0e:
53:42:f3:2c:69:ad:0c:e7:c1:b6:4e:a7:9f:92:4a:18:56:0a:
3f:e6:d8:d4:bc:9e:82:c6:8f:30:e3:b4:da:62:fc:58:e0:60:
63:f4:79:13:e1:31:ec:42:9d:3d:71:7f:f6:da:e0:d4:f9:7a:
d9:1c:52:fd:47:d1:93:dc:b9:5b:2b:8f:d5:7d:b1:96:44:77:
24:bb:e9:a9:73:23:65:c3:a2:35:b8:f3:5d:9a:03:a2:32:02:
72:6a:63:b0:7b:aa:d0:3c:73:3a:5b:8c:72:c9:37:36:1e:7d:
01:5c:80:6a:68:cf:52:2a:95:f7:f8:a3:d8:bf:3e:b3:bc:d2:
e8:79:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:03:20 2026 by rpki-client