
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e35362e302f32312d3231203d3e2030.roa
File: 3131392e38302e35362e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier: MyiN97QPbms8mDkoWGdQpLxRbrTTHpXtHioUGlVYaBw=
Subject key identifier: D1:AD:D3:DE:4C:B5:CA:B3:7F:9B:7D:C0:A3:5E:80:87:D1:8A:8C:46
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 4822B3F25651D7EF79339C00CD80544D5AC13AA8
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e35362e302f32312d3231203d3e2030.roa
Signing time: Wed 20 May 2026 04:19:17 +0000
ROA not before: Wed 20 May 2026 04:14:17 +0000
ROA not after: Wed 19 May 2027 04:19:17 +0000
asID: 0
IP address blocks: 119.80.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:22:b3:f2:56:51:d7:ef:79:33:9c:00:cd:80:54:4d:5a:c1:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 20 04:14:17 2026 GMT
Not After : May 19 04:19:17 2027 GMT
Subject: CN=D1ADD3DE4CB5CAB37F9B7DC0A35E8087D18A8C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:65:d2:53:44:d3:84:a1:23:3a:e0:fb:cb:
0b:e5:2d:c6:15:ae:06:aa:c2:a9:a1:54:2b:9f:fe:
d9:60:27:d6:27:0f:4a:7d:8f:4f:0d:e0:50:87:35:
3f:e1:64:da:0a:fc:c4:27:03:30:04:b2:6f:19:21:
18:0b:46:a7:c9:60:52:4e:a3:17:fe:05:42:55:0a:
0e:16:b8:3c:26:fa:c2:0f:6c:82:b3:6b:40:8d:b1:
5e:9b:18:3a:55:9e:5d:7f:ba:08:e6:8a:ea:f8:21:
ef:cb:6b:1b:ee:10:38:64:88:42:42:25:a0:96:11:
63:70:aa:83:9f:34:34:2f:56:78:dc:c8:cb:c2:10:
c6:dc:93:48:27:bc:c5:3f:8d:e6:3c:c0:99:e2:56:
ed:8f:8b:59:23:cd:87:d6:7b:31:d2:42:fa:72:3e:
86:59:0b:00:35:f0:37:11:9d:e3:a1:3b:65:e0:81:
80:da:4e:22:45:d9:c5:49:e9:82:97:e5:46:6b:dd:
70:70:13:cd:e9:8a:c4:80:18:10:29:b1:57:5e:5c:
d1:01:98:d7:3a:16:32:51:ae:52:f3:c9:e3:11:62:
cc:51:0c:a6:69:2d:2c:9b:f9:c3:81:aa:60:c9:87:
9d:63:a3:ce:66:62:ec:98:fc:16:f6:df:bd:77:22:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:D3:DE:4C:B5:CA:B3:7F:9B:7D:C0:A3:5E:80:87:D1:8A:8C:46
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e35362e302f32312d3231203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.56.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:f8:8c:ea:1b:30:21:55:aa:ab:b2:93:dd:cf:25:93:80:f8:
8c:61:7a:9e:5a:90:90:a2:05:36:63:88:2b:c1:bf:da:a6:ab:
c9:2a:93:b7:a8:d2:05:b0:bf:18:03:84:1f:fd:a6:0e:2b:21:
15:60:84:63:2c:33:71:2f:7f:87:a1:6d:87:87:4e:20:5e:2d:
34:39:07:b9:05:c7:fd:4b:a6:c5:6f:9b:9f:9d:5a:80:0e:0f:
e3:a9:0e:28:e4:16:d3:e7:f3:76:ed:cd:e3:d9:25:be:2c:41:
df:d3:a0:cb:8b:62:f8:25:45:62:c6:d3:c4:cc:39:8d:35:bc:
92:66:5c:e7:91:21:3f:34:7c:0f:f6:69:01:1e:04:83:40:af:
0f:ea:a5:e7:c2:ce:5c:0a:a9:a5:83:ab:02:5d:43:53:b0:36:
39:32:3e:cc:1a:a1:0f:e7:ca:67:f1:7a:00:d0:bb:d3:60:a5:
6d:bd:cd:39:d3:5c:a6:d7:29:71:29:bf:1c:2b:d1:9b:43:4c:
e6:0a:45:9a:3d:99:66:72:bb:81:fc:8f:3c:09:e7:0a:e7:9c:
6f:de:91:58:a2:51:8c:85:8d:a6:cd:72:57:16:e8:73:e9:97:
69:9c:1b:7c:7c:4a:fc:8a:b3:ce:60:c9:a8:f3:54:04:b7:f8:
de:aa:57:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:03:26 2026 by rpki-client