
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31332d3133203d3e2039333934.roa
File: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (raw, json)
Hash identifier: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=
Subject key identifier: D0:CF:50:69:BD:B5:61:07:0D:38:E4:11:4B:B7:CD:93:1A:F8:FB:E2
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 4D26154BD834A7ACC5A3AF38725B5EAF9638398F
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31332d3133203d3e2039333934.roa
Signing time: Thu 21 May 2026 08:39:12 +0000
ROA not before: Thu 21 May 2026 08:34:12 +0000
ROA not after: Thu 20 May 2027 08:39:12 +0000
asID: 9394
IP address blocks: 110.56.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:26:15:4b:d8:34:a7:ac:c5:a3:af:38:72:5b:5e:af:96:38:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:34:12 2026 GMT
Not After : May 20 08:39:12 2027 GMT
Subject: CN=D0CF5069BDB561070D38E4114BB7CD931AF8FBE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:79:dc:86:7b:32:33:64:d9:8f:d0:37:64:
62:89:3e:da:14:e0:7e:e5:8d:b1:17:ee:27:b6:c5:
73:a2:55:6c:f5:43:42:3c:fa:8c:a3:c6:6a:42:22:
7e:29:89:d0:cd:36:44:d4:94:9c:26:62:6a:fb:b9:
03:59:2f:fe:02:f1:43:5f:0d:64:14:30:c1:46:ae:
d9:d7:e0:f8:46:a6:7c:03:38:85:d0:9c:fa:36:b1:
58:16:1c:94:46:35:61:db:55:a3:b2:bd:b6:c9:a4:
e9:b8:48:e3:83:1b:23:54:6a:3a:f3:cd:ca:8f:3b:
90:7b:69:7f:56:a2:65:5e:f1:5b:23:cc:97:bc:f8:
bb:a8:db:ce:95:e8:80:7d:18:1f:e6:c0:e0:4d:a8:
55:e4:df:2c:79:1e:7c:70:37:03:d8:c6:78:2c:46:
53:79:b0:78:83:a3:73:0c:13:76:e1:1d:3a:85:22:
f6:a1:f2:ba:41:30:c8:1e:fe:d4:5b:fe:64:88:37:
af:06:11:08:29:d4:73:d6:c2:26:11:14:0b:e5:e0:
34:a2:6e:44:8b:ff:38:e3:c0:e9:6d:d5:be:3d:cd:
23:01:9a:23:89:eb:87:15:9a:9a:a4:7b:a7:29:92:
a1:0d:a2:79:79:4e:ba:d4:cb:fb:3a:5d:6c:66:11:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CF:50:69:BD:B5:61:07:0D:38:E4:11:4B:B7:CD:93:1A:F8:FB:E2
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31332d3133203d3e2039333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.56.0.0/13
Signature Algorithm: sha256WithRSAEncryption
8c:44:f1:8e:16:f6:e0:eb:54:df:2f:75:11:48:88:ad:98:22:
fe:6a:cb:75:b3:2a:43:52:75:10:2c:65:05:90:8c:5b:82:e7:
89:d3:3c:c5:74:53:a3:1b:4f:09:41:68:00:7a:6a:08:b6:8f:
dd:0e:7a:34:7e:09:9f:93:51:80:a6:4c:af:98:c9:5c:84:5b:
e6:89:49:ff:03:5b:22:37:97:b3:cf:f4:e6:10:f3:f9:c5:0f:
89:c5:bf:15:ab:1a:12:c6:3b:36:9d:4e:ed:3f:06:0c:36:93:
d6:f2:c1:a1:61:7d:2e:65:98:63:f3:fb:c6:fe:f2:3d:b8:77:
56:ad:b6:08:30:92:b4:bb:87:ab:0e:23:cc:2d:73:92:b9:3b:
b7:3c:61:58:3a:1c:27:0d:76:bb:b9:f1:86:11:b0:ad:9e:c4:
3e:2b:52:88:3c:0e:28:21:e3:7a:85:a1:5d:ad:23:d1:44:37:
d7:4b:e2:d5:ac:55:06:6a:b6:15:9c:13:4b:70:e3:e3:f1:49:
00:b4:20:a6:79:69:bf:0d:7d:93:61:64:01:9b:c5:4d:7d:d7:
e2:4d:d3:19:b1:5a:8e:79:6f:c4:75:26:b7:52:c8:bd:bc:85:
92:fa:c5:7b:2d:da:38:5a:c5:02:66:8e:0a:72:1a:a3:2a:b5:
16:58:1d:e2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIUTSYVS9g0p6zFo684clter5Y4OY8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx
MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MzQxMloX
DTI3MDUyMDA4MzkxMlowMzExMC8GA1UEAxMoRDBDRjUwNjlCREI1NjEwNzBEMzhF
NDExNEJCN0NEOTMxQUY4RkJFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANVuedyGezIzZNmP0DdkYok+2hTgfuWNsRfuJ7bFc6JVbPVDQjz6jKPGakIi
fimJ0M02RNSUnCZiavu5A1kv/gLxQ18NZBQwwUau2dfg+EamfAM4hdCc+jaxWBYc
lEY1YdtVo7K9tsmk6bhI44MbI1RqOvPNyo87kHtpf1aiZV7xWyPMl7z4u6jbzpXo
gH0YH+bA4E2oVeTfLHkefHA3A9jGeCxGU3mweIOjcwwTduEdOoUi9qHyukEwyB7+
1Fv+ZIg3rwYRCCnUc9bCJhEUC+XgNKJuRIv/OOPA6W3Vvj3NIwGaI4nrhxWamqR7
pymSoQ2ieXlOutTL+zpdbGYRQL8CAwEAAaOCAgwwggIIMB0GA1UdDgQWBBTQz1Bp
vbVhBw045BFLt82TGvj74jAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH
IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0
RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs
UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBhgYIKwYBBQUHAQsEejB4MHYGCCsGAQUF
BzALhmpyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0
MTg4MTY1MzMvMC8zMTMxMzAyZTM1MzYyZTMwMmUzMDJmMzEzMzJkMzEzMzIwM2Qz
ZTIwMzkzMzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwNuODANBgkqhkiG9w0BAQsFAAOCAQEAjETx
jhb24OtU3y91EUiIrZgi/mrLdbMqQ1J1ECxlBZCMW4LnidM8xXRToxtPCUFoAHpq
CLaP3Q56NH4Jn5NRgKZMr5jJXIRb5olJ/wNbIjeXs8/05hDz+cUPicW/FasaEsY7
Np1O7T8GDDaT1vLBoWF9LmWYY/P7xv7yPbh3Vq22CDCStLuHqw4jzC1zkrk7tzxh
WDocJw12u7nxhhGwrZ7EPitSiDwOKCHjeoWhXa0j0UQ310vi1axVBmq2FZwTS3Dj
4/FJALQgpnlpvw19k2FkAZvFTX3X4k3TGbFajnlvxHUmt1LIvbyFkvrFey3aOFrF
AmaOCnIaoyq1Flgd4g==
-----END CERTIFICATE-----
Generated at Sat May 23 07:55:17 2026 by rpki-client