
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31362d3136203d3e2039333934.roa
File: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (raw, json)
Hash identifier: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=
Subject key identifier: 5A:34:B5:71:E4:A7:38:3D:C2:33:C1:E9:49:55:30:73:F6:1C:7E:3F
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 28A7A6EC86A0F4BCEE43A138ECF21E35E0BD0629
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31362d3136203d3e2039333934.roa
Signing time: Thu 21 May 2026 08:39:13 +0000
ROA not before: Thu 21 May 2026 08:34:13 +0000
ROA not after: Thu 20 May 2027 08:39:13 +0000
asID: 9394
IP address blocks: 110.56.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a7:a6:ec:86:a0:f4:bc:ee:43:a1:38:ec:f2:1e:35:e0:bd:06:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:34:13 2026 GMT
Not After : May 20 08:39:13 2027 GMT
Subject: CN=5A34B571E4A7383DC233C1E949553073F61C7E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ca:86:9c:07:ec:1f:7e:13:99:4a:2e:dd:83:
df:1a:d1:96:7a:39:ed:33:39:1c:d8:0e:59:10:f5:
14:fa:44:01:ad:c5:ba:03:d8:01:bc:83:bd:d7:06:
ed:a1:cd:23:74:c2:87:2d:de:3c:13:d9:44:88:7b:
35:a8:ef:3c:0e:fe:b0:ad:f7:e8:ca:13:10:71:e1:
0b:07:00:b5:b5:a0:73:05:aa:cb:8b:03:12:97:9c:
90:91:10:2a:06:3b:ce:02:f3:fc:e5:06:1f:b7:fb:
e5:86:a1:d8:29:98:32:26:03:6d:0d:bb:c9:1a:ff:
03:d3:0d:39:7e:de:91:5b:29:a4:c6:16:7a:9d:87:
6b:6a:1b:c1:f2:59:ba:f1:52:c6:57:55:8d:98:44:
85:67:c3:c6:85:f1:66:52:f1:8a:9e:aa:db:f0:cb:
7c:4b:d4:76:07:c5:04:c2:1e:94:20:95:64:ad:7c:
20:41:cb:69:2d:b9:f7:c5:b5:aa:98:1a:23:c1:7e:
1a:3b:c8:91:c8:65:fb:98:bf:e5:f8:1f:a9:8c:cc:
24:16:67:37:47:05:94:50:88:63:45:30:8f:99:e0:
40:62:ab:36:2d:80:45:81:66:22:d0:3c:78:5d:d7:
31:cb:87:7e:6a:a4:8d:5e:84:32:e1:5c:84:2e:91:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:B5:71:E4:A7:38:3D:C2:33:C1:E9:49:55:30:73:F6:1C:7E:3F
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31362d3136203d3e2039333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.56.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:f4:96:28:4f:75:6e:1a:ce:45:fd:d2:9a:15:f5:aa:59:4f:
52:21:81:ad:8e:b1:21:b6:8d:94:e4:d9:46:a0:7b:9f:96:e4:
69:bf:eb:79:70:20:69:0b:98:4e:75:9f:18:1c:ba:55:16:59:
0d:30:30:fb:fb:17:55:4a:00:a5:a6:08:89:67:51:dd:ed:cc:
32:d1:c9:55:24:41:18:d9:4c:a2:3a:d7:ad:59:f3:37:4e:1c:
eb:f7:b7:ad:93:f4:fd:f4:67:21:24:15:3c:27:34:d5:43:77:
95:46:48:a6:61:4a:8a:f8:43:b5:b3:52:82:93:02:16:dd:2c:
25:92:8d:f6:b5:08:a8:40:79:bd:3b:d0:f0:05:44:db:6b:d3:
e8:bc:02:70:2f:b8:fe:38:f3:58:80:40:3d:58:bc:41:2f:cc:
e1:fd:d9:81:7c:8d:f5:4d:6e:59:e5:e7:4f:63:fa:31:da:2c:
51:89:6e:26:2c:05:32:0f:98:9c:e7:e6:ca:4d:4a:1b:87:71:
1f:a4:56:70:5d:29:3f:30:39:75:a2:c5:93:78:ba:1b:8c:fe:
7f:bd:9b:88:25:35:a5:54:4c:a2:f6:6a:5a:06:15:a0:ca:a4:
89:b6:5f:15:12:2d:b9:fd:e8:27:bd:af:2c:e4:2b:65:65:72:
ef:1d:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:55:18 2026 by rpki-client