
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31392d3139203d3e203234313338.roa
File: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=
Subject key identifier: BB:64:8A:01:65:97:A9:0E:37:81:7D:D3:3F:4A:61:CB:61:0A:A7:89
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 51EC98AF4D6CBBC19E4D7B95296D4C5691977237
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31392d3139203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:23:02 +0000
ROA not before: Thu 21 May 2026 08:18:02 +0000
ROA not after: Thu 20 May 2027 08:23:02 +0000
asID: 24138
IP address blocks: 110.56.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ec:98:af:4d:6c:bb:c1:9e:4d:7b:95:29:6d:4c:56:91:97:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:18:02 2026 GMT
Not After : May 20 08:23:02 2027 GMT
Subject: CN=BB648A016597A90E37817DD33F4A61CB610AA789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:9f:f0:15:7b:63:fa:43:7d:6d:35:33:bf:
63:39:de:9d:76:14:49:33:5f:01:2c:9b:56:17:85:
e0:9e:fd:26:68:bf:34:0f:c0:33:80:d7:ac:44:f1:
03:5f:04:90:64:e8:68:4c:57:84:14:42:cd:c8:d4:
d7:de:f7:8a:7c:36:10:e1:5b:67:22:d7:da:62:80:
c2:23:6a:6e:e5:7b:0d:cd:2b:fa:5d:4e:40:c0:a0:
51:5d:c5:00:0b:c0:12:59:d9:c1:ee:80:34:e5:29:
ac:27:1e:7f:1b:00:28:77:db:49:0f:45:b5:0e:d5:
2b:45:ec:a4:cf:1d:db:b1:ec:88:07:10:b3:66:30:
b1:d6:91:7a:60:9d:67:95:9d:eb:ec:ed:e3:d6:13:
3b:db:53:be:ff:be:64:59:d1:1b:1a:19:d2:70:a8:
11:df:08:53:81:a2:cb:7a:cc:dd:f7:3f:7f:2a:7b:
25:9e:f0:12:15:06:2b:d0:48:88:15:9a:ac:ab:52:
06:68:e7:f0:69:6e:5a:81:33:3f:c1:91:0b:3e:4b:
37:73:d0:c6:fa:83:ea:70:12:8f:7f:2c:b8:a4:31:
e2:31:d2:0c:3d:8c:24:1f:74:c3:d3:90:13:48:95:
b4:cd:2e:19:ff:f4:10:ff:2c:9a:66:b9:8c:5d:9d:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:8A:01:65:97:A9:0E:37:81:7D:D3:3F:4A:61:CB:61:0A:A7:89
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31392d3139203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.56.0.0/19
Signature Algorithm: sha256WithRSAEncryption
18:cd:ad:b2:fd:db:95:2a:29:17:7a:6f:ad:5a:a1:88:4f:58:
91:a3:e9:d6:ee:25:13:b8:8a:63:b4:37:98:01:e7:68:ca:40:
d7:fb:10:78:20:36:4b:73:d2:10:9a:29:b9:c6:ee:3b:1e:10:
ca:e0:e1:ee:bf:e8:6a:f0:de:20:c4:6c:5e:11:a7:1f:96:44:
0a:f3:48:a6:87:b4:94:43:67:9d:a1:d0:36:1f:be:47:fa:31:
38:a1:3a:2c:ab:91:18:4f:e5:2b:3e:53:d4:01:df:cf:56:4a:
ed:e5:f0:19:a2:c9:cd:e5:2b:5d:e4:5d:49:01:70:ff:c9:80:
1f:75:c9:99:bc:c1:a4:2a:c0:17:26:43:5b:cf:ee:27:e7:16:
2f:e3:2f:87:d1:b3:39:d7:28:57:00:92:20:7c:6a:51:74:38:
cd:f9:db:15:25:52:ca:dd:f8:ba:cb:04:32:4b:55:09:53:82:
c9:a8:36:ad:dc:5b:49:0f:22:df:04:cf:e0:90:88:7b:dc:b1:
11:a0:13:13:00:49:77:cb:40:c7:ff:58:5f:ea:96:38:c5:19:
7b:c3:57:7e:42:a7:5c:d2:53:40:37:b1:ed:1f:7b:69:af:2a:
e2:f7:b1:9c:fd:ea:5e:db:85:da:91:10:90:8a:a2:ec:94:2f:
0f:0c:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:29 2026 by rpki-client