
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e33322e302f31392d3139203d3e203234313338.roa
File: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=
Subject key identifier: A0:8B:D7:74:99:25:50:15:94:5D:41:5A:0C:47:42:69:62:90:07:7B
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 7D1AA7D35E94FB3E23D20BBDD544ACD5269BD595
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e33322e302f31392d3139203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:23:02 +0000
ROA not before: Thu 21 May 2026 08:18:02 +0000
ROA not after: Thu 20 May 2027 08:23:02 +0000
asID: 24138
IP address blocks: 110.56.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1a:a7:d3:5e:94:fb:3e:23:d2:0b:bd:d5:44:ac:d5:26:9b:d5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:18:02 2026 GMT
Not After : May 20 08:23:02 2027 GMT
Subject: CN=A08BD77499255015945D415A0C4742696290077B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:13:8a:48:9f:aa:93:78:06:56:bc:01:01:
b8:0b:c9:f2:af:aa:d4:7c:1b:e7:38:a0:e7:c0:2d:
8c:5c:75:2c:35:47:77:03:2e:e0:c7:66:25:36:a0:
de:45:ec:7e:c8:0f:07:ea:4e:cd:1f:5d:5f:8c:9a:
40:ea:e8:15:34:20:23:a2:42:e8:d9:f2:c4:17:51:
f7:df:d2:4e:1e:a9:4d:f3:78:63:6e:8a:78:45:2b:
59:a6:29:c7:84:e7:1e:ee:3d:76:f1:8e:af:e5:d4:
19:08:89:27:8f:b5:ce:06:cd:f4:9d:90:ea:95:94:
f5:00:3b:de:14:8f:08:5d:9e:90:71:e0:9b:4e:5f:
60:3b:e5:c1:2c:51:9f:74:ff:71:6d:cc:b6:7a:a1:
aa:ef:d4:8c:3e:2f:9b:39:43:90:5c:c0:d4:0c:50:
55:80:fe:dd:06:37:84:ef:c0:c2:98:b4:0b:00:f7:
81:28:f4:5e:53:ea:50:e0:9b:75:b9:c7:92:b7:97:
b6:b4:02:b0:8a:6a:d2:c2:f5:dc:60:6f:95:0a:6e:
9d:39:99:59:1b:8a:87:c1:e3:79:70:fa:52:35:d8:
73:b8:69:fa:2b:82:18:22:35:71:1f:23:9d:7d:97:
e0:55:b3:f5:03:17:f9:ab:25:57:3e:44:38:cc:84:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:D7:74:99:25:50:15:94:5D:41:5A:0C:47:42:69:62:90:07:7B
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e33322e302f31392d3139203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.56.32.0/19
Signature Algorithm: sha256WithRSAEncryption
37:29:18:89:52:46:06:3d:6e:91:b8:8e:9d:83:20:c8:b1:97:
9a:5a:fc:42:5b:93:a7:33:f3:ff:e7:a0:1a:01:69:e0:4d:26:
9e:06:aa:dd:4f:e3:3f:13:26:a0:07:46:be:20:3e:f8:87:22:
fb:7f:92:00:5f:7b:8a:58:9c:fb:14:fd:dd:5e:8e:96:29:b7:
6a:89:58:0e:18:1d:22:61:39:42:11:c1:e8:f6:23:e6:09:9c:
32:35:56:a0:c5:56:54:31:88:17:4d:f2:e6:83:43:3f:27:b4:
af:0d:cf:29:ba:6c:5d:cc:55:cb:4e:0c:3f:94:e2:bd:9c:ac:
43:df:25:8d:1a:a6:e8:16:3a:b1:4c:3f:e7:34:01:73:fd:3b:
f0:2e:16:29:09:ce:6a:d8:da:4f:6f:75:24:a9:ee:f8:25:ff:
c6:7b:2b:cd:c7:00:9f:68:12:41:e8:f0:ab:c8:a6:fb:95:a1:
3c:84:23:a6:32:5b:f1:86:5d:e9:1a:52:88:06:31:bb:93:64:
36:c7:cd:16:90:a4:1e:e6:1e:84:b6:8b:5b:2b:43:29:06:cf:
48:46:8b:8e:5d:06:f6:a9:50:58:ab:9e:44:ce:92:e9:6c:1f:
d1:00:46:c1:3c:b9:2e:00:fe:bd:0e:7f:e7:da:29:4c:ca:40:
d4:1e:8a:01
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUfRqn016U+z4j0gu91USs1Sab1ZUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx
MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MTgwMloX
DTI3MDUyMDA4MjMwMlowMzExMC8GA1UEAxMoQTA4QkQ3NzQ5OTI1NTAxNTk0NUQ0
MTVBMEM0NzQyNjk2MjkwMDc3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKW2E4pIn6qTeAZWvAEBuAvJ8q+q1Hwb5zig58AtjFx1LDVHdwMu4MdmJTag
3kXsfsgPB+pOzR9dX4yaQOroFTQgI6JC6NnyxBdR99/STh6pTfN4Y26KeEUrWaYp
x4TnHu49dvGOr+XUGQiJJ4+1zgbN9J2Q6pWU9QA73hSPCF2ekHHgm05fYDvlwSxR
n3T/cW3Mtnqhqu/UjD4vmzlDkFzA1AxQVYD+3QY3hO/Awpi0CwD3gSj0XlPqUOCb
dbnHkreXtrQCsIpq0sL13GBvlQpunTmZWRuKh8HjeXD6UjXYc7hp+iuCGCI1cR8j
nX2X4FWz9QMX+aslVz5EOMyECVECAwEAAaOCAhEwggINMB0GA1UdDgQWBBSgi9d0
mSVQFZRdQVoMR0JpYpAHezAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH
IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0
RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs
UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0
MTg4MTY1MzMvMC8zMTMxMzAyZTM1MzYyZTMzMzIyZTMwMmYzMTM5MmQzMTM5MjAz
ZDNlMjAzMjM0MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbjggMA0GCSqGSIb3DQEBCwUAA4IB
AQA3KRiJUkYGPW6RuI6dgyDIsZeaWvxCW5OnM/P/56AaAWngTSaeBqrdT+M/Eyag
B0a+ID74hyL7f5IAX3uKWJz7FP3dXo6WKbdqiVgOGB0iYTlCEcHo9iPmCZwyNVag
xVZUMYgXTfLmg0M/J7SvDc8pumxdzFXLTgw/lOK9nKxD3yWNGqboFjqxTD/nNAFz
/TvwLhYpCc5q2NpPb3Ukqe74Jf/GeyvNxwCfaBJB6PCryKb7laE8hCOmMlvxhl3p
GlKIBjG7k2Q2x80WkKQe5h6EtotbK0MpBs9IRouOXQb2qVBYq55EzpLpbB/RAEbB
PLkuAP69Dn/n2ilMykDUHooB
-----END CERTIFICATE-----
Generated at Sat May 23 06:24:39 2026 by rpki-client