
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e36342e302f31382d3138203d3e203234313338.roa
File: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (raw, json)
Hash identifier: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=
Subject key identifier: 77:B1:EE:90:02:CC:21:C0:9E:5A:89:95:84:B8:65:EC:85:C5:88:1D
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 7F994D7BA3192CDAC8848FA537518A60033DB297
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e36342e302f31382d3138203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:23:02 +0000
ROA not before: Thu 21 May 2026 08:18:02 +0000
ROA not after: Thu 20 May 2027 08:23:02 +0000
asID: 24138
IP address blocks: 110.56.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:99:4d:7b:a3:19:2c:da:c8:84:8f:a5:37:51:8a:60:03:3d:b2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:18:02 2026 GMT
Not After : May 20 08:23:02 2027 GMT
Subject: CN=77B1EE9002CC21C09E5A899584B865EC85C5881D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:c6:6c:bd:41:bc:50:1f:44:a8:d1:34:36:
99:b4:73:66:5a:2c:2d:b3:55:34:75:f2:30:86:5c:
3b:b6:5c:d0:24:71:fd:3e:52:94:b7:08:d1:c1:77:
8b:11:9e:87:11:19:b5:e2:40:ab:9e:4b:3e:5a:e5:
8f:64:90:4b:d5:48:25:b9:a0:f6:cd:e2:a7:12:b7:
d0:7d:84:37:bb:79:2a:30:67:fc:29:38:ae:c2:15:
c9:43:19:34:b9:ae:b5:02:21:22:2c:4b:14:b6:22:
0c:73:7a:ae:5a:15:34:05:11:e4:8b:92:c1:c4:3d:
b7:d4:9d:ea:c3:13:48:cc:2d:2d:39:42:9d:9a:dd:
51:a3:55:89:7e:59:56:db:a8:2c:04:0f:d0:98:a4:
dd:1c:b8:5d:4c:97:9b:db:b5:7c:a1:78:a5:cd:a5:
50:ce:41:ef:c4:6d:1e:06:e2:f9:aa:f9:38:50:83:
24:e9:29:10:e4:84:72:7f:2e:75:ff:bd:66:8a:89:
b0:a5:9a:96:1f:6d:77:38:0d:bf:f9:86:bb:02:91:
52:a8:c4:b7:9e:0e:61:3f:a9:e5:30:69:d9:db:2a:
7e:30:3a:cb:5a:d6:4c:04:bd:73:14:31:8b:7d:d1:
93:ac:b5:6d:e9:7f:ee:06:5c:d2:76:85:77:52:07:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:EE:90:02:CC:21:C0:9E:5A:89:95:84:B8:65:EC:85:C5:88:1D
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e36342e302f31382d3138203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.56.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:38:90:c8:0a:56:f0:b6:03:15:7d:b7:5a:e9:79:f5:71:27:
e1:7e:5f:c5:e5:7b:34:12:63:59:35:e8:d2:b6:6f:5f:c6:ee:
29:e0:97:fa:f8:b7:d6:56:1d:9d:81:6b:58:f4:b9:d8:b9:17:
e3:34:06:95:46:20:1c:3f:6b:a9:df:e0:9a:2f:fb:3c:15:b1:
ca:00:4f:20:a4:34:03:d2:ba:81:b4:76:a0:5e:ce:1c:b9:42:
94:77:55:34:b7:34:24:75:76:1a:71:e2:9c:e9:35:6e:19:fd:
73:39:2a:4d:d7:fb:70:b8:a7:35:42:29:95:19:41:e2:e0:d3:
9e:ae:58:ed:d9:ec:41:ea:81:d5:ee:c6:5e:ca:cd:84:15:02:
df:c2:60:16:50:e3:01:52:38:5f:4b:6c:ef:31:75:e4:06:e6:
6a:f3:e8:55:65:d7:89:8f:d3:26:81:5d:94:03:33:23:d2:b8:
6b:5d:a5:88:cf:57:2a:92:ef:50:0f:8d:b7:7b:d7:e4:1a:b3:
5e:bf:03:e1:e9:99:27:42:b2:59:98:ed:a2:06:07:1f:5f:81:
14:bd:5a:43:b6:59:f3:f4:93:38:51:01:05:7b:64:06:67:50:
ab:ba:53:18:be:a7:0b:a3:8f:80:aa:32:df:1d:fc:c0:f2:47:
17:dd:51:31
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUf5lNe6MZLNrIhI+lN1GKYAM9spcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx
MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MTgwMloX
DTI3MDUyMDA4MjMwMlowMzExMC8GA1UEAxMoNzdCMUVFOTAwMkNDMjFDMDlFNUE4
OTk1ODRCODY1RUM4NUM1ODgxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJKexmy9QbxQH0So0TQ2mbRzZlosLbNVNHXyMIZcO7Zc0CRx/T5SlLcI0cF3
ixGehxEZteJAq55LPlrlj2SQS9VIJbmg9s3ipxK30H2EN7t5KjBn/Ck4rsIVyUMZ
NLmutQIhIixLFLYiDHN6rloVNAUR5IuSwcQ9t9Sd6sMTSMwtLTlCnZrdUaNViX5Z
VtuoLAQP0Jik3Ry4XUyXm9u1fKF4pc2lUM5B78RtHgbi+ar5OFCDJOkpEOSEcn8u
df+9ZoqJsKWalh9tdzgNv/mGuwKRUqjEt54OYT+p5TBp2dsqfjA6y1rWTAS9cxQx
i33Rk6y1bel/7gZc0naFd1IHCJMCAwEAAaOCAhEwggINMB0GA1UdDgQWBBR3se6Q
AswhwJ5aiZWEuGXshcWIHTAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH
IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0
RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs
UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0
MTg4MTY1MzMvMC8zMTMxMzAyZTM1MzYyZTM2MzQyZTMwMmYzMTM4MmQzMTM4MjAz
ZDNlMjAzMjM0MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbjhAMA0GCSqGSIb3DQEBCwUAA4IB
AQC3OJDIClbwtgMVfbda6Xn1cSfhfl/F5Xs0EmNZNejStm9fxu4p4Jf6+LfWVh2d
gWtY9LnYuRfjNAaVRiAcP2up3+CaL/s8FbHKAE8gpDQD0rqBtHagXs4cuUKUd1U0
tzQkdXYaceKc6TVuGf1zOSpN1/twuKc1QimVGUHi4NOerljt2exB6oHV7sZeys2E
FQLfwmAWUOMBUjhfS2zvMXXkBuZq8+hVZdeJj9MmgV2UAzMj0rhrXaWIz1cqku9Q
D423e9fkGrNevwPh6ZknQrJZmO2iBgcfX4EUvVpDtlnz9JM4UQEFe2QGZ1CrulMY
vqcLo4+AqjLfHfzA8kcX3VEx
-----END CERTIFICATE-----
Generated at Sat May 23 06:24:26 2026 by rpki-client