
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e39362e302f31392d3139203d3e203234313338.roa
File: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=
Subject key identifier: E9:2A:1E:92:BD:1C:0A:01:49:8B:5C:3B:54:4F:4D:15:1A:C8:3F:41
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 08E5116A782C58333C6068C12BB56FA041EF40E5
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e39362e302f31392d3139203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:23:02 +0000
ROA not before: Thu 21 May 2026 08:18:02 +0000
ROA not after: Thu 20 May 2027 08:23:02 +0000
asID: 24138
IP address blocks: 110.56.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e5:11:6a:78:2c:58:33:3c:60:68:c1:2b:b5:6f:a0:41:ef:40:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:18:02 2026 GMT
Not After : May 20 08:23:02 2027 GMT
Subject: CN=E92A1E92BD1C0A01498B5C3B544F4D151AC83F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:8d:a6:32:37:03:08:be:b0:a4:cc:52:53:
2d:fc:37:62:b9:92:50:fa:db:1a:b4:37:c7:ad:70:
40:6b:5c:63:34:cc:09:1a:7e:93:7b:8e:59:09:1f:
82:62:96:54:9e:91:c6:84:26:f7:e6:f3:90:7e:79:
59:65:71:99:cf:a5:d9:3f:9b:32:03:ef:04:74:80:
f3:7a:04:62:5a:b4:12:0c:91:b2:05:3b:6a:85:a6:
78:b8:55:96:cf:7d:4d:10:b0:b9:44:14:76:90:f4:
b4:77:5b:5e:51:c3:14:fe:52:90:21:67:3f:ce:e7:
4b:8e:83:df:4f:96:49:6d:c4:31:53:c5:67:c3:1c:
4b:02:66:ef:db:39:18:38:61:a8:a8:74:15:90:41:
82:24:eb:e3:cd:61:5d:48:be:ec:2a:4e:b9:5b:7c:
d4:90:a4:40:76:4d:4c:a9:58:9b:1f:06:64:b1:2b:
a1:ae:b6:01:aa:8f:ff:8d:57:fa:e0:6a:0b:e0:86:
d9:ad:21:d2:fc:5f:57:09:7d:8f:42:e3:25:05:f3:
dc:90:6a:54:24:f0:2e:67:5c:68:63:e5:3e:85:c3:
32:c2:51:94:41:16:86:9f:80:35:c9:49:58:90:e4:
93:01:7c:f7:59:83:5a:c4:31:ed:de:e1:c1:50:0c:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:1E:92:BD:1C:0A:01:49:8B:5C:3B:54:4F:4D:15:1A:C8:3F:41
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e39362e302f31392d3139203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.56.96.0/19
Signature Algorithm: sha256WithRSAEncryption
79:fc:cb:7f:36:a7:1a:43:47:74:77:9e:da:53:51:71:3d:6b:
0e:3c:75:8f:dd:65:ce:25:4e:a7:0b:59:58:4d:d0:79:62:3e:
54:a4:df:2b:5d:a9:d7:fa:62:9b:78:6a:94:54:8f:db:83:7f:
36:1e:a8:7b:e8:6c:72:3e:e3:bc:b6:33:df:5c:4a:4f:d4:88:
cd:4a:8c:e5:18:2a:37:9a:2f:ec:2f:b5:81:78:89:92:98:a3:
30:cb:5b:78:7e:87:90:75:86:3c:07:cd:b5:21:1b:bb:06:b6:
24:d8:ee:ad:5b:0b:24:f1:44:92:39:f8:e4:93:6d:71:96:fa:
a9:6b:d3:5b:ab:d8:13:23:4b:65:39:41:12:66:a2:05:35:a5:
99:ea:82:ab:08:f5:5c:0a:3f:f4:7c:3d:62:49:af:73:f4:ef:
f7:8f:5a:f9:b7:6c:ce:1f:89:cf:00:0b:31:f2:0a:66:d1:0f:
79:60:bf:b9:3e:d0:90:6c:d8:47:28:b9:d9:eb:e3:c4:ea:9e:
a5:07:77:ee:33:ad:c6:6b:e3:52:a9:c6:e1:d2:82:ce:42:14:
d9:4f:61:b0:45:4f:9b:92:c3:8e:34:41:40:6e:b6:20:35:f5:
3e:53:1c:fb:8f:33:46:fc:b6:74:ec:3d:56:8d:59:a2:06:82:
5f:8d:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:39 2026 by rpki-client