
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e302e302f31382d3138203d3e203234313338.roa
File: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (raw, json)
Hash identifier: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=
Subject key identifier: 45:74:EC:80:80:E8:B4:C3:04:E2:75:F0:74:2D:8D:94:D1:FF:F8:86
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: B7BEA49A6D148EC31736037B552B1226A5CBD2
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e302e302f31382d3138203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:33:20 +0000
ROA not before: Thu 21 May 2026 08:28:20 +0000
ROA not after: Thu 20 May 2027 08:33:20 +0000
asID: 24138
IP address blocks: 111.132.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b7:be:a4:9a:6d:14:8e:c3:17:36:03:7b:55:2b:12:26:a5:cb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:28:20 2026 GMT
Not After : May 20 08:33:20 2027 GMT
Subject: CN=4574EC8080E8B4C304E275F0742D8D94D1FFF886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:bd:b4:e1:40:44:b9:4f:0d:4a:94:4b:1f:
df:d4:05:34:fa:2d:d6:e4:e4:09:d3:5d:b7:c6:15:
43:fa:48:f2:07:37:71:2e:b6:bd:1e:3f:91:14:9e:
0c:d1:5b:9a:60:01:dc:8a:c7:58:83:85:89:19:10:
8b:74:17:a0:97:38:09:cc:57:3d:48:9f:8f:40:77:
ce:a9:5e:a2:68:ae:4d:a1:70:9c:71:49:9e:a9:ea:
f6:67:54:23:f2:89:27:df:cc:0e:a6:60:e6:87:4c:
e9:50:f7:85:bd:85:2c:86:12:d9:5d:4e:53:82:73:
45:b5:0f:62:c4:26:2d:5b:fb:2e:c5:eb:90:bc:a0:
56:c0:13:6c:b1:9d:14:b5:d1:f1:cb:4e:60:e1:8f:
7e:5d:2c:57:4c:55:d9:24:87:24:b0:9b:bf:44:57:
6c:57:44:5c:06:af:f7:cb:44:fd:28:23:19:0e:55:
6e:eb:09:dd:9c:ae:a4:fb:e6:38:17:b5:b1:8f:12:
dd:4e:5d:d4:a6:32:91:03:9b:7f:d7:a9:d2:c7:43:
e9:f7:7a:9a:2c:b5:76:8d:e5:e4:5d:a9:2d:13:5e:
62:ed:bf:32:66:03:5a:a1:99:7d:10:29:fd:3a:d2:
77:81:0f:4c:20:cb:85:4f:31:46:94:dd:ea:d4:73:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:EC:80:80:E8:B4:C3:04:E2:75:F0:74:2D:8D:94:D1:FF:F8:86
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e302e302f31382d3138203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.132.0.0/18
Signature Algorithm: sha256WithRSAEncryption
48:94:09:c1:55:34:8e:a3:fb:ee:e2:bd:2e:20:c5:d0:f3:24:
bb:7e:63:74:3f:48:e0:e5:5f:ed:b7:c0:98:23:78:0c:63:2c:
29:97:ca:47:5e:a0:1a:25:77:9a:d3:54:31:1b:82:ce:fc:17:
d4:72:a8:a3:42:ba:01:44:6e:2f:12:49:6e:26:bf:4d:20:8c:
78:df:6a:83:ea:d2:f5:f6:1c:39:58:0f:a4:b2:23:4e:d9:2a:
3e:8b:b8:69:44:c1:58:80:d7:a6:a9:43:9c:35:04:66:aa:21:
b8:3f:b9:64:0e:b8:aa:19:f3:76:4d:10:22:93:93:f6:aa:1b:
7d:e7:82:66:91:b1:69:d5:bf:73:a1:85:7e:97:d0:69:a8:dc:
8f:96:25:ef:70:b4:d6:5e:34:86:8d:8f:9a:27:d0:2a:71:d3:
1d:8a:b8:e2:1d:e3:1e:cb:93:7c:e0:61:0e:6f:46:0b:d4:43:
00:ff:a0:6b:2f:62:04:2b:3c:9f:a6:0f:10:ed:2c:3b:4e:c1:
ce:30:71:84:08:f0:b2:17:de:84:e7:dc:79:cd:fc:dc:0c:2b:
e7:f7:b8:00:8d:c5:a6:97:ef:55:65:c0:af:e3:47:cb:3c:58:
08:fe:58:c9:56:84:0b:e3:49:32:79:b5:3f:7a:87:41:ba:9d:
ab:5a:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:21 2026 by rpki-client