
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33322e302f31392d3139203d3e203234313338.roa
File: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=
Subject key identifier: E2:BC:4B:04:36:DD:11:3E:FF:A3:09:9E:FC:E0:4A:EF:4B:AA:DC:FF
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 0891259AF0A3C13A7A3A41059ED6A1CC45D2179B
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33322e302f31392d3139203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:33:21 +0000
ROA not before: Thu 21 May 2026 08:28:21 +0000
ROA not after: Thu 20 May 2027 08:33:21 +0000
asID: 24138
IP address blocks: 111.132.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:91:25:9a:f0:a3:c1:3a:7a:3a:41:05:9e:d6:a1:cc:45:d2:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:28:21 2026 GMT
Not After : May 20 08:33:21 2027 GMT
Subject: CN=E2BC4B0436DD113EFFA3099EFCE04AEF4BAADCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:ab:98:23:dd:04:84:c9:8b:4b:36:4a:fd:
dd:ef:17:93:42:cd:5d:45:06:66:3e:62:26:c9:9d:
85:c5:e4:34:40:62:89:9a:8c:dd:81:f8:ed:aa:e3:
3c:84:62:75:c5:ee:42:d9:b9:36:9e:70:e3:ae:7b:
bc:e3:9f:50:56:5d:ab:04:4b:53:f7:7a:f5:d5:f9:
fa:b6:47:ec:a7:d0:3a:04:3e:06:14:a4:cc:4d:23:
e5:57:59:40:0b:7b:91:58:f7:c6:33:14:49:16:5e:
eb:11:24:98:3e:75:c6:c3:9b:50:94:cc:62:a5:8e:
0a:ee:8c:b3:c3:35:14:30:1d:73:24:59:a7:0d:50:
4d:e4:7e:c3:a7:ab:72:69:a8:30:ae:33:a7:b0:c9:
49:98:d5:46:42:a7:c3:4b:a8:78:40:48:8d:50:4b:
5b:78:88:90:11:29:a7:41:52:cc:16:96:2a:52:3b:
5d:6f:38:b1:f7:7d:8f:49:bd:7c:4a:1f:07:32:a6:
b2:16:57:67:94:15:72:f1:73:73:ca:68:ca:34:48:
38:e5:3c:44:48:aa:7e:e1:dd:42:aa:c7:cf:ea:c3:
9c:75:59:7f:64:d4:25:bd:b7:07:d6:f3:de:7d:1f:
92:50:59:85:64:06:fb:4c:ce:a2:c1:38:ec:d6:86:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:4B:04:36:DD:11:3E:FF:A3:09:9E:FC:E0:4A:EF:4B:AA:DC:FF
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33322e302f31392d3139203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.132.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:4a:ce:4e:96:19:17:00:c0:fb:92:1c:68:3a:1c:8f:d1:b9:
aa:c2:d9:15:19:bb:a7:4d:21:9d:3d:91:03:c5:9f:e6:65:6f:
b0:d1:e5:5c:a0:22:a7:ea:8d:8a:01:d4:10:6c:e1:f7:3d:42:
a1:e4:9a:86:ef:61:5a:f9:92:1c:f1:7a:bd:bb:a8:82:92:3a:
ad:94:3c:af:62:22:d2:ee:50:c0:0d:ae:6e:a2:3b:ec:3b:b8:
58:1f:e0:69:ba:d6:be:0d:7a:08:23:af:13:b1:26:36:c3:84:
5f:af:b9:4b:ff:73:e0:70:f9:c3:e3:cc:4e:4c:6b:5e:1c:ad:
7f:06:89:f5:6e:0f:69:22:6e:23:94:d7:19:df:20:47:c5:6d:
36:41:9f:bc:b0:95:60:0a:6a:61:22:e7:a7:34:3f:69:54:2b:
71:f6:8c:ae:14:51:97:c6:1c:44:83:cb:b6:4e:c8:7a:fd:a8:
80:8e:98:e3:ac:3b:7c:32:91:25:22:09:73:76:d1:ea:4b:f3:
2f:cf:b2:8c:19:72:7d:dd:c2:c7:a5:0e:a5:0e:51:04:48:26:
78:82:e7:41:83:df:3b:44:5a:eb:29:03:3f:5a:ab:a1:c9:e2:
7d:ee:d8:fd:cd:e4:74:17:70:68:62:e9:07:e2:41:20:7b:ae:
89:95:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:37 2026 by rpki-client