
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33322e302f32302d3230203d3e203234313338.roa
File: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (raw, json)
Hash identifier: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=
Subject key identifier: 62:21:90:59:A5:8F:52:40:D7:00:4D:38:81:EC:83:77:08:35:2F:8D
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 08DFF069FCB685F9642540066B272DFC68E8E43D
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33322e302f32302d3230203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:33:21 +0000
ROA not before: Thu 21 May 2026 08:28:21 +0000
ROA not after: Thu 20 May 2027 08:33:21 +0000
asID: 24138
IP address blocks: 111.132.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:df:f0:69:fc:b6:85:f9:64:25:40:06:6b:27:2d:fc:68:e8:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:28:21 2026 GMT
Not After : May 20 08:33:21 2027 GMT
Subject: CN=62219059A58F5240D7004D3881EC837708352F8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:c8:32:eb:06:ba:d4:70:2e:90:b8:f0:03:
77:c4:48:79:0d:ff:07:43:cc:a4:52:1f:55:d6:81:
d4:86:f5:64:02:5b:d5:40:fb:91:6d:c6:01:98:2e:
b4:db:c1:70:31:f6:a6:0b:d0:c6:4c:3a:c7:f5:76:
83:fc:a3:98:41:fa:ef:c7:a2:0d:94:a9:bf:a9:86:
98:3f:b6:f4:c5:f4:2d:6f:a0:c3:13:cd:c8:64:7f:
1f:3d:e1:f3:b8:f5:4a:b2:b2:f3:8a:80:9a:92:be:
3d:8f:70:46:4f:3c:7c:15:49:50:de:97:be:6d:c1:
9e:00:f1:66:57:90:70:fc:e9:a9:fb:5f:b5:1a:9d:
f0:13:0f:9f:b5:d8:2b:4f:0e:d8:76:55:aa:96:99:
92:58:fc:14:16:51:72:3e:15:37:7a:4d:98:93:fa:
c1:9f:92:d0:3d:cb:eb:64:75:41:49:22:67:5d:7d:
31:75:4a:61:a6:da:a1:e7:fc:da:dd:fa:8b:f7:3d:
8d:de:b5:01:27:4e:55:2d:ed:7e:e6:a7:ee:dc:c4:
57:d5:5a:ec:7c:dc:2f:37:13:6c:e7:01:14:7a:2e:
92:78:2e:93:07:61:8d:0a:d4:cd:08:fa:2b:f6:8a:
3c:ce:e0:96:6a:ff:0a:cb:e3:8c:9b:02:cd:8b:84:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:90:59:A5:8F:52:40:D7:00:4D:38:81:EC:83:77:08:35:2F:8D
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33322e302f32302d3230203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.132.32.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:f9:a7:00:1e:17:8c:05:0e:28:3b:f8:de:64:22:47:c0:4b:
d7:97:ae:56:26:16:6e:a7:93:ff:93:cd:92:85:0e:9f:e6:ce:
29:e4:2f:3b:57:fa:88:c9:a7:32:d9:a3:91:74:8b:81:34:7f:
da:88:b8:c2:e9:43:cd:43:2c:92:ff:56:00:f9:2b:b1:22:18:
73:13:33:26:d0:d8:a5:bd:f9:c0:7b:e9:1e:c4:76:78:9e:e4:
6b:60:ff:db:34:08:39:83:cf:6c:bf:b9:d2:5c:fd:e3:13:23:
a4:53:c8:fd:97:84:8c:8a:26:c7:58:5d:e1:89:5c:88:fb:e9:
82:96:e0:ee:0f:10:13:05:2f:4f:0b:05:94:05:13:f7:a8:bf:
bb:50:2d:16:22:14:bc:90:c1:6f:b9:c2:7c:7d:0a:45:ac:4b:
82:fe:54:35:d2:83:69:fd:ac:42:ca:29:23:cc:dc:71:b7:40:
98:3f:5b:49:c2:6a:c9:b7:dd:57:65:90:4f:80:21:01:23:e7:
8e:ed:4e:c6:73:a1:be:a0:2b:de:1d:17:ff:04:fe:cd:28:bd:
de:73:43:34:e5:6f:5a:94:44:cf:e7:a8:a2:4d:2f:5d:40:f6:
a5:dd:55:ca:e6:18:69:f9:61:51:37:2a:2a:63:a6:6a:36:76:
df:53:a1:d5
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUCN/wafy2hflkJUAGayct/Gjo5D0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx
MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MjgyMVoX
DTI3MDUyMDA4MzMyMVowMzExMC8GA1UEAxMoNjIyMTkwNTlBNThGNTI0MEQ3MDA0
RDM4ODFFQzgzNzcwODM1MkY4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALyfyDLrBrrUcC6QuPADd8RIeQ3/B0PMpFIfVdaB1Ib1ZAJb1UD7kW3GAZgu
tNvBcDH2pgvQxkw6x/V2g/yjmEH678eiDZSpv6mGmD+29MX0LW+gwxPNyGR/Hz3h
87j1SrKy84qAmpK+PY9wRk88fBVJUN6Xvm3BngDxZleQcPzpqftftRqd8BMPn7XY
K08O2HZVqpaZklj8FBZRcj4VN3pNmJP6wZ+S0D3L62R1QUkiZ119MXVKYabaoef8
2t36i/c9jd61ASdOVS3tfuan7tzEV9Va7HzcLzcTbOcBFHoukngukwdhjQrUzQj6
K/aKPM7glmr/CsvjjJsCzYuENrUCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBRiIZBZ
pY9SQNcATTiB7IN3CDUvjTAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH
IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0
RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs
UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF
BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3
NDE4ODE2NTMzLzAvMzEzMTMxMmUzMTMzMzIyZTMzMzIyZTMwMmYzMjMwMmQzMjMw
MjAzZDNlMjAzMjM0MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEb4QgMA0GCSqGSIb3DQEBCwUA
A4IBAQAf+acAHheMBQ4oO/jeZCJHwEvXl65WJhZup5P/k82ShQ6f5s4p5C87V/qI
yacy2aORdIuBNH/aiLjC6UPNQyyS/1YA+SuxIhhzEzMm0NilvfnAe+kexHZ4nuRr
YP/bNAg5g89sv7nSXP3jEyOkU8j9l4SMiibHWF3hiVyI++mCluDuDxATBS9PCwWU
BRP3qL+7UC0WIhS8kMFvucJ8fQpFrEuC/lQ10oNp/axCyikjzNxxt0CYP1tJwmrJ
t91XZZBPgCEBI+eO7U7Gc6G+oCveHRf/BP7NKL3ec0M05W9alETP56iiTS9dQPal
3VXK5hhp+WFRNyoqY6ZqNnbfU6HV
-----END CERTIFICATE-----
Generated at Sat May 23 06:24:40 2026 by rpki-client