
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33392e302f32342d3234203d3e203234313338.roa
File: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=
Subject key identifier: 6E:BD:19:BD:CB:FC:47:6F:26:21:2E:4B:7B:76:E0:4A:16:51:43:6B
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 4BDAE6EDF0D0223D7173BB1EC27D7711926C15B0
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33392e302f32342d3234203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:33:20 +0000
ROA not before: Thu 21 May 2026 08:28:20 +0000
ROA not after: Thu 20 May 2027 08:33:20 +0000
asID: 24138
IP address blocks: 111.132.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:da:e6:ed:f0:d0:22:3d:71:73:bb:1e:c2:7d:77:11:92:6c:15:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:28:20 2026 GMT
Not After : May 20 08:33:20 2027 GMT
Subject: CN=6EBD19BDCBFC476F26212E4B7B76E04A1651436B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:1f:74:fc:8a:4a:29:27:4f:b8:fe:8b:cd:
3b:82:24:b1:48:2e:4d:27:82:85:ac:e8:2e:f2:c8:
33:a8:1b:df:b6:92:8c:67:f0:c6:db:75:04:52:64:
77:48:c2:77:28:c8:8e:48:92:4f:80:3f:ac:c3:08:
9e:3d:7e:f3:61:e7:f4:e9:54:13:51:15:fa:0e:8d:
57:4c:dd:e6:f9:c9:8c:ef:6f:70:ba:fc:29:f2:68:
7f:2d:ab:6c:22:40:7c:36:6b:8c:0d:2b:72:90:1c:
9e:31:22:44:9e:f0:a6:f1:18:9d:37:36:4d:67:22:
f8:f0:6f:59:45:73:c3:0b:ef:6d:34:cb:dd:8f:a7:
4a:ba:60:e8:21:9e:82:7e:74:42:dc:1f:86:88:c6:
b8:be:31:d9:0f:31:88:ee:95:5d:e4:98:c8:62:d7:
75:bb:d8:c8:c2:38:46:0a:f7:3b:59:9a:3e:ab:da:
5c:9e:d0:14:3b:bc:26:b9:29:3c:bf:f4:de:03:5e:
8e:c6:b0:45:44:fd:e8:95:f0:8d:d8:ae:ba:24:0a:
9c:21:1c:5b:03:a6:0b:d8:67:72:78:9a:6e:6c:e6:
af:04:a7:3a:5d:ac:47:bc:da:d3:bf:3e:aa:4d:09:
89:34:a8:8e:70:88:aa:69:4c:35:41:ec:8f:46:54:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:19:BD:CB:FC:47:6F:26:21:2E:4B:7B:76:E0:4A:16:51:43:6B
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e33392e302f32342d3234203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.132.39.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c2:0c:d9:fd:4c:f2:1a:e7:74:08:42:f1:d1:8f:34:f5:98:
48:cd:3f:c6:3c:d4:db:fc:40:ef:13:c2:dd:76:89:b1:92:8f:
a0:08:e2:bd:b5:3b:cb:ab:88:5b:98:d8:cc:87:08:2b:9d:f8:
5d:70:fd:20:9f:14:ad:ec:a4:3a:bd:8d:fc:f1:db:fe:09:7c:
d7:03:bd:56:d4:5f:b8:eb:6e:37:b6:2a:80:ce:9c:72:d6:bf:
61:0b:c6:e1:e2:88:70:d6:a6:5f:a6:be:15:40:29:14:2a:d4:
04:8a:c3:85:60:a9:bd:06:03:8b:fe:17:f2:d8:d6:8a:9b:5e:
f9:7e:bf:14:37:08:d9:f4:d0:2d:71:0a:63:05:d6:66:01:88:
53:69:80:18:dc:b4:03:08:73:f0:58:d7:06:cb:17:02:d1:27:
b7:01:27:ed:6d:49:65:8f:40:9b:53:02:34:d1:09:14:e3:99:
a1:bf:64:61:11:f3:dd:cf:75:5e:31:b0:67:5e:ed:e3:93:07:
0b:75:67:7d:32:71:bb:9a:08:f4:d0:65:89:a0:a7:1f:35:b2:
30:fc:fa:df:9e:3e:df:18:c5:be:3a:db:df:de:2c:67:95:ec:
9c:d2:fb:3f:cf:e9:20:bb:b1:7d:35:22:e5:c9:a0:2f:14:12:
33:3a:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:37 2026 by rpki-client