
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e36342e302f32312d3231203d3e203234313338.roa
File: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (raw, json)
Hash identifier: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=
Subject key identifier: 0B:8D:BE:DE:14:2C:76:D6:B1:25:1C:8F:28:AB:05:17:63:A9:9F:60
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 36F4DBD7AC058C8F001A8F71F45E9103E6CB7B91
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e36342e302f32312d3231203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:33:21 +0000
ROA not before: Thu 21 May 2026 08:28:21 +0000
ROA not after: Thu 20 May 2027 08:33:21 +0000
asID: 24138
IP address blocks: 111.132.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f4:db:d7:ac:05:8c:8f:00:1a:8f:71:f4:5e:91:03:e6:cb:7b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:28:21 2026 GMT
Not After : May 20 08:33:21 2027 GMT
Subject: CN=0B8DBEDE142C76D6B1251C8F28AB051763A99F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a3:8a:a7:48:06:85:51:58:94:12:c8:e8:36:
f3:25:f8:43:cc:58:c1:58:ec:e7:e7:3d:db:a0:4d:
d4:65:e5:00:e0:1e:d8:48:71:81:fb:15:be:b1:db:
6a:92:73:ee:e3:09:8a:6c:cb:fc:72:68:eb:1b:72:
09:81:8a:95:b8:e4:9e:82:4b:a4:be:13:b3:1a:4a:
e5:d3:c2:54:f8:e0:a8:b1:e9:73:9d:f4:c3:20:c6:
02:75:90:10:ac:54:c4:c7:53:63:31:91:1a:ad:da:
c2:32:f6:0c:8e:b5:a2:18:8f:63:32:67:85:68:c1:
16:a9:3b:9b:b4:81:8f:67:a1:f7:0a:1f:04:2b:fe:
06:49:0d:6d:f4:b5:4a:fd:51:9a:df:c6:88:c6:ba:
54:09:b9:59:73:15:03:d1:de:7e:9b:88:77:8e:7a:
e4:d7:68:15:fd:f1:15:d6:89:6d:dd:b4:fe:22:cf:
58:b3:a5:43:ff:6d:14:4e:66:76:57:a9:ab:a2:5b:
a7:25:ed:73:2e:bc:66:48:94:59:c3:5f:87:ab:88:
b1:f3:02:33:16:96:c3:8a:dc:21:b9:23:47:9e:61:
ca:f9:b1:78:04:7b:10:b7:bb:ab:62:65:95:51:6c:
cd:c2:ed:8b:bf:43:8a:a6:fd:1c:27:bd:ec:0c:7e:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:BE:DE:14:2C:76:D6:B1:25:1C:8F:28:AB:05:17:63:A9:9F:60
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e36342e302f32312d3231203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.132.64.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:29:43:aa:3f:4a:ce:ae:f6:1d:1c:c5:b0:55:4b:b1:28:e7:
75:00:be:fd:88:9f:b3:11:ad:83:9c:bc:9f:fe:a0:19:3c:7c:
94:6e:9a:4d:7f:97:3e:90:40:e3:13:a3:ca:42:7f:20:2e:44:
b0:f7:9a:f6:c0:cb:e7:8d:e8:06:35:ee:5f:bb:47:75:ce:64:
01:7c:f8:26:40:60:a3:d2:db:2c:cd:93:4f:97:0f:44:e1:91:
e6:13:d2:e0:1a:bb:83:17:e6:12:84:5c:86:21:80:d0:9c:9b:
d3:b9:cd:1b:5e:a5:45:8d:df:48:d6:48:58:86:56:5e:d2:01:
38:7f:5b:bf:57:82:a2:d0:17:d3:27:75:f8:75:bf:6d:2c:f8:
8d:63:56:03:a1:3d:3f:e8:01:ec:31:2d:ce:69:c7:ca:68:d8:
e3:5c:d1:4e:84:68:2d:b5:3c:33:6f:7b:6d:29:06:a3:4f:ea:
2a:bd:7d:15:5c:d0:9b:a4:1c:87:6e:40:ad:08:cd:24:b1:dd:
59:f7:cb:82:19:4e:0d:23:54:6e:2a:ac:31:12:a0:c4:c8:ba:
e4:42:f5:b7:49:16:2c:06:53:a8:b2:f5:60:0a:8b:44:1e:8b:
6d:31:45:3c:98:77:9a:52:cd:ce:59:c2:47:2c:d6:0c:4e:a6:
cb:60:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:39 2026 by rpki-client