
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32332d3233203d3e203234313338.roa
File: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (raw, json)
Hash identifier: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=
Subject key identifier: EE:F5:6C:0C:51:BB:A0:F6:22:18:78:DD:FE:90:78:97:9C:38:01:3A
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 4D151852E553CEAC811A52ADCC350786CF1A35D6
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32332d3233203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:33:20 +0000
ROA not before: Thu 21 May 2026 08:28:20 +0000
ROA not after: Thu 20 May 2027 08:33:20 +0000
asID: 24138
IP address blocks: 111.132.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:15:18:52:e5:53:ce:ac:81:1a:52:ad:cc:35:07:86:cf:1a:35:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:28:20 2026 GMT
Not After : May 20 08:33:20 2027 GMT
Subject: CN=EEF56C0C51BBA0F6221878DDFE9078979C38013A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:8e:69:a1:16:46:a7:61:21:35:03:4c:78:
2f:f5:82:a6:29:da:a3:48:12:c8:cc:8c:28:63:d8:
fa:a7:79:eb:b7:b7:74:40:c5:85:d5:71:d1:9b:30:
72:2c:e3:65:e6:dd:09:98:d8:1e:ab:07:70:04:4f:
e2:5b:e2:55:c8:83:6e:00:01:60:78:21:25:35:98:
ce:86:99:af:17:c9:74:1f:ca:3b:e4:28:aa:fe:d6:
68:fc:50:7e:16:4d:3c:5d:2a:4a:38:ee:f4:52:69:
d4:33:ef:19:26:35:dd:d7:e8:86:47:05:69:0a:22:
bb:84:b9:6e:0d:ed:7c:96:91:0d:6a:a5:45:e8:56:
d7:a4:df:9f:5b:75:b3:1e:99:ee:d0:b2:36:f6:b0:
81:ef:33:9b:e3:87:4c:4b:2b:17:4c:4d:a8:9d:52:
8e:6e:d8:84:71:15:c3:00:0d:51:54:30:75:b1:f9:
5a:aa:12:44:7f:b7:61:fb:bd:59:74:59:66:f0:7b:
7d:41:3b:1b:64:25:74:68:fd:cd:9e:bf:f0:bc:0f:
e7:ee:57:55:57:55:43:83:fc:31:b4:e5:55:44:3e:
bd:51:60:d7:f1:3a:a1:17:5e:7e:8d:a7:70:f1:de:
e9:55:b7:9b:83:dd:4c:5e:2d:35:79:b4:77:11:77:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:6C:0C:51:BB:A0:F6:22:18:78:DD:FE:90:78:97:9C:38:01:3A
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32332d3233203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.132.8.0/23
Signature Algorithm: sha256WithRSAEncryption
60:7c:24:48:f8:3c:27:ab:9f:1c:6b:ff:e5:64:4c:32:03:3b:
b1:e2:f8:56:b3:f9:e7:8d:23:05:57:0e:7b:cb:5e:7f:e3:1b:
ef:50:53:e8:12:44:c6:f0:dc:e5:f6:fe:d6:3f:ba:e0:52:ae:
20:d0:3f:45:d0:d4:e7:10:f9:af:12:59:9f:72:be:a7:87:f9:
9a:bd:02:ed:6a:85:a4:a7:38:81:e0:f8:c3:69:b7:84:40:5d:
e6:50:4b:29:b6:79:c9:b9:1a:72:46:f7:cd:b2:e8:72:61:80:
8a:f1:a2:98:f2:6e:a8:6d:5f:46:d4:27:92:ce:15:8c:ce:d5:
47:0d:e3:bf:1e:07:8d:96:66:70:71:a0:70:ad:17:52:fe:fe:
ea:69:2f:f1:31:7a:dd:5a:9a:25:a6:95:7d:cd:e5:5f:d4:b9:
6b:24:04:74:bd:f1:ea:3c:87:bb:72:18:41:12:20:ca:d1:51:
b9:c2:27:cc:d6:5f:74:f2:42:99:88:93:c7:a0:67:32:e8:00:
26:0c:17:47:2a:85:9a:7d:52:ee:2a:eb:30:ea:d8:28:de:11:
44:62:45:42:30:c1:57:c9:b2:23:d9:99:4b:00:eb:86:f8:83:
7c:0d:13:b9:1e:1e:c9:58:10:42:bb:d1:3c:07:a2:22:fd:f1:
b0:78:2b:87
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUTRUYUuVTzqyBGlKtzDUHhs8aNdYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx
MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MjgyMFoX
DTI3MDUyMDA4MzMyMFowMzExMC8GA1UEAxMoRUVGNTZDMEM1MUJCQTBGNjIyMTg3
OERERkU5MDc4OTc5QzM4MDEzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK0QjmmhFkanYSE1A0x4L/WCpinao0gSyMyMKGPY+qd567e3dEDFhdVx0Zsw
cizjZebdCZjYHqsHcARP4lviVciDbgABYHghJTWYzoaZrxfJdB/KO+Qoqv7WaPxQ
fhZNPF0qSjju9FJp1DPvGSY13dfohkcFaQoiu4S5bg3tfJaRDWqlRehW16Tfn1t1
sx6Z7tCyNvawge8zm+OHTEsrF0xNqJ1Sjm7YhHEVwwANUVQwdbH5WqoSRH+3Yfu9
WXRZZvB7fUE7G2QldGj9zZ6/8LwP5+5XVVdVQ4P8MbTlVUQ+vVFg1/E6oRdefo2n
cPHe6VW3m4PdTF4tNXm0dxF3s40CAwEAAaOCAhEwggINMB0GA1UdDgQWBBTu9WwM
Ubug9iIYeN3+kHiXnDgBOjAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH
IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0
RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs
UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0
MTg4MTY1MzMvMC8zMTMxMzEyZTMxMzMzMjJlMzgyZTMwMmYzMjMzMmQzMjMzMjAz
ZDNlMjAzMjM0MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBb4QIMA0GCSqGSIb3DQEBCwUAA4IB
AQBgfCRI+Dwnq58ca//lZEwyAzux4vhWs/nnjSMFVw57y15/4xvvUFPoEkTG8Nzl
9v7WP7rgUq4g0D9F0NTnEPmvElmfcr6nh/mavQLtaoWkpziB4PjDabeEQF3mUEsp
tnnJuRpyRvfNsuhyYYCK8aKY8m6obV9G1CeSzhWMztVHDeO/HgeNlmZwcaBwrRdS
/v7qaS/xMXrdWpolppV9zeVf1LlrJAR0vfHqPIe7chhBEiDK0VG5wifM1l908kKZ
iJPHoGcy6AAmDBdHKoWafVLuKusw6tgo3hFEYkVCMMFXybIj2ZlLAOuG+IN8DRO5
Hh7JWBBCu9E8B6Ii/fGweCuH
-----END CERTIFICATE-----
Generated at Sat May 23 06:24:26 2026 by rpki-client