
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32342d3234203d3e203234313338.roa
File: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=
Subject key identifier: 48:C9:56:12:CC:06:FB:2B:30:47:1F:33:32:DD:5D:2F:05:51:A0:B9
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 5EA8A1958AE120753DB276CD18CC4D64E30923D5
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32342d3234203d3e203234313338.roa
Signing time: Thu 21 May 2026 08:33:21 +0000
ROA not before: Thu 21 May 2026 08:28:21 +0000
ROA not after: Thu 20 May 2027 08:33:21 +0000
asID: 24138
IP address blocks: 111.132.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a8:a1:95:8a:e1:20:75:3d:b2:76:cd:18:cc:4d:64:e3:09:23:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:28:21 2026 GMT
Not After : May 20 08:33:21 2027 GMT
Subject: CN=48C95612CC06FB2B30471F3332DD5D2F0551A0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:e7:ed:37:e8:9c:16:61:e0:a3:e6:8e:44:
de:6d:20:0c:eb:38:d5:14:86:c3:e5:e0:6f:13:51:
2a:43:a7:76:5c:3a:a7:34:70:47:ec:5e:ab:2d:04:
2d:96:d1:72:5e:ab:60:40:8e:07:e5:c1:a2:52:38:
e4:15:b9:0e:54:c3:b8:9c:79:ea:0f:ac:2e:ea:03:
34:22:cd:9e:a4:81:57:6c:b8:06:9a:b6:c1:87:33:
f3:f5:93:09:f8:db:cc:fb:fc:91:2c:d9:e6:30:df:
ce:24:8f:b5:20:b3:e5:9d:28:b2:5f:53:79:a9:36:
26:b0:58:b7:48:2e:66:6b:d2:1a:44:2c:5a:ed:29:
4a:fa:81:ae:9a:c7:6a:e0:3e:85:b4:da:c3:cd:5c:
d4:ce:c2:29:07:ec:98:f4:32:97:0c:51:5e:58:3c:
c5:60:95:08:71:9e:32:53:51:07:6a:44:78:9e:d2:
e2:59:04:b0:75:bf:6b:4d:ae:6e:74:90:15:fb:cf:
3d:9f:70:4b:b2:98:54:cf:06:77:79:bd:af:5a:a1:
56:26:46:6f:4c:1d:f0:36:45:b0:55:92:7e:b2:75:
97:3c:50:f3:e0:ad:9a:b1:2d:df:60:73:fc:dc:53:
26:c4:f2:47:eb:fc:03:2e:fc:f4:46:7b:77:d6:b4:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:56:12:CC:06:FB:2B:30:47:1F:33:32:DD:5D:2F:05:51:A0:B9
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e382e302f32342d3234203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.132.8.0/24
Signature Algorithm: sha256WithRSAEncryption
80:12:fa:14:92:9b:bc:11:45:c3:f3:33:f5:78:24:ec:c9:3b:
13:ff:24:da:c0:fe:25:54:7f:cb:a2:95:bc:6d:75:07:45:af:
7e:3f:a4:bb:56:ba:e9:f3:c6:e7:7d:81:69:fb:c3:5e:fd:6c:
82:18:64:9b:ca:0b:79:51:fc:b6:58:c8:d0:dd:b8:73:a9:0a:
bf:71:87:f7:59:52:70:51:88:10:ba:94:48:90:9c:e0:f2:d0:
63:d5:56:5a:b3:f6:7b:2b:ba:c8:78:cd:ca:dd:80:af:85:6f:
bf:fc:9f:47:5e:5f:a0:9b:66:41:8f:a7:6f:99:15:5d:ee:c1:
1d:16:5d:f7:bf:75:1d:40:70:d0:80:a4:30:8b:b6:31:1f:e5:
27:08:43:9a:96:b4:44:20:10:bb:52:f0:a7:b9:f1:32:10:05:
f5:53:bf:bb:6f:1d:3a:e1:3d:c1:fe:66:91:3c:0d:6d:b9:bd:
7a:1f:d4:76:94:56:76:50:2f:1a:86:7b:dc:b6:65:fa:80:55:
ce:ec:fa:a7:e6:bc:a6:4d:71:01:ae:cf:af:d8:4d:7d:19:f4:
8b:b0:0b:fc:03:a8:09:be:51:5f:89:75:ed:47:db:83:67:9a:
a3:b8:fc:df:30:4f:88:e1:be:5e:c6:32:32:19:4d:2a:51:f3:
5b:6a:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:38 2026 by rpki-client