
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e302e302f32342d3234203d3e2039333934.roa
File: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (raw, json)
Hash identifier: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=
Subject key identifier: AB:AC:53:17:A2:7D:5C:1E:6D:AB:84:2B:59:44:5B:39:1E:12:72:9B
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 4E8AF1361A4454E67A7A61603076A9E209F16701
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e302e302f32342d3234203d3e2039333934.roa
Signing time: Thu 21 May 2026 08:39:13 +0000
ROA not before: Thu 21 May 2026 08:34:13 +0000
ROA not after: Thu 20 May 2027 08:39:13 +0000
asID: 9394
IP address blocks: 111.148.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8a:f1:36:1a:44:54:e6:7a:7a:61:60:30:76:a9:e2:09:f1:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 21 08:34:13 2026 GMT
Not After : May 20 08:39:13 2027 GMT
Subject: CN=ABAC5317A27D5C1E6DAB842B59445B391E12729B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:18:a2:8a:9a:29:1c:8d:ca:e4:4a:28:21:
16:db:40:8f:9a:85:fc:99:32:d4:86:09:fd:17:a1:
c9:90:78:f4:1b:b2:e3:13:fe:5e:54:d9:3a:0d:8b:
8b:b6:3c:d2:12:2e:aa:41:97:be:34:d0:f4:3b:3a:
eb:df:d9:96:a6:ea:85:a2:7a:83:81:4d:80:2a:89:
8e:fe:ca:04:b2:a5:ff:37:c6:30:e5:6e:c1:f3:49:
dc:4a:48:1f:0e:31:68:89:64:47:b1:64:68:a8:8e:
bd:2b:81:be:fd:16:d2:d5:22:97:5a:4e:1a:76:ea:
64:d4:30:05:b7:e0:db:4b:22:15:3b:7c:cb:1a:1c:
70:5c:e2:37:69:6a:c2:8c:a5:42:2b:91:6a:11:10:
3b:8b:43:20:e7:81:f1:01:c8:0c:e5:61:92:f2:9c:
92:28:8b:18:f7:06:6d:74:c4:6a:4f:4d:84:04:ce:
88:22:0f:f1:a4:77:f8:7f:53:ee:e6:02:b8:56:a9:
3a:15:5c:1d:63:1a:7e:f9:35:2c:13:ae:b6:91:e0:
f1:81:f7:4a:70:21:f9:3a:80:97:f2:60:42:dc:f5:
68:ba:bc:dc:df:02:d5:db:12:71:13:26:40:cc:63:
ab:b1:74:77:84:92:dc:bc:74:a3:3a:1d:72:ad:bc:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:53:17:A2:7D:5C:1E:6D:AB:84:2B:59:44:5B:39:1E:12:72:9B
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e302e302f32342d3234203d3e2039333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.148.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f8:9d:a5:4b:a3:5c:48:07:91:fe:8d:d4:51:5d:6a:e3:17:
1b:19:a7:b9:73:75:f7:5e:1a:ac:b0:ac:bc:e2:1b:dc:0d:e9:
9d:f1:d6:6a:62:e7:06:9b:86:68:8d:e7:62:79:cd:aa:f2:ed:
83:76:65:78:e4:08:76:92:7a:85:e0:ce:8c:50:78:fc:e9:33:
f1:9b:38:f6:2d:5c:a1:73:1c:2d:f9:3e:84:7b:2b:1b:6d:62:
82:2a:d5:6e:f4:6c:f0:03:03:a4:4a:5c:0c:36:dd:da:df:37:
a3:a3:91:a8:12:f7:aa:9e:4a:f0:c3:97:1f:1a:6c:1c:b9:b8:
e2:8b:c2:1e:ae:3c:04:52:04:34:47:eb:c4:c0:e0:4f:df:d2:
fa:88:45:6a:6a:ed:0a:40:67:f9:1c:b7:b5:a6:46:fd:63:9b:
bf:ff:f6:88:5d:c3:9e:a3:ee:fd:3e:d1:3e:e3:6d:dc:20:14:
1a:12:51:59:70:29:a9:b9:a2:e6:79:1b:16:5b:85:17:9d:da:
e7:1a:20:64:e1:ac:33:db:d6:80:ee:c1:54:b7:aa:e4:e5:fb:
96:ec:87:cd:d2:3d:a4:73:8b:b6:15:b6:d2:11:9e:be:13:87:
23:76:dc:56:a8:e3:f9:37:58:92:42:01:eb:4f:8f:ad:47:bb:
f4:b3:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:55:16 2026 by rpki-client