
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3232342e302f31392d3139203d3e203137363232.roa
File: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (raw, json)
Hash identifier: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=
Subject key identifier: 10:19:03:52:80:CA:17:C2:DA:21:9C:9A:D3:83:A1:7B:B7:8C:26:AE
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 74DDE6D50A223443EC35B38AEECE22217689D3B6
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3232342e302f31392d3139203d3e203137363232.roa
Signing time: Fri 29 May 2026 08:08:27 +0000
ROA not before: Fri 29 May 2026 08:03:27 +0000
ROA not after: Fri 28 May 2027 08:08:27 +0000
asID: 17622
IP address blocks: 119.33.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:dd:e6:d5:0a:22:34:43:ec:35:b3:8a:ee:ce:22:21:76:89:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: May 29 08:03:27 2026 GMT
Not After : May 28 08:08:27 2027 GMT
Subject: CN=1019035280CA17C2DA219C9AD383A17BB78C26AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:f9:37:c3:76:ba:fb:9e:31:cf:28:c9:67:
f3:97:ca:68:8b:e0:aa:5d:af:f1:bd:1b:82:47:ea:
1a:ad:ac:ee:7f:37:23:44:4d:e5:e7:2a:d6:06:13:
67:37:27:82:7e:03:01:01:b0:31:6e:27:d9:b8:fd:
0a:ac:7a:61:57:ee:7a:b0:b9:69:d9:0e:83:55:55:
c8:c7:97:27:8b:80:88:e4:81:9f:fb:71:82:72:89:
3c:46:db:a9:ad:28:84:e1:da:af:e0:8d:91:2e:f6:
9c:54:40:0b:69:b9:99:a5:b8:a1:34:3d:80:3d:51:
9f:19:ed:5b:86:47:f1:1b:c1:fd:f3:5a:56:2d:d8:
93:cc:c6:15:a5:65:3f:ff:59:f2:4b:2b:aa:b8:4a:
7f:96:01:c3:31:d0:d3:32:99:6b:3b:14:83:b0:66:
ab:3b:78:36:fc:2a:75:cf:aa:49:76:80:8b:91:9c:
b0:e5:d5:09:d2:0e:be:61:72:43:15:1b:ea:c3:0e:
ab:db:4d:e7:a4:56:7a:4f:e2:3c:f3:af:cb:70:c8:
6f:86:40:d2:74:14:25:52:37:62:c2:57:49:ca:5b:
15:66:a0:d9:bc:66:28:5d:45:90:8b:41:72:9f:78:
6e:79:1a:df:e8:a4:c2:40:ee:25:e3:66:df:2c:13:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:03:52:80:CA:17:C2:DA:21:9C:9A:D3:83:A1:7B:B7:8C:26:AE
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3232342e302f31392d3139203d3e203137363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.33.224.0/19
Signature Algorithm: sha256WithRSAEncryption
38:53:fc:97:65:04:76:43:19:f5:1e:20:14:fe:2e:97:16:de:
32:b2:d3:e7:41:ed:b4:d0:63:97:2d:cc:74:e1:cb:3c:16:5d:
b1:05:d6:81:8d:af:4e:0c:61:d2:c9:5d:d3:1f:0d:29:68:87:
df:b0:26:48:68:7f:f9:0d:1f:0a:59:66:b8:23:6d:09:cc:51:
7c:e1:b8:0b:e2:8c:26:bc:0f:52:f2:b0:da:98:3c:18:66:5e:
9b:7f:58:66:44:6e:e3:11:74:c2:59:e2:ca:aa:8a:dc:70:77:
c8:34:f6:42:9c:4f:2b:86:85:93:ce:23:c0:9a:d1:70:22:52:
da:9d:8d:5b:23:ec:ed:f9:01:4a:5e:a2:6f:24:4b:ef:a1:f4:
97:ac:f7:63:79:64:8e:e3:3f:99:19:4d:7c:ca:2f:4e:0c:d5:
9a:00:1d:79:27:c4:4b:d0:39:ed:1c:53:03:1a:28:d4:9d:71:
8a:fd:82:91:5d:12:a8:0d:f5:bb:7c:b9:0b:5a:31:db:bf:58:
10:05:12:66:00:4f:0e:8e:b0:b2:b9:dd:37:21:83:51:84:0b:
ea:a9:c3:9e:0f:8e:f2:e1:08:83:f3:5c:8b:dd:ba:f8:f7:2d:
5e:d2:26:10:9f:91:7c:0c:64:19:30:5b:b4:3c:46:18:4f:b1:
45:6c:13:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:51:56 2026 by rpki-client