
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e302e302f31372d3137203d3e203137363232.roa
File: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (raw, json)
Hash identifier: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=
Subject key identifier: C2:E4:10:3D:06:7C:6C:1D:35:A5:46:75:3A:33:5D:2C:54:D0:27:8B
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 48DBC8605E278AC5E2282AA3C491F1067A104273
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e302e302f31372d3137203d3e203137363232.roa
Signing time: Fri 29 May 2026 08:08:27 +0000
ROA not before: Fri 29 May 2026 08:03:27 +0000
ROA not after: Fri 28 May 2027 08:08:27 +0000
asID: 17622
IP address blocks: 119.34.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:db:c8:60:5e:27:8a:c5:e2:28:2a:a3:c4:91:f1:06:7a:10:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: May 29 08:03:27 2026 GMT
Not After : May 28 08:08:27 2027 GMT
Subject: CN=C2E4103D067C6C1D35A546753A335D2C54D0278B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:ab:d2:e2:b1:69:71:a5:fe:9e:e3:a2:dd:
59:b5:27:2d:c7:ec:7c:c8:bc:57:65:3b:fc:dd:2d:
11:77:92:60:16:30:cb:a5:c9:77:13:1c:fe:62:45:
e5:43:a4:01:3b:d8:48:60:4b:f3:69:20:2c:ee:3a:
85:b4:c0:c5:b7:11:e6:d9:eb:9f:6c:ef:ed:ff:55:
67:c1:8e:37:15:8a:df:8d:09:39:8e:5c:70:66:76:
32:2e:20:82:b0:2f:9d:87:c4:02:61:5e:9d:47:61:
30:d6:ae:d9:e9:50:e7:21:71:81:c4:59:0c:9f:4a:
ee:eb:ca:9b:9b:32:ca:71:6a:66:56:9a:5c:c5:35:
36:91:55:35:f8:35:a8:7e:4d:ae:04:d4:88:72:bc:
bc:76:07:e3:c0:eb:df:32:7d:dc:22:f1:40:01:ae:
3e:7d:f3:98:2e:52:3c:8e:9b:54:06:13:e4:07:3e:
22:46:02:1b:d7:be:4f:09:99:8f:c3:ee:77:b4:5b:
77:a8:e1:8a:4d:df:fb:23:b3:40:8d:a9:0d:36:d0:
fd:46:d5:d9:20:92:b1:3f:96:54:10:7e:13:97:56:
04:1a:01:b8:5f:c4:64:a2:9a:f0:76:61:f2:bf:2c:
2f:22:0e:73:e4:46:bc:3b:e5:2c:04:72:b6:f3:ba:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:10:3D:06:7C:6C:1D:35:A5:46:75:3A:33:5D:2C:54:D0:27:8B
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e302e302f31372d3137203d3e203137363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.34.0.0/17
Signature Algorithm: sha256WithRSAEncryption
49:52:5b:a5:a9:73:16:c4:03:91:49:ab:0d:9f:8c:6e:86:cc:
c7:c5:3f:56:db:98:e8:bb:95:3a:0d:af:21:77:88:3d:44:2a:
9f:43:c4:1e:65:e0:7c:d9:c3:ed:fa:07:3b:81:a9:02:e5:4b:
03:c1:78:86:2d:c2:27:15:1f:e5:43:39:12:2f:1d:28:75:cc:
4c:90:2f:90:29:d0:1b:52:db:6e:c5:c5:8a:2b:72:12:35:9a:
96:f8:4a:0f:f7:61:10:d0:ff:91:5a:15:6c:44:2e:bb:b3:90:
b7:cc:34:a8:2e:7f:c4:ef:60:66:68:eb:52:63:2f:77:87:b3:
b8:1e:a6:af:41:cf:6b:d0:bd:5a:a9:df:fb:d9:7d:b8:b7:db:
30:1b:b2:cb:50:d7:2b:bf:6b:79:8a:d1:0e:b1:1e:c4:98:a8:
82:01:fc:97:dd:78:76:fe:c3:3b:f0:72:f2:3d:70:96:d3:92:
43:c9:59:4e:05:f3:c1:67:f5:32:fb:31:8b:3e:e1:c4:bb:ec:
20:79:7f:f5:18:38:b2:e0:66:f8:d0:ad:be:bb:ef:b7:b5:67:
fa:36:e1:da:ab:aa:65:0e:d1:09:ea:bd:96:e8:f1:6c:36:e0:
61:0a:d2:53:e6:ef:76:21:a6:a6:c5:5c:14:36:62:8e:8d:c9:
7b:e3:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:33 2026 by rpki-client