
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa
File: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (raw, json)
Hash identifier: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=
Subject key identifier: D2:65:2E:BA:FF:57:8D:A8:43:95:D0:4D:C2:19:1D:85:25:B5:01:5E
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 61A3FE8B09C955E0F49FECF2FF81A7E7459CD3E3
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa
Signing time: Fri 29 May 2026 08:08:28 +0000
ROA not before: Fri 29 May 2026 08:03:28 +0000
ROA not after: Fri 28 May 2027 08:08:28 +0000
asID: 134773
IP address blocks: 119.34.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a3:fe:8b:09:c9:55:e0:f4:9f:ec:f2:ff:81:a7:e7:45:9c:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: May 29 08:03:28 2026 GMT
Not After : May 28 08:08:28 2027 GMT
Subject: CN=D2652EBAFF578DA84395D04DC2191D8525B5015E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:06:56:69:1f:e3:8b:c8:0d:6c:13:44:00:
6c:ef:36:d7:c2:fc:c8:be:84:5b:71:61:43:26:b2:
6c:f9:a7:05:5d:fc:7c:d9:37:68:92:aa:d9:7c:86:
15:30:ed:d9:59:01:93:f6:74:6c:9f:33:ba:45:8a:
9a:ab:a3:97:cb:1b:b6:22:09:3b:3b:be:01:d3:f1:
a4:a8:55:c7:0e:35:af:b0:d0:7a:45:fc:a5:48:51:
0c:3c:6a:ed:6d:24:f7:5e:12:c7:6c:98:25:6a:79:
4b:46:4f:06:70:3d:1a:a2:4e:dc:ef:98:4c:9d:4a:
9e:46:1c:40:ef:a7:b0:c5:e2:42:c4:d7:5a:ae:63:
df:81:f2:83:af:f0:ec:9d:27:54:db:b2:be:49:39:
b5:f5:44:5a:c2:a5:95:3b:2d:1b:85:a0:c2:85:4c:
c1:c5:8a:11:9f:31:15:17:60:03:ff:e7:a5:8e:2b:
89:4a:df:78:cb:52:e3:e0:a5:2c:b0:03:37:9e:9f:
05:43:b0:30:4c:32:fe:ce:2f:8c:08:6e:64:b3:e6:
6e:c2:5e:db:a2:c8:cb:c1:52:4b:d3:e7:64:ad:8f:
33:93:64:92:c3:f0:cf:8d:ac:04:ca:7e:e1:4f:1c:
b0:c2:30:50:ca:62:97:4d:be:7b:e4:ae:65:78:e0:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:65:2E:BA:FF:57:8D:A8:43:95:D0:4D:C2:19:1D:85:25:B5:01:5E
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.34.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7b:b5:7e:38:63:b0:76:fa:0c:4e:3c:9c:7b:05:4b:cf:c7:07:
4c:48:8a:d4:02:e7:2a:1d:a9:e4:57:ee:64:af:a5:86:3e:2a:
26:ee:e5:35:2b:9f:08:2b:6f:e5:51:2e:85:49:49:e6:35:1a:
7a:bc:d6:0d:30:1d:40:7d:2c:e4:df:80:2d:02:04:66:ed:7d:
f1:dd:dc:19:dd:87:24:32:3f:5a:b7:bf:e6:42:e4:ec:cc:7d:
59:9b:0e:18:e2:f9:30:d6:46:28:9c:d6:ff:a2:b4:63:25:0e:
b6:21:c4:9a:c0:6e:11:73:ff:54:6c:3f:8c:43:5c:42:8c:19:
65:12:cb:13:e5:df:2d:ab:8e:6f:ff:bf:43:86:8e:12:a5:ef:
43:f3:51:b0:8d:19:f4:bd:35:e3:30:9a:20:f8:fe:15:9e:6f:
8e:92:37:ad:34:89:12:94:23:0a:be:86:71:5e:8e:a7:bd:de:
c4:bb:2e:9f:43:23:e4:b4:8e:f9:51:a5:91:48:69:e3:7a:50:
ac:9d:12:18:f3:2e:1d:47:c5:fa:dc:d4:1a:9d:ca:0f:a4:b2:
ed:e4:c4:e7:aa:4d:e0:8b:09:c0:a8:5a:21:9b:a1:ec:b3:3f:
99:bd:b5:83:31:a3:1e:b5:b6:54:1e:7e:a0:d5:5e:54:4b:bb:
49:5a:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:46 2026 by rpki-client