
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3132382e302f31392d3139203d3e2034383437.roa
File: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=
Subject key identifier: 13:EE:BE:8B:8B:27:28:3D:4B:1C:4B:D5:E2:27:EE:C0:ED:84:9A:17
Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial: 03A90AF91D9BA9D3AB989A93CC00DEFAED41C6BD
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3132382e302f31392d3139203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:54:33 +0000
ROA not before: Thu 04 Jun 2026 09:49:33 +0000
ROA not after: Thu 03 Jun 2027 09:54:33 +0000
asID: 4847
IP address blocks: 1.119.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a9:0a:f9:1d:9b:a9:d3:ab:98:9a:93:cc:00:de:fa:ed:41:c6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Validity
Not Before: Jun 4 09:49:33 2026 GMT
Not After : Jun 3 09:54:33 2027 GMT
Subject: CN=13EEBE8B8B27283D4B1C4BD5E227EEC0ED849A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:65:e1:eb:fd:81:89:c8:84:81:7a:7e:a8:
69:fc:d4:36:fe:03:44:a7:f1:c9:91:52:07:c0:d4:
2b:3e:67:66:94:cc:f2:7a:25:35:88:0e:d3:86:e0:
24:e8:96:0a:d3:e9:2e:f7:b0:d1:d1:b5:d4:24:7b:
b2:70:d3:a4:68:db:87:e5:a4:9d:46:36:4b:b6:74:
90:71:ba:fd:50:9f:61:12:9b:6b:8d:44:53:69:b0:
4e:6c:dc:3f:0f:55:7d:88:36:4a:c4:cd:d3:20:1c:
78:00:ba:53:7d:b3:3a:82:e0:4c:1d:c4:a1:dc:c1:
92:fb:5d:a4:71:12:fd:fe:84:f6:10:2e:09:14:2d:
81:66:34:b1:1f:4e:e7:5b:21:f3:02:98:8e:32:79:
2d:8a:33:11:6e:14:d2:50:31:5f:c6:77:78:3a:01:
4f:09:bf:aa:e7:ef:75:49:25:c5:db:03:aa:0c:f0:
26:52:c5:41:b2:7a:c4:bb:66:f0:63:8f:5d:ab:a7:
c4:c6:8d:cb:36:62:77:c5:fa:a2:36:99:34:b2:df:
4b:77:9b:db:cd:78:72:c5:38:65:9c:aa:97:9f:6f:
2e:16:ee:03:0d:73:97:2f:73:7a:c3:8a:a4:c9:f4:
f4:20:93:0a:e6:bf:6f:d7:ef:ca:5c:a7:1d:00:3e:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:BE:8B:8B:27:28:3D:4B:1C:4B:D5:E2:27:EE:C0:ED:84:9A:17
X509v3 Authority Key Identifier:
keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3132382e302f31392d3139203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.119.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:d6:23:a3:5b:da:e6:fc:d1:ec:50:5f:97:ee:2f:3e:48:41:
15:6e:ee:8a:c9:22:8a:83:b0:d3:09:28:c2:40:84:95:2d:da:
6a:62:76:1d:94:fe:ed:11:3b:e9:c0:79:ce:81:4b:aa:6d:16:
c1:4b:57:af:7a:fc:5e:0e:a2:a1:f6:8f:e5:ee:f9:39:45:10:
d4:89:75:92:2a:0a:f9:f1:96:14:79:bd:e4:be:a6:83:8d:2c:
64:d9:cb:87:75:98:31:93:63:18:2a:d2:b3:95:9f:4b:4c:e5:
62:c7:c9:fd:b9:94:c3:b4:eb:f6:30:df:3b:b6:9a:5f:d3:86:
ce:a3:01:a3:40:cc:63:15:0f:ef:67:e3:26:52:d0:10:ae:91:
b8:3e:40:0a:6f:50:1a:d3:7e:15:e5:c7:b9:59:91:1d:58:57:
07:40:48:a9:ad:a7:dd:c6:d2:46:6d:7f:c1:3a:c1:bf:b2:05:
99:cc:5a:6d:db:19:0f:b9:25:6b:09:d5:0e:34:5a:94:6e:1e:
b4:5a:66:0d:09:73:0a:16:a2:18:d0:f2:2c:85:87:53:9e:e2:
a5:3a:c8:6b:80:d4:47:81:ab:19:6f:0a:f2:ab:90:1e:81:85:
ee:49:60:25:d3:1b:81:3b:af:70:30:cb:91:f6:e4:0f:90:99:
61:24:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:12 2026 by rpki-client