
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3137382e302f32332d3233203d3e2034383437.roa
File: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=
Subject key identifier: F6:5C:31:A3:6F:A8:00:E3:6A:FF:4F:13:F1:C1:1B:1E:74:F7:BD:6A
Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial: 0BB1719CD33935B933D3E976FFEF72F4A1C47FE7
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3137382e302f32332d3233203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 10:00:43 +0000
ROA not before: Thu 04 Jun 2026 09:55:43 +0000
ROA not after: Thu 03 Jun 2027 10:00:43 +0000
asID: 4847
IP address blocks: 1.119.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b1:71:9c:d3:39:35:b9:33:d3:e9:76:ff:ef:72:f4:a1:c4:7f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Validity
Not Before: Jun 4 09:55:43 2026 GMT
Not After : Jun 3 10:00:43 2027 GMT
Subject: CN=F65C31A36FA800E36AFF4F13F1C11B1E74F7BD6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:6d:26:6c:a7:ea:bb:71:3e:a7:70:78:a3:
e2:10:7d:0d:78:83:a9:3c:35:ef:ab:0e:6a:bb:1e:
57:b5:36:9e:5b:ca:12:66:35:e5:b3:2b:8c:f9:76:
0c:a2:e8:0a:1a:d0:82:14:71:00:17:21:51:d4:95:
45:bc:45:c1:c7:a7:d8:45:79:55:0f:6b:5a:e2:c1:
f5:d2:41:de:7d:4e:57:7a:35:46:75:14:db:26:a3:
d8:c4:5d:a5:9f:ce:b7:db:01:01:0c:61:8b:e6:6e:
d4:78:ab:4e:c3:99:a7:80:1b:66:8a:01:81:0c:d6:
bf:ca:1f:50:44:94:b5:73:31:02:f3:a1:46:ba:bb:
f1:ea:5e:47:b0:2c:c9:5c:ad:80:76:69:e7:c0:97:
b2:78:3e:f2:10:ca:6d:e2:ba:b7:10:25:13:bf:5b:
7e:3f:1b:ad:cc:05:4f:13:da:68:5c:05:72:8b:51:
47:ed:a5:99:26:05:11:9b:15:28:66:ab:64:1d:d2:
7e:b6:8c:6a:37:ed:46:8d:c5:87:fa:9f:a1:8b:b9:
e2:d4:2b:3e:2b:5b:c5:97:e4:7d:af:ca:13:47:ba:
fd:61:0c:53:48:83:8c:73:24:95:9b:36:15:7d:6a:
5b:27:e2:02:fe:c3:08:ac:da:71:dd:37:ff:ff:1a:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:31:A3:6F:A8:00:E3:6A:FF:4F:13:F1:C1:1B:1E:74:F7:BD:6A
X509v3 Authority Key Identifier:
keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3137382e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.119.178.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:c0:3c:a1:38:6d:d7:8e:14:9f:b9:1b:e1:bc:7a:4a:5e:cc:
60:4d:41:89:56:29:a8:48:2c:9c:e7:c7:da:f8:8f:ec:e9:e3:
91:7e:e2:ed:b4:b5:06:c2:c2:0c:23:42:f8:b8:27:06:e9:70:
0b:70:6f:59:56:c7:1a:4d:66:1b:8d:2e:78:62:e3:b2:01:90:
27:ec:5a:c3:cc:22:bf:81:1d:a0:fe:78:cb:2a:f0:8d:08:a1:
95:85:ea:44:b7:e3:90:43:a9:61:7e:96:cd:6d:e1:00:3d:2c:
04:88:4b:ce:9d:35:66:45:14:c1:2d:04:e9:89:cc:7f:da:75:
0a:06:37:cf:80:eb:68:3a:7c:07:5a:4d:c1:a5:5e:ee:e1:7f:
46:5d:3c:af:db:db:cd:32:cb:e4:9a:d4:c7:04:21:a5:85:7f:
4c:f1:59:fa:f5:98:65:e4:b5:e4:f4:56:ad:7f:e4:ee:84:a4:
d6:55:f6:38:8e:ee:b6:12:14:3a:d8:a1:11:9d:35:c0:7c:dd:
74:e3:c8:b8:ff:b5:37:11:d4:41:b0:62:85:0b:95:06:31:ed:
5a:bd:67:5d:9d:af:e7:11:d6:40:b5:82:90:c8:ff:69:38:4e:
61:cd:61:d4:3b:6e:ac:2c:b0:53:ec:65:a3:53:3e:1c:59:53:
17:9a:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:12 2026 by rpki-client