
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3230342e302f32342d3234203d3e203539303334.roa
File: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (raw, json)
Hash identifier: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=
Subject key identifier: 83:DB:2A:5B:64:00:5A:9A:74:11:80:81:64:B1:C1:5C:2B:51:7E:B7
Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial: 103BAB0EA4703411C80057521DC95D5FDC6853F7
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3230342e302f32342d3234203d3e203539303334.roa
Signing time: Thu 04 Jun 2026 10:04:01 +0000
ROA not before: Thu 04 Jun 2026 09:59:01 +0000
ROA not after: Thu 03 Jun 2027 10:04:01 +0000
asID: 59034
IP address blocks: 1.119.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 22:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:3b:ab:0e:a4:70:34:11:c8:00:57:52:1d:c9:5d:5f:dc:68:53:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Validity
Not Before: Jun 4 09:59:01 2026 GMT
Not After : Jun 3 10:04:01 2027 GMT
Subject: CN=83DB2A5B64005A9A7411808164B1C15C2B517EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:80:70:da:77:5d:60:eb:55:9e:7b:ff:dd:
92:41:4b:02:77:f9:19:41:1c:4d:8c:d2:50:1a:d2:
d6:e3:3d:f9:44:58:2e:2d:76:3d:be:8e:d5:5b:cf:
1e:2f:a6:70:14:03:b6:26:c0:dc:17:e0:e3:31:38:
af:4a:d0:9f:e7:49:95:b5:13:99:6e:82:a3:56:90:
a0:ac:25:61:c2:ba:51:fd:52:17:3d:03:5b:7e:9d:
1d:16:0b:17:b2:a5:71:a2:3f:8a:d6:06:16:53:01:
d5:ed:bc:5b:c4:64:19:17:61:49:ac:ba:e3:01:05:
5c:98:69:9a:53:84:10:c7:a3:1f:04:ae:d9:97:31:
20:c1:7e:7b:ac:64:c6:06:16:84:bb:d8:18:1b:8c:
f4:71:a5:5f:2b:8d:45:48:26:2a:b4:ef:43:c7:89:
e9:f6:fc:0e:4d:33:cf:22:24:2b:11:c1:29:da:af:
bf:65:b3:7e:56:87:52:93:e4:aa:cf:33:ed:32:e6:
dd:9f:0a:2b:56:3b:b3:d0:47:7d:24:0d:1b:d7:b7:
c0:8c:a5:55:9d:d1:7c:76:ed:8b:33:e9:d9:f5:d3:
a2:3c:f4:8a:36:f1:f7:eb:9c:e4:f1:33:6a:fc:f3:
17:d7:4d:80:d1:64:42:76:f1:ba:3d:02:df:0b:e2:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:2A:5B:64:00:5A:9A:74:11:80:81:64:B1:C1:5C:2B:51:7E:B7
X509v3 Authority Key Identifier:
keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3230342e302f32342d3234203d3e203539303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.119.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e1:76:13:7c:a9:86:66:d6:43:e1:07:66:1f:3e:3a:6a:70:
7c:93:ee:71:1b:88:cf:88:10:0c:60:df:1d:04:95:fc:d2:5c:
fa:a7:9a:8e:3c:56:57:0b:e0:ac:e2:54:5f:c8:2c:85:88:66:
27:6b:07:ea:76:28:6a:73:e9:5d:de:01:77:cc:f4:43:53:ea:
44:69:7d:21:d1:be:c9:1c:e8:99:c3:eb:f8:d6:30:60:e3:eb:
f2:9e:f0:81:57:3d:a9:8d:46:b0:e1:02:d5:21:69:07:cb:2d:
f3:6b:d7:a3:e5:d9:11:42:68:c0:ca:36:6b:8b:58:d2:78:3e:
e7:3f:3c:68:36:aa:67:8a:c4:1c:ee:38:23:08:af:45:82:f4:
52:c2:59:15:a2:dd:16:8b:a0:b2:ca:15:14:53:1f:9b:6a:4c:
11:64:10:c4:2b:7d:84:55:63:b8:ad:08:f4:8d:88:a8:97:6d:
2f:81:1d:dd:68:30:59:f8:d1:bb:b3:f2:cc:df:d4:ad:88:97:
a7:f4:ca:81:67:68:10:ae:7d:23:16:53:42:46:21:ea:59:8d:
b9:19:a0:10:a2:18:50:36:29:19:c1:30:91:16:1a:1e:77:fd:
69:8a:9b:cc:b4:6f:d8:c8:ba:c4:c2:22:4f:17:df:29:cd:9f:
02:37:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:51 2026 by rpki-client