
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231302e302f32332d3233203d3e2034383437.roa
File: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=
Subject key identifier: 61:CC:E3:B3:88:27:1B:7E:EB:FC:FE:CA:95:D4:EB:CF:9E:03:BB:59
Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial: 356365E0EDFE4EC21E29FDD0AE37C824B828EC96
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231302e302f32332d3233203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 10:05:27 +0000
ROA not before: Thu 04 Jun 2026 10:00:27 +0000
ROA not after: Thu 03 Jun 2027 10:05:27 +0000
asID: 4847
IP address blocks: 1.119.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:63:65:e0:ed:fe:4e:c2:1e:29:fd:d0:ae:37:c8:24:b8:28:ec:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Validity
Not Before: Jun 4 10:00:27 2026 GMT
Not After : Jun 3 10:05:27 2027 GMT
Subject: CN=61CCE3B388271B7EEBFCFECA95D4EBCF9E03BB59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:9e:f8:68:54:2c:11:1d:bb:2d:2b:30:20:
b3:ce:84:f8:98:61:50:77:db:6a:4d:bc:1a:5b:e2:
51:72:d7:e2:d6:d9:70:38:70:c8:ca:a3:09:3c:8a:
22:ac:af:d5:e3:fb:50:2a:ca:2e:e1:a0:7e:bf:b0:
90:ba:27:31:4e:82:03:fd:99:ce:cc:5a:22:ef:b8:
91:c7:da:68:aa:d9:21:88:07:53:4e:57:8d:46:96:
a2:98:d4:85:ca:e6:74:91:51:e3:dd:c6:e8:04:07:
2b:93:15:8d:79:f4:af:67:82:8b:23:c2:fa:ea:b8:
e6:f4:94:69:b9:9f:10:78:a4:59:d8:8a:77:d6:77:
8f:5a:8c:03:1a:b7:bd:5d:84:9d:66:2a:ce:28:83:
e0:23:11:2d:b5:dd:9c:e4:95:e9:3f:fb:dc:4a:4a:
31:c1:69:89:76:04:93:69:b8:64:fe:cd:92:ea:07:
36:33:bc:89:ba:7e:28:52:e1:c7:04:44:09:c5:70:
ba:85:f1:16:6f:56:4f:ea:58:1c:17:7e:62:4e:60:
02:1a:7e:64:99:89:eb:3c:25:70:4f:8c:71:c2:25:
4d:3d:d0:3f:d8:d0:00:ef:3d:f2:f3:aa:6e:25:5f:
8a:d0:62:bf:4b:aa:d2:79:27:cc:d4:86:27:f4:54:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:E3:B3:88:27:1B:7E:EB:FC:FE:CA:95:D4:EB:CF:9E:03:BB:59
X509v3 Authority Key Identifier:
keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231302e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.119.210.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:b7:59:4e:77:4d:10:59:7a:6c:a7:d8:fa:51:40:82:ee:ce:
3e:bd:d6:41:a4:19:f2:cc:7a:b1:5c:0a:18:30:31:a9:7f:8f:
a0:49:5f:cf:47:64:ec:d5:f9:ee:db:37:37:a5:d0:c8:87:6d:
6c:d4:75:91:74:81:c6:0b:05:4b:ca:ca:97:e2:07:23:a9:cc:
3c:b0:ba:5d:6e:59:b7:50:02:47:33:57:29:70:36:74:e7:56:
59:b2:07:8a:a9:aa:04:5a:5e:90:c8:84:9a:42:c4:61:c0:21:
e0:14:78:ec:a0:74:88:8d:cf:6b:dc:f5:8c:94:16:9a:b2:2b:
d8:2d:0b:77:ab:19:fd:f3:b4:59:3e:1d:f0:82:d6:a5:e6:2c:
24:f1:6d:98:40:4b:01:d7:68:d3:fb:d1:2f:92:f4:5a:00:e1:
19:30:66:e8:aa:95:c0:5d:33:95:31:93:b7:00:4f:d7:b7:df:
35:9f:25:6e:d7:22:26:2d:20:d7:b1:6c:e2:79:68:1a:45:17:
9c:47:93:5a:cf:bb:81:02:a1:06:f0:f9:09:e3:e3:bc:b7:2b:
1c:14:d0:1c:63:93:86:5b:69:8d:b2:7a:b3:b2:af:db:7e:51:
6d:41:7a:9a:ce:87:2b:20:24:cd:61:01:05:92:ee:77:23:d3:
de:37:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client