
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231322e302f32322d3232203d3e2030.roa
File: 312e3131392e3231322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=
Subject key identifier: 51:D6:95:DC:18:F2:9B:8D:2D:F7:5C:9A:41:09:50:6A:29:E2:54:59
Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial: 7C9438C5E9668B880AFF21C185EC9434567626FE
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231322e302f32322d3232203d3e2030.roa
Signing time: Thu 04 Jun 2026 10:08:22 +0000
ROA not before: Thu 04 Jun 2026 10:03:22 +0000
ROA not after: Thu 03 Jun 2027 10:08:22 +0000
asID: 0
IP address blocks: 1.119.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 22:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:94:38:c5:e9:66:8b:88:0a:ff:21:c1:85:ec:94:34:56:76:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Validity
Not Before: Jun 4 10:03:22 2026 GMT
Not After : Jun 3 10:08:22 2027 GMT
Subject: CN=51D695DC18F29B8D2DF75C9A4109506A29E25459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:ff:b0:f1:60:73:36:31:2b:a4:f2:ba:42:
97:41:6b:ed:d3:2c:7a:ab:26:2b:13:cf:d9:55:ce:
2b:37:24:a1:a8:d8:16:95:f1:3c:a0:ce:9a:57:3a:
50:a0:5b:7e:a0:8a:e1:87:99:c1:58:12:7e:6f:bb:
95:75:4d:9b:64:ae:12:e0:45:43:a4:a2:88:2c:2f:
6a:5c:4f:9a:6e:6d:de:5e:da:2e:9c:a3:8f:e7:2b:
89:3f:45:35:d2:60:0e:18:fe:d0:9a:e5:5c:47:af:
52:35:07:01:2e:1a:5e:ac:47:76:1f:1a:3e:70:29:
d8:f5:9d:18:61:9f:01:dd:64:ff:d3:8b:cc:df:d4:
7f:79:a6:ab:e3:3f:d2:f6:68:df:d9:3e:f8:bf:98:
16:72:00:bd:9d:57:37:ff:bc:c9:90:6a:db:b7:21:
ae:98:b8:bb:0d:1c:db:92:ff:1c:ce:fe:8c:29:90:
f3:11:09:b6:a5:71:0e:e5:b8:e2:4d:26:4e:e2:ac:
ec:d7:19:fc:bb:3d:31:f5:b0:42:89:e1:c9:1a:b2:
00:ce:31:5c:26:8c:67:47:2c:3e:ed:ce:74:db:e2:
82:c8:45:98:f0:77:61:9d:8f:24:a0:73:96:4c:17:
8b:1a:ee:9d:f6:fd:bc:38:69:8e:79:70:b6:c5:0e:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D6:95:DC:18:F2:9B:8D:2D:F7:5C:9A:41:09:50:6A:29:E2:54:59
X509v3 Authority Key Identifier:
keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3231322e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
90:55:18:78:6c:c3:d1:4d:a9:0f:2e:d2:65:38:9d:55:23:27:
d1:95:4d:2e:09:55:ac:e5:fd:2f:21:64:55:e1:ef:f6:ba:92:
3e:0d:0c:3d:a7:6d:24:c2:76:eb:fe:24:31:79:c9:6a:26:d8:
4b:4d:e3:46:48:e3:4f:4b:3b:9c:93:fe:8d:2a:bf:ff:2d:d1:
4f:00:59:a8:e7:9e:68:d9:d3:75:77:3d:98:69:6c:17:fa:90:
73:3e:e7:55:b3:41:4a:71:6b:46:3c:3c:2b:a8:7f:f4:e0:ea:
22:af:3d:ef:c7:af:4d:93:1c:45:1c:76:ef:92:52:03:34:f5:
f5:36:30:8e:35:a4:a5:ce:3d:6e:16:28:13:af:cd:ec:10:ae:
12:9c:74:9f:63:12:4e:76:2e:50:66:8b:70:b9:6a:2e:7e:64:
8a:56:aa:6a:c3:64:94:a6:e0:4b:e2:fc:24:f9:4c:a5:b7:ca:
9d:7f:ad:26:9c:f2:1c:5c:13:64:f3:f6:74:ff:65:e4:c7:9b:
0a:00:92:da:bd:6a:f0:07:23:a0:9b:38:26:1e:48:c1:44:dd:
55:84:ab:38:c8:d6:64:ff:32:ea:b1:ac:41:2d:7f:79:da:41:
11:5f:ec:38:a4:73:87:ea:e8:98:78:41:8f:b8:f6:7a:3f:ea:
4e:90:f2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:53 2026 by rpki-client