
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa
File: 3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa (raw, json)
Hash identifier: lv53noT2X5eaiI1tnOSXvfADsas3LsuXeApSZgepJgg=
Subject key identifier: C4:8E:71:2F:21:AA:CB:9F:AB:70:23:E2:47:F6:EE:57:8F:EE:6E:9F
Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial: 564E5C0C69C17685B6E0EE3957D662B40013A89E
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa
Signing time: Mon 20 Apr 2026 13:16:41 +0000
ROA not before: Mon 20 Apr 2026 13:11:41 +0000
ROA not after: Mon 19 Apr 2027 13:16:41 +0000
asID: 24427
IP address blocks: 119.235.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4e:5c:0c:69:c1:76:85:b6:e0:ee:39:57:d6:62:b4:00:13:a8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Validity
Not Before: Apr 20 13:11:41 2026 GMT
Not After : Apr 19 13:16:41 2027 GMT
Subject: CN=C48E712F21AACB9FAB7023E247F6EE578FEE6E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:2a:c4:87:67:86:77:06:45:41:34:52:a9:
71:16:36:0b:d1:18:43:46:60:3b:d7:dc:62:12:4d:
a1:c2:f6:89:43:f2:d0:40:d6:cf:61:79:f0:5d:e5:
4a:b4:55:e3:25:3e:15:8e:96:73:2a:db:ec:a1:12:
dd:84:91:ce:f7:70:b1:bd:e1:b4:8f:fe:05:56:71:
2a:d5:3b:36:dc:d8:39:b2:29:b3:0e:79:48:12:a2:
89:7f:b5:de:60:d9:cd:70:46:e9:39:73:2d:61:ed:
8f:c4:19:42:c4:e5:64:72:36:22:3a:28:6c:b2:23:
6e:7d:b1:55:37:15:ab:e0:45:83:2e:cd:ce:69:6c:
d2:6a:b8:74:62:d8:3a:2a:17:f0:dd:28:29:1d:4a:
ec:e1:33:aa:54:16:ea:df:84:f0:ad:a6:60:e8:43:
49:39:7f:87:3f:85:23:35:eb:08:38:2a:28:16:49:
b1:f6:ba:7e:db:70:86:a0:4e:92:29:30:69:6c:80:
6e:a8:f5:c5:0a:3e:bd:20:c6:3e:c0:a0:35:3e:c9:
1d:4e:30:15:35:d1:96:a3:5d:7e:90:1a:35:c5:7d:
5b:27:7f:95:d1:5f:f6:9f:74:f9:e1:f4:a4:48:cf:
43:86:94:7d:bb:95:44:e4:44:8a:f2:61:9d:44:b4:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:71:2F:21:AA:CB:9F:AB:70:23:E2:47:F6:EE:57:8F:EE:6E:9F
X509v3 Authority Key Identifier:
keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.235.161.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ce:60:33:78:0c:a8:91:71:bd:06:1e:58:f7:38:1e:b0:85:
ac:cd:93:74:e2:99:c8:4d:99:37:39:db:3c:06:90:1f:c9:55:
c4:8b:08:89:4c:e4:84:e4:67:65:ad:b1:f8:53:84:d8:b5:98:
ac:13:ef:48:a5:20:dd:35:cf:39:45:7a:8a:78:1d:8b:76:d3:
b1:23:9e:4e:ae:5a:31:6f:3e:20:05:23:09:89:e4:2d:12:34:
9f:a1:a0:6e:15:3d:8a:06:44:50:eb:27:c1:91:20:55:74:ca:
57:d8:9b:7c:c8:64:94:5a:46:64:63:06:6d:5e:6e:90:1e:7d:
e1:13:a8:08:95:ca:92:3d:87:35:2d:e6:aa:bd:c0:4a:87:cd:
5a:c3:3c:34:e2:c1:d3:d7:b7:d9:86:4e:91:1d:01:18:97:e9:
b9:e3:ab:3f:be:e0:d4:6d:b5:05:14:cf:54:14:aa:93:f7:7d:
8c:71:44:bd:b1:a6:60:d0:e4:fb:e3:44:de:9d:53:83:4a:6c:
77:d6:a9:46:39:0b:f9:91:1b:07:ea:2e:89:35:05:37:30:4e:
a0:bc:c1:2f:1e:8b:07:7e:11:57:86:59:29:ee:0e:af:87:9d:
ac:66:95:52:fb:05:57:c9:e6:e0:ff:20:4c:2d:83:a4:bc:b5:
ab:c9:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:33 2026 by rpki-client