
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa
File: 3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa (raw, json)
Hash identifier: mGhhS9V+FPXHBGr0eZP7LW1/tN5GxJ8237aMyOgPCuA=
Subject key identifier: 97:24:AA:14:02:56:93:F4:C8:3E:A8:D8:89:92:56:AB:15:86:2F:D6
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 4A918266BF2B20BA7A780443EDA1AE18D4067E81
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa
Signing time: Fri 08 May 2026 08:29:37 +0000
ROA not before: Fri 08 May 2026 08:24:37 +0000
ROA not after: Fri 07 May 2027 08:29:37 +0000
asID: 63631
IP address blocks: 119.161.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:91:82:66:bf:2b:20:ba:7a:78:04:43:ed:a1:ae:18:d4:06:7e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: May 8 08:24:37 2026 GMT
Not After : May 7 08:29:37 2027 GMT
Subject: CN=9724AA14025693F4C83EA8D8899256AB15862FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:c6:0e:df:60:98:78:28:a3:f3:c7:84:e8:
c2:06:39:33:1d:56:13:4c:fe:f0:d5:23:0d:d2:f1:
3f:98:fd:04:65:1a:91:f4:0f:f5:b0:a7:86:a7:25:
52:d6:1a:0f:2d:9a:c9:a5:b1:f7:5f:3b:55:e4:c6:
96:70:1a:61:12:3c:71:bb:e3:00:b1:4f:b9:90:07:
ba:92:17:e8:4e:42:f2:c8:97:81:50:06:a7:71:3f:
46:e2:50:fa:1d:e3:c7:d6:c3:4f:1a:62:35:9a:e2:
dd:96:8f:9b:bb:6c:9d:51:71:00:3e:74:ea:b8:c7:
82:cc:49:a6:07:61:80:d0:90:8e:f6:8b:5d:06:aa:
89:13:b7:3b:64:0d:93:80:98:48:87:74:7f:81:e9:
7c:d9:cc:b8:d4:3a:15:41:bf:f1:c0:c2:5d:29:f0:
01:02:9b:f8:54:94:a1:b5:dc:90:0e:c8:94:e8:0a:
82:52:ca:75:ec:73:6c:78:df:6c:0c:c7:5d:99:8c:
51:f5:e5:87:a0:e0:10:92:31:dd:0e:49:bf:de:16:
84:ab:5f:73:eb:fc:37:68:ce:f1:17:2a:f3:9f:8b:
f1:2e:c0:b0:4e:65:e9:cd:45:fe:09:38:9d:24:d2:
c2:ee:f0:28:78:ec:f1:df:07:cf:2d:88:56:a4:6d:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:AA:14:02:56:93:F4:C8:3E:A8:D8:89:92:56:AB:15:86:2F:D6
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:85:d8:28:c3:b3:59:67:d5:e8:59:5c:39:72:db:e4:97:d7:
cf:b7:09:8e:1c:26:d2:d7:c1:d7:81:a5:37:50:81:b4:38:3b:
c7:75:51:db:ea:e9:ba:e4:cd:72:b6:70:e3:7f:a9:fd:c9:ec:
c2:9f:76:e0:d9:32:4f:60:a4:f8:10:79:d2:ee:93:b8:5e:08:
d4:a8:26:b8:59:ee:59:b6:98:01:c7:ac:29:b7:ab:c5:fc:62:
72:82:22:03:4a:18:94:f2:81:43:80:a6:d3:24:c4:ba:aa:ad:
96:fe:b6:cf:12:68:b1:7c:a2:79:39:27:a9:35:ae:69:0f:75:
52:4f:48:6e:cf:50:74:e8:b2:c0:56:47:17:bc:15:c4:80:97:
e1:2c:76:92:ee:62:af:86:7d:67:32:5b:17:74:e6:fa:f1:6d:
00:8d:d6:3c:9c:05:ad:e0:af:c7:9d:d9:10:b8:33:0f:02:02:
2b:10:a6:0b:93:f9:ba:c3:a7:bb:0a:8e:36:5b:a4:e1:e7:e2:
7d:87:ea:b7:41:9f:f9:03:99:1c:a1:6e:ea:9f:46:7c:a1:d1:
9d:c3:ec:ee:e8:8a:f9:4c:f9:4a:50:61:59:41:9d:fa:bd:8c:
80:f5:19:c0:5d:12:32:3d:c5:02:3b:0f:38:a4:bf:2e:19:bb:
42:b4:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:07 2026 by rpki-client