
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3233362e302f32322d3234203d3e203139323131.roa
File: 3131392e35392e3233362e302f32322d3234203d3e203139323131.roa (raw, json)
Hash identifier: dqUvN6QzQ3CgG0wWBvSAAAAVXVl2udDKFTigmUUP4uY=
Subject key identifier: 77:63:8B:9E:E0:2C:06:AF:84:F1:C3:59:5D:9D:37:BC:F2:B1:10:DD
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 777F1E8C93F3F3BC0BF70AD0D3970199B36121FD
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3233362e302f32322d3234203d3e203139323131.roa
Signing time: Mon 13 Jul 2026 03:46:33 +0000
ROA not before: Mon 13 Jul 2026 03:41:33 +0000
ROA not after: Mon 12 Jul 2027 03:46:33 +0000
asID: 19211
IP address blocks: 119.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7f:1e:8c:93:f3:f3:bc:0b:f7:0a:d0:d3:97:01:99:b3:61:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:33 2026 GMT
Not After : Jul 12 03:46:33 2027 GMT
Subject: CN=77638B9EE02C06AF84F1C3595D9D37BCF2B110DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:7f:26:73:da:ad:e3:5d:32:34:74:a8:d8:
18:ca:26:db:e3:62:38:d3:e8:ce:2c:ef:bc:d5:08:
e3:ef:d9:2d:38:b0:94:19:36:1a:31:42:96:ba:0b:
d7:01:39:13:38:5d:46:45:30:94:03:46:f3:b9:99:
31:a7:60:98:a7:ef:d6:e2:91:99:6c:e5:a0:a9:48:
c6:28:60:32:23:48:69:f3:59:ee:7d:f4:09:02:f6:
18:6d:2a:25:9c:e6:6d:bc:4c:a8:0f:26:92:17:f2:
7b:f9:63:82:33:20:df:d6:ab:94:00:09:68:35:5f:
eb:1c:4e:3c:eb:69:b1:1a:4f:88:4f:5b:d0:52:2e:
c2:ad:52:41:3b:52:a3:d9:ec:b4:53:d9:b1:e5:ea:
af:aa:1c:61:63:39:39:e7:cc:3a:b8:f0:00:a8:1d:
50:67:ec:cd:df:a4:a4:15:0e:99:22:db:bf:a7:0d:
59:aa:99:a1:c5:28:cb:a3:f5:5e:65:33:37:72:65:
24:a1:18:06:7d:2b:10:55:93:76:29:b0:98:38:05:
f2:4b:d9:50:ef:d4:b6:4d:bd:fa:71:6a:cc:75:15:
1c:c4:f2:20:f5:3e:a2:49:fc:ff:ac:d6:65:b9:57:
3b:f4:52:91:16:bc:08:2f:4b:36:ef:30:c8:ac:dd:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:8B:9E:E0:2C:06:AF:84:F1:C3:59:5D:9D:37:BC:F2:B1:10:DD
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3233362e302f32322d3234203d3e203139323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
31:c1:1f:fd:9f:f2:17:4c:e4:ff:17:12:60:10:3d:3d:7e:84:
f9:f2:98:4e:df:34:08:99:30:5a:fb:3a:a5:87:37:e2:db:b7:
75:ab:1a:16:bb:6c:b3:17:fe:9f:35:b5:2d:2d:ab:4b:aa:29:
6b:6a:ad:ac:56:88:38:cc:58:1e:94:f1:f2:99:4b:9c:ae:ab:
fa:e5:b0:d0:66:f1:46:55:06:3b:71:81:de:40:a3:d6:c3:55:
9b:e5:7c:fb:2b:24:b3:f9:2e:d6:ca:65:af:93:cb:ab:29:b6:
89:99:b0:d3:66:4c:1f:87:38:44:35:ff:24:ef:b2:5c:14:09:
c1:c9:13:d7:d4:7b:66:02:e0:1d:80:f1:93:e2:cf:82:ef:1d:
1c:82:82:9a:e1:34:7b:22:53:e0:01:6a:d3:db:59:f7:17:ba:
d2:50:e6:0e:5e:63:52:bf:3e:96:3a:8d:ab:40:22:c8:15:74:
56:76:88:c1:0f:75:4a:11:67:41:43:17:a0:f9:74:fb:08:1f:
23:9b:79:e2:c9:f0:d7:03:be:98:04:ce:57:bf:ef:83:99:52:
ed:5f:5d:f9:fb:31:c5:90:69:68:1a:16:7d:0b:6e:d7:19:73:
2c:d5:8b:ac:a1:6f:de:99:c4:19:ec:fb:91:4f:21:52:8c:ee:
68:86:b4:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:31:56 2026 by rpki-client