
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: xGwID/Qt4vXrkjAL94dRHrvkluCjapY/LmZBSWSHdE0=
Subject key identifier: EF:12:A8:C8:A7:1D:EB:50:A0:16:7E:33:E6:9F:51:46:48:CF:CF:44
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 52A381BB6D761237679BA7798BEAD0813BE8919D
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:54:59 +0000
ROA not before: Wed 22 Apr 2026 07:49:59 +0000
ROA not after: Wed 21 Apr 2027 07:54:59 +0000
asID: 38381
IP address blocks: 122.119.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a3:81:bb:6d:76:12:37:67:9b:a7:79:8b:ea:d0:81:3b:e8:91:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:49:59 2026 GMT
Not After : Apr 21 07:54:59 2027 GMT
Subject: CN=EF12A8C8A71DEB50A0167E33E69F514648CFCF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:9d:bc:1c:7a:c3:a5:c6:d0:f2:e4:87:ea:
14:00:77:9a:bb:23:4d:08:47:b4:fc:cb:b8:bb:55:
ef:84:0d:ee:88:dd:f6:da:97:51:ac:35:f4:3a:f8:
ea:3a:72:48:a2:dc:7f:c8:cd:b1:a4:e5:32:62:b0:
2a:59:f3:c5:04:89:84:94:70:42:c3:70:10:9d:0b:
ff:e6:1e:9f:ab:00:cd:5f:79:a9:21:ba:1a:1b:18:
1d:b7:4c:7a:82:94:8f:4f:ce:b9:af:d2:5e:eb:d6:
f2:7a:9e:a9:63:2f:5a:5f:dd:c6:e5:09:47:4b:ba:
5d:0d:6b:81:10:88:06:e7:c7:ef:ee:16:09:61:bb:
56:9a:55:7c:ef:df:7f:4e:70:95:60:fc:f0:13:94:
9f:c1:2e:a4:d7:bd:5e:e2:37:79:b4:71:08:ec:98:
6c:0d:96:39:23:03:c7:eb:e5:be:76:ec:5b:28:71:
cf:87:9a:35:2f:9b:bd:54:2d:ea:db:2b:b8:0a:c6:
85:1c:ec:d8:28:cd:d7:e2:f1:64:aa:97:54:37:85:
19:31:d5:8f:97:6e:77:d9:be:08:e4:0e:20:0b:dd:
c4:0a:5e:ce:cf:59:20:67:00:39:b2:11:ab:f9:4d:
1d:2a:55:3f:94:ba:1a:1b:24:6f:b4:68:2f:d1:ce:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:A8:C8:A7:1D:EB:50:A0:16:7E:33:E6:9F:51:46:48:CF:CF:44
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131322e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.112.0/24
Signature Algorithm: sha256WithRSAEncryption
87:91:e8:31:05:02:9b:36:8b:87:16:72:bd:87:69:73:40:f8:
1c:cb:65:3f:e2:61:e4:67:d6:ac:3a:34:0c:7a:05:95:d3:38:
0b:21:0b:c2:d1:e3:0a:14:22:79:2c:76:1b:f9:53:5d:75:ee:
59:62:59:b7:ff:c6:4f:1e:de:db:10:e9:7a:e3:6e:29:c5:11:
73:ba:ea:86:98:2e:62:41:bd:de:3e:d3:32:e3:54:38:9a:24:
cd:0e:02:6b:72:63:3a:fe:db:03:4d:86:8a:00:ed:83:97:ba:
ee:e2:91:82:0d:d3:87:e6:30:6f:b8:cd:4e:a9:ce:b2:0f:90:
41:dc:9c:35:98:d2:66:8e:a9:40:54:fa:cb:56:be:dc:6f:e9:
40:ff:e8:d3:4e:d9:5f:1e:60:4c:48:98:3c:1a:24:38:02:20:
77:d8:f7:1a:9a:05:68:e6:47:8d:15:c3:b0:15:7c:2f:02:39:
9a:0c:c0:16:6d:57:c8:b7:f7:d3:2c:c4:f0:83:23:c6:01:91:
f8:a2:6a:ef:0b:1c:39:f2:21:40:5b:ca:e7:ac:93:c6:bd:86:
eb:97:aa:86:be:7f:3b:ba:e4:f9:bc:0b:27:d1:b5:bc:c8:0a:
8c:b9:a2:62:10:e1:7b:67:77:29:c1:59:e8:e0:60:9e:4e:44:
8b:93:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:46 2026 by rpki-client