
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131342e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e3131342e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: UQTJdtQ6F7KudpUwsKM4ZGJfKvrerxPsUophwOCu4Fk=
Subject key identifier: E5:15:FF:D3:3E:7F:74:6B:D3:64:42:2B:78:75:41:BC:83:D8:7F:A8
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 3CBFE4154317ECBFCB87EB85A769509C318D488E
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131342e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:57:30 +0000
ROA not before: Wed 22 Apr 2026 07:52:30 +0000
ROA not after: Wed 21 Apr 2027 07:57:30 +0000
asID: 38381
IP address blocks: 122.119.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bf:e4:15:43:17:ec:bf:cb:87:eb:85:a7:69:50:9c:31:8d:48:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:52:30 2026 GMT
Not After : Apr 21 07:57:30 2027 GMT
Subject: CN=E515FFD33E7F746BD364422B787541BC83D87FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:99:47:6d:13:d1:e6:cb:90:4b:45:22:b4:
92:e2:f0:dc:ae:2a:34:b3:8c:84:55:c3:c9:8d:ff:
02:45:7f:2d:11:ed:2e:a6:fd:ec:11:e3:bb:19:91:
86:a4:a3:e5:c6:21:2e:dc:04:95:03:c4:94:d0:fd:
57:22:73:76:f2:c1:8b:5f:8a:7c:a3:2f:fc:27:d4:
81:91:43:61:c6:af:cc:22:d1:7b:9e:b2:78:e3:b3:
64:b4:4d:0a:c5:f8:7e:6b:63:34:f5:cf:b4:df:1c:
13:c2:eb:85:32:cd:9b:cd:5d:e6:c3:21:93:34:35:
38:a3:53:47:49:0e:77:12:23:22:26:cd:f1:6d:67:
bc:03:e4:a8:ae:d4:c3:5e:d6:21:05:a8:21:58:36:
7a:c2:d8:50:5a:38:16:9b:85:25:f2:80:4d:e1:ee:
a6:94:e6:e0:21:ec:87:08:d0:fc:f8:6f:5f:fc:ef:
98:a7:ed:87:2f:ad:cd:ce:32:a0:8d:03:4b:c1:94:
b4:82:93:09:8d:ae:30:f4:e8:c5:2f:26:ed:b6:c5:
32:b7:7c:21:56:18:0f:24:9f:9d:b7:51:34:2c:21:
ef:9b:7a:5e:8e:d2:ac:f9:08:dc:76:91:1c:d7:50:
00:ea:a5:5e:08:30:62:93:4c:6d:44:79:33:cb:09:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:FF:D3:3E:7F:74:6B:D3:64:42:2B:78:75:41:BC:83:D8:7F:A8
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131342e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.114.0/24
Signature Algorithm: sha256WithRSAEncryption
40:95:5c:01:cd:e1:10:1b:83:aa:17:47:82:29:ce:61:0c:3a:
73:e5:89:9c:31:4f:2d:4d:56:75:dd:d1:b8:7c:43:50:78:2a:
e7:34:fa:6f:55:4e:f9:8c:0a:69:77:e6:12:b6:e9:9a:68:22:
23:e4:c4:33:20:2d:dc:e8:b3:50:fb:05:d9:d0:6f:81:80:eb:
77:88:98:2f:bd:95:e0:57:3c:7c:c8:ed:51:c3:b9:0c:76:fb:
44:be:80:e6:3e:3e:e7:e7:d1:96:e8:d9:75:2d:06:e7:54:72:
f3:cf:3b:22:48:3d:55:72:aa:09:94:10:5e:ef:c3:8a:de:24:
89:05:f9:73:23:5b:f5:c3:ce:d1:e6:5e:d4:75:40:6d:85:94:
b9:52:8b:3a:80:8e:58:b4:dd:6e:72:f3:47:00:50:fe:17:8d:
35:78:bf:79:f6:b2:23:e3:ee:f9:ae:aa:be:3a:cb:6f:54:fc:
ad:8e:2a:2d:16:0b:9b:b4:48:7f:94:44:e2:59:6b:f4:83:71:
41:c3:d6:6e:a6:51:f4:2f:de:ee:66:6e:84:f3:0a:e2:2b:ad:
f6:4a:7c:53:3f:9b:ca:f7:f5:94:5a:39:7a:fb:27:ed:55:52:
b9:53:0f:9a:3f:a3:14:ee:58:58:d1:8f:72:09:2c:11:81:e4:
d9:60:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:12 2026 by rpki-client