
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31332e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e31332e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: nEgf8GcGhaWXod95fdtf8zZLdzJjND24Myo1B6TuNU8=
Subject key identifier: B4:2A:5E:91:F8:61:0F:AF:B9:3F:A2:A5:5E:D3:2E:A4:89:1A:C0:AD
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 428A48359E74B2808BF38EC3EAB4C346536C3EC1
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31332e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:54:59 +0000
ROA not before: Wed 22 Apr 2026 07:49:59 +0000
ROA not after: Wed 21 Apr 2027 07:54:59 +0000
asID: 38381
IP address blocks: 122.119.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8a:48:35:9e:74:b2:80:8b:f3:8e:c3:ea:b4:c3:46:53:6c:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:49:59 2026 GMT
Not After : Apr 21 07:54:59 2027 GMT
Subject: CN=B42A5E91F8610FAFB93FA2A55ED32EA4891AC0AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:55:e2:0b:65:db:39:67:05:21:05:77:c6:
ca:1e:45:a0:8b:96:d4:4a:0f:5e:29:a4:12:65:08:
c7:a3:49:65:0e:64:29:94:f9:36:2f:7d:45:c1:fc:
11:ba:45:15:d1:9d:21:87:9e:74:0c:7a:a9:ff:07:
ed:2f:dc:a1:e0:e0:37:f6:1c:64:6d:15:af:a3:9e:
20:c5:1f:5d:98:a1:3c:b9:a0:85:81:5c:fd:9d:6e:
11:36:99:92:4a:82:e4:a5:fc:4a:1b:6d:bd:82:a8:
ba:65:68:62:71:11:bb:0d:14:d4:68:71:b5:7e:d6:
61:57:53:4f:1c:ae:a7:4e:0c:87:a7:c6:c4:1d:60:
df:a5:a7:72:0f:7f:20:34:af:df:28:0a:75:56:a7:
bd:09:3e:1c:e8:95:5a:3c:59:f6:d8:a7:26:bc:06:
f9:da:56:55:db:36:29:f0:00:0f:a5:42:5c:84:d6:
88:21:13:84:7c:af:72:57:09:e7:e8:af:b7:bd:7c:
85:84:38:52:1b:b2:ed:3d:5b:17:5e:30:f2:24:2c:
7e:2e:55:7a:b9:39:34:39:6f:b1:47:1f:65:46:73:
ab:72:2f:94:75:07:4c:e5:ba:bb:0a:9f:a5:86:8d:
98:c1:3a:c8:ad:9d:be:ca:0d:54:9f:3a:ef:27:bf:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2A:5E:91:F8:61:0F:AF:B9:3F:A2:A5:5E:D3:2E:A4:89:1A:C0:AD
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31332e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.13.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d1:89:72:b3:1f:a5:61:7d:f2:5d:de:7d:2a:6e:7f:fd:c4:
66:bd:44:34:d3:39:65:09:79:3e:6d:c1:ed:47:81:10:14:77:
67:7f:13:70:7d:f7:da:1d:54:6e:87:5e:84:94:2f:92:71:54:
5f:6d:9c:06:1d:40:77:49:2f:87:df:03:e5:5e:1d:49:9e:84:
18:ea:97:57:df:e4:55:51:e8:54:89:ac:7f:8d:5e:06:71:8a:
63:ed:ab:5c:93:f4:d5:2a:7a:83:e4:44:6c:20:d2:8b:fc:96:
f7:ab:0d:76:36:e2:60:ec:5f:85:1e:00:a5:50:2d:51:88:c1:
51:17:9a:ac:c9:5c:13:3d:7c:0f:57:54:eb:66:3f:33:1e:24:
08:3b:90:f9:b6:6f:5b:5b:ac:6a:79:79:dd:bc:6f:26:50:ef:
b5:99:19:20:c4:ee:f1:30:bd:ef:f8:86:ee:fb:e6:5c:66:c2:
8e:85:3e:f3:b6:54:af:3b:d4:58:5d:2c:a4:04:68:c4:a5:f3:
7d:62:4d:75:e2:21:c4:72:6b:14:75:10:96:bb:88:cf:e2:a1:
1d:09:72:44:fa:e5:ad:0a:74:36:cc:dc:30:1c:dd:51:b4:f5:
b4:b1:8e:f5:ba:55:4f:34:4b:1d:67:8d:ab:59:ee:53:21:b4:
9a:8b:57:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:24 2026 by rpki-client