
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3139302e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e3139302e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: ts1h90h0vVeGaiJxHbmDlNwdaAAMKkRDYzlROEYYrPI=
Subject key identifier: C4:3B:0A:C2:19:17:B8:B9:E1:0E:1C:72:76:14:E2:48:DE:67:5F:E5
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 05719D9EAD0042822171E58D167B5F05BA6A4F6E
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3139302e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:55:00 +0000
ROA not before: Wed 22 Apr 2026 07:50:00 +0000
ROA not after: Wed 21 Apr 2027 07:55:00 +0000
asID: 38381
IP address blocks: 122.119.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:71:9d:9e:ad:00:42:82:21:71:e5:8d:16:7b:5f:05:ba:6a:4f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:50:00 2026 GMT
Not After : Apr 21 07:55:00 2027 GMT
Subject: CN=C43B0AC21917B8B9E10E1C727614E248DE675FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:5b:71:8d:8b:e7:24:c1:66:01:df:82:a4:
91:ec:07:a8:31:5f:98:be:7d:7e:82:95:63:5f:50:
e1:c0:97:3f:af:d2:37:9a:b8:b8:de:3d:39:6d:3e:
10:d4:ff:da:3f:57:6d:ff:17:91:eb:55:8b:01:54:
ce:df:ea:82:cf:7c:c2:25:50:74:2c:8e:06:47:02:
6a:40:63:97:5b:90:39:52:bf:40:8f:81:79:e4:5b:
26:f8:12:76:cc:b8:68:01:3c:1c:29:7b:88:d6:03:
64:95:01:82:d3:51:e6:8f:7a:89:53:fb:af:a1:6a:
85:68:f3:26:68:f9:0e:df:92:78:cb:00:64:bb:10:
f0:c3:fe:db:af:da:3c:64:81:f4:31:45:13:54:64:
e6:9c:c1:c8:9e:15:79:03:fd:85:73:47:24:e4:b6:
2e:42:7a:1a:29:a1:46:de:ce:f4:a7:82:f7:a6:2a:
60:45:f5:42:ff:38:8e:c3:d0:44:95:0c:e8:a5:cc:
84:a5:92:f6:7b:5b:a6:ce:23:72:28:8c:bc:21:d4:
56:10:0a:59:19:5e:51:ea:96:1f:78:d7:96:58:10:
ad:d0:de:7f:5c:f0:87:83:2d:0a:72:4d:68:83:fb:
e9:79:81:d6:fa:09:e3:4d:b9:ce:4f:f6:1d:ad:ba:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:0A:C2:19:17:B8:B9:E1:0E:1C:72:76:14:E2:48:DE:67:5F:E5
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3139302e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.190.0/24
Signature Algorithm: sha256WithRSAEncryption
10:47:8a:c4:77:41:0c:7b:68:06:90:9d:59:53:46:f9:75:0c:
08:51:6a:02:58:9b:94:25:6d:cd:bc:02:d6:f6:18:98:fa:ea:
98:42:c2:ec:2d:03:2b:49:79:bd:47:e2:1d:2b:13:e4:bd:80:
25:81:57:7e:fd:0e:fa:2c:8c:8d:a5:22:10:c0:7a:a5:2d:83:
0e:5b:d4:ce:e8:d7:58:1e:85:47:f6:17:3c:be:ad:90:8b:cb:
6c:12:8a:9b:fa:25:33:b2:20:fe:a2:fc:25:81:af:16:5d:09:
af:bb:e6:6c:dc:c3:6a:84:f3:8c:60:a8:25:37:a9:f3:5b:25:
31:9f:72:3f:0c:da:c2:8f:a9:28:65:f8:eb:81:03:c6:ea:d7:
0a:50:a7:9e:9b:ba:29:51:a0:f8:0d:94:ec:c9:20:65:6c:1d:
26:29:00:c4:66:d2:90:2a:a8:2f:1a:2d:04:ac:3a:34:ff:81:
0c:9c:88:4b:6e:99:38:26:09:ce:2f:28:70:31:0c:8d:17:d7:
7d:a4:d5:eb:b1:b2:32:99:cc:63:0c:eb:07:df:62:9e:87:c4:
14:0e:57:91:94:ab:06:c2:6c:64:21:6c:c3:f2:b5:c5:9f:8c:
2c:4b:0b:98:96:a7:e6:7c:d7:38:69:bc:cb:ec:1a:ba:35:cd:
9b:95:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:44 2026 by rpki-client