
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa
File: 3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa (raw, json)
Hash identifier: P7pCoOB8iaimfeH1P7+AUpcLI+1RvDBkLNDVjOwAhoY=
Subject key identifier: C1:3B:85:FD:8C:E0:2C:B5:BC:10:27:98:00:79:AF:F8:81:E1:A4:5F
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 24368E15E41C87F2AAF90D30E35F77EF296B7772
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:57:29 +0000
ROA not before: Wed 22 Apr 2026 07:52:29 +0000
ROA not after: Wed 21 Apr 2027 07:57:29 +0000
asID: 38381
IP address blocks: 122.119.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:36:8e:15:e4:1c:87:f2:aa:f9:0d:30:e3:5f:77:ef:29:6b:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:52:29 2026 GMT
Not After : Apr 21 07:57:29 2027 GMT
Subject: CN=C13B85FD8CE02CB5BC1027980079AFF881E1A45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:18:51:1c:a4:fa:7c:7d:dc:a9:4f:cc:77:
cb:12:3d:6f:7c:cb:7c:47:cb:ae:7e:00:d0:e3:b2:
69:7e:2d:4a:0b:a1:32:d0:18:ca:c3:23:19:8e:ce:
a7:08:37:69:41:bd:ab:c0:80:3c:bd:34:63:5c:63:
ed:40:43:e0:55:d7:e3:10:8c:d7:30:57:fd:dd:26:
f5:04:f5:d4:bf:1d:27:ad:f9:07:46:f2:37:3a:f8:
ca:42:bc:66:e3:71:66:a9:8b:fe:46:83:07:8d:bf:
26:0d:7e:49:ee:41:70:e1:f3:46:66:01:7e:cf:76:
55:3b:ea:fb:56:2b:46:fb:98:ee:63:17:8f:ba:5d:
fc:b8:30:3f:b1:c7:48:ff:ca:1e:75:01:ce:93:a0:
bd:ae:f9:14:20:f2:45:9f:90:83:81:6e:d7:f3:cc:
83:7d:e8:a2:63:15:53:37:90:49:3f:86:06:d1:25:
33:e7:03:94:f2:b0:dd:41:3f:3f:00:51:94:7d:e9:
42:3b:f9:cd:d0:b9:96:07:bf:7f:86:28:de:78:d0:
68:87:ae:a4:4e:5b:1f:96:bc:48:67:53:4b:f1:4b:
9e:f0:e6:55:fa:c1:45:bc:e6:7d:5f:28:c0:48:b0:
40:97:6f:28:3e:de:67:10:af:97:7b:14:3c:20:f5:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:85:FD:8C:E0:2C:B5:BC:10:27:98:00:79:AF:F8:81:E1:A4:5F
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3233322e302f32332d3233203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.232.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d2:6f:67:51:35:d3:eb:e0:a8:1d:6d:43:2a:c9:b0:b8:80:
46:91:72:f0:34:a1:e3:6f:24:31:a5:bf:47:ff:cc:2a:07:51:
b1:fd:5f:c8:37:21:d7:80:e3:cb:9a:95:5d:77:00:02:c2:cc:
32:df:33:42:d6:92:cb:41:ee:b4:20:2f:b6:83:95:a6:ec:b9:
10:80:c9:6b:55:55:b7:19:19:c2:70:f1:f7:d0:17:9d:aa:f5:
d6:9f:29:99:0a:3d:05:06:ae:f6:dd:66:7f:fd:7d:c8:bb:11:
c8:eb:81:c1:46:5a:13:fb:b0:7f:f7:d3:11:fb:15:da:12:d1:
28:35:1a:0d:5f:10:18:42:2a:81:7d:3e:12:db:75:3a:30:22:
4e:8a:d1:0b:ad:05:07:86:36:4b:f6:94:37:d0:e5:23:fa:06:
8f:7b:9f:08:9a:b1:12:26:7b:25:f0:91:64:5b:26:27:2c:bc:
2b:c2:e0:13:c8:ee:a2:f9:4e:36:98:cc:0b:79:0b:90:d7:c2:
ce:fc:c2:1d:ec:38:cf:fe:75:ff:b1:4e:38:65:44:6b:11:06:
33:81:e6:17:2b:13:0d:75:24:47:cb:db:89:8f:12:e1:78:2c:
5f:4c:ef:1b:01:1d:6f:ba:09:14:18:24:e7:a1:9d:ac:38:9c:
a3:10:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:27 2026 by rpki-client