
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32352e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e32352e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: XyhzUtINmIFdgx2e6biALxzjGNJzGOjxh82n0cvgcx8=
Subject key identifier: 52:D1:E8:A6:0E:8B:6B:0D:66:C3:D0:B1:32:C5:3A:EE:53:88:06:C9
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 63CB65D09F4B5B4A4AA7A18CBF7EB03EBBA37478
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32352e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:54:59 +0000
ROA not before: Wed 22 Apr 2026 07:49:59 +0000
ROA not after: Wed 21 Apr 2027 07:54:59 +0000
asID: 38381
IP address blocks: 122.119.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cb:65:d0:9f:4b:5b:4a:4a:a7:a1:8c:bf:7e:b0:3e:bb:a3:74:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:49:59 2026 GMT
Not After : Apr 21 07:54:59 2027 GMT
Subject: CN=52D1E8A60E8B6B0D66C3D0B132C53AEE538806C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:84:ef:db:2f:af:66:9d:63:da:da:83:49:
dd:9f:56:a8:19:34:a5:04:fd:b1:b6:b2:ff:ab:36:
05:84:fc:99:52:98:a6:d6:3d:cc:e9:24:47:e2:12:
9e:bb:5b:ba:09:9e:0f:3a:66:16:e3:f1:bf:be:2d:
74:5b:0b:fc:3a:d9:42:49:3f:4c:2e:dd:c2:06:bd:
b4:50:b2:01:25:52:e8:26:ec:66:7b:6f:aa:03:77:
f4:03:38:f3:33:c5:ad:bb:51:04:74:31:d8:ea:4c:
a7:73:a7:93:71:13:e6:1f:80:18:35:34:a9:c2:e8:
8e:db:2f:cf:31:a8:a3:7e:3b:49:0d:dc:49:3b:06:
15:ba:db:86:30:e0:d0:e6:55:ff:fd:5c:6b:b3:57:
e2:39:e1:f9:0e:b7:eb:a7:d1:97:9e:de:ba:52:18:
fd:91:fa:8c:e3:1a:2a:8e:a0:e3:67:94:6d:67:8b:
ed:a1:9d:06:9c:7c:ea:5e:11:da:73:50:0a:4e:6e:
b6:49:9e:f4:df:7e:7e:1a:ac:1b:64:af:e9:98:c3:
a4:0a:b6:13:cd:bd:51:fb:48:4f:32:b0:93:89:fd:
37:2d:b1:af:12:90:5c:47:b5:3d:21:5d:52:9c:9e:
60:38:c1:b1:58:8a:4f:58:e9:42:64:b7:7b:f1:01:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:E8:A6:0E:8B:6B:0D:66:C3:D0:B1:32:C5:3A:EE:53:88:06:C9
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32352e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.25.0/24
Signature Algorithm: sha256WithRSAEncryption
91:06:89:b8:ed:f9:a1:66:02:a4:4b:52:7f:50:cb:85:94:2c:
ed:ba:66:7a:3a:5c:0e:f5:ac:31:d3:d8:14:28:19:ad:ec:bb:
dd:40:5d:65:f9:71:ca:73:36:a7:87:9a:cc:23:23:6b:12:25:
30:4a:05:dc:70:33:e3:b0:ac:54:2e:39:28:bb:78:5d:8e:ca:
7a:34:26:17:7d:2a:1b:c2:f5:4c:dc:c5:08:30:97:73:2d:6f:
04:95:5a:db:47:92:fd:9c:5d:6d:16:0a:ef:0a:77:63:65:1b:
15:15:cc:29:e2:45:55:14:b5:d9:e2:22:fa:be:ef:4a:b7:db:
47:e3:50:a6:b4:5b:4c:10:dc:2f:6a:1a:e5:f7:e7:38:1a:26:
e7:9c:70:cd:49:1f:a5:e9:3f:eb:ae:b7:fd:82:76:bf:cc:9a:
10:75:f1:63:ce:e0:f3:1a:3a:09:0d:d8:ba:68:07:99:b6:32:
6e:74:83:6b:7f:eb:9a:92:04:bb:40:fb:ad:c6:d2:6e:39:22:
5a:6d:3e:9b:c6:b5:05:db:ff:50:f2:76:94:2c:89:bd:82:5e:
b1:a2:26:cd:c7:5a:30:68:e0:c8:95:2c:bf:ce:90:8a:0e:39:
a2:27:77:8b:96:b6:89:86:d0:2e:72:2e:3b:ef:ac:2e:5f:89:
db:73:84:22
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUY8tl0J9LW0pKp6GMv36wPrujdHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy
MDgxMUQ4RDAeFw0yNjA0MjIwNzQ5NTlaFw0yNzA0MjEwNzU0NTlaMDMxMTAvBgNV
BAMTKDUyRDFFOEE2MEU4QjZCMEQ2NkMzRDBCMTMyQzUzQUVFNTM4ODA2QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFoTv2y+vZp1j2tqDSd2fVqgZ
NKUE/bG2sv+rNgWE/JlSmKbWPczpJEfiEp67W7oJng86Zhbj8b++LXRbC/w62UJJ
P0wu3cIGvbRQsgElUugm7GZ7b6oDd/QDOPMzxa27UQR0MdjqTKdzp5NxE+YfgBg1
NKnC6I7bL88xqKN+O0kN3Ek7BhW624Yw4NDmVf/9XGuzV+I54fkOt+un0Zee3rpS
GP2R+ozjGiqOoONnlG1ni+2hnQacfOpeEdpzUApObrZJnvTffn4arBtkr+mYw6QK
thPNvVH7SE8ysJOJ/Tctsa8SkFxHtT0hXVKcnmA4wbFYik9Y6UJkt3vxAV+dAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUUtHopg6Law1mw9CxMsU67lOIBskwHwYDVR0j
BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE
OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTkwMzg0MTMyMjI3MDcyMS8wLzMxMzIzMjJlMzEz
MTM5MmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHp3GTANBgkqhkiG9w0BAQsFAAOCAQEAkQaJuO35oWYCpEtSf1DLhZQs
7bpmejpcDvWsMdPYFCgZrey73UBdZflxynM2p4eazCMjaxIlMEoF3HAz47CsVC45
KLt4XY7KejQmF30qG8L1TNzFCDCXcy1vBJVa20eS/ZxdbRYK7wp3Y2UbFRXMKeJF
VRS12eIi+r7vSrfbR+NQprRbTBDcL2oa5ffnOBom55xwzUkfpek/6663/YJ2v8ya
EHXxY87g8xo6CQ3YumgHmbYybnSDa3/rmpIEu0D7rcbSbjkiWm0+m8a1Bdv/UPJ2
lCyJvYJesaImzcdaMGjgyJUsv86Qig45oid3i5a2iYbQLnIuO++sLl+J23OEIg==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:33 2026 by rpki-client