
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32362e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e32362e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: b3MZI+8A6XAPOwsLVG6Ew1jCoH6J1SjMVTeOACHNqvg=
Subject key identifier: FE:88:7B:FF:06:C9:2C:23:A7:A1:EC:4F:BB:57:FA:E2:9A:EA:A9:4D
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 34A6133958DECA6EA66B592805735D2731A0B61D
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32362e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:57:30 +0000
ROA not before: Wed 22 Apr 2026 07:52:30 +0000
ROA not after: Wed 21 Apr 2027 07:57:30 +0000
asID: 38381
IP address blocks: 122.119.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a6:13:39:58:de:ca:6e:a6:6b:59:28:05:73:5d:27:31:a0:b6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:52:30 2026 GMT
Not After : Apr 21 07:57:30 2027 GMT
Subject: CN=FE887BFF06C92C23A7A1EC4FBB57FAE29AEAA94D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:46:2c:d8:76:7d:12:4d:6f:4c:d7:13:1d:
37:ab:ff:3a:02:ca:2b:79:2b:dd:ae:f0:30:4f:e4:
db:09:6d:7c:9b:52:88:30:fb:4f:c4:eb:02:b7:08:
f2:9f:bf:cd:86:74:94:e6:0a:0d:28:20:d8:31:de:
fa:3e:b3:7e:65:25:66:cb:20:7b:2e:39:41:d7:b1:
92:17:b1:8f:f9:02:45:eb:c1:60:b5:8c:7e:20:de:
f3:4b:96:52:8c:14:fb:e7:34:e0:40:03:54:68:87:
03:cd:f2:a0:1b:33:f7:c3:62:a3:b9:70:90:41:0e:
05:a0:42:23:a3:ff:30:51:05:ba:1a:19:5a:82:c1:
f4:3a:62:7d:92:ae:c5:63:fc:08:a8:70:aa:fe:16:
d6:bb:82:93:71:77:d7:2d:f7:99:d1:00:44:1e:50:
dd:bd:af:ac:c0:f2:7f:4b:d6:12:57:c3:25:36:e1:
9d:7d:6a:a9:94:ff:ba:96:40:86:f6:81:38:b8:b4:
c0:a3:ea:34:ef:19:28:20:88:c6:99:ad:16:eb:34:
05:69:61:f5:48:d0:db:1c:4e:6b:bd:06:10:25:a0:
04:d5:bd:2b:42:45:5f:77:58:06:cb:44:cb:73:2b:
71:2c:1f:f4:55:f8:1e:42:69:b8:09:5d:6b:89:8a:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:7B:FF:06:C9:2C:23:A7:A1:EC:4F:BB:57:FA:E2:9A:EA:A9:4D
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32362e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1f:48:36:66:8c:97:6b:eb:a2:3f:c4:a9:06:36:a6:fa:71:
f5:d8:78:6b:a7:98:31:51:b4:dc:b3:75:53:5a:74:6a:04:12:
d8:44:8c:5b:8d:d0:e9:5e:f7:9a:69:40:59:1c:ce:11:5c:36:
ea:f6:53:9a:79:3c:46:cf:f6:5d:81:43:3c:f3:6b:c6:1a:6b:
a8:e9:56:b0:ec:66:0a:42:40:b8:cf:82:af:1f:70:73:e5:37:
20:60:81:bc:e8:2a:05:93:41:f8:3e:7c:cc:5f:cd:ec:d5:7f:
63:b7:1b:94:ef:ab:d9:72:c6:c2:78:01:69:ac:39:67:e6:20:
b4:9c:59:26:30:77:f8:38:87:d9:bb:3a:f6:42:b0:e3:34:ae:
c0:0b:5a:2d:5a:a6:ab:eb:9d:de:5f:b4:c4:60:d2:85:ac:f2:
06:82:cd:cd:27:96:30:f1:1a:9b:08:58:01:10:3e:c5:51:e5:
44:d7:8d:99:22:20:4f:80:a1:46:b5:90:fc:73:26:14:04:86:
93:61:20:cc:8c:36:8b:e9:69:a0:4c:b3:68:60:b8:18:2c:2b:
38:9c:e9:00:3c:85:9a:e7:df:84:7c:3c:af:80:8a:cb:3f:21:
9b:77:d5:88:44:74:13:c5:fc:fb:c6:00:55:2c:12:b4:8d:b3:
ef:b4:91:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:35 2026 by rpki-client