
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e342e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e342e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: 8m2vz9W72ccCEOssFqpfL8XQsR/hnLW9XRCC/QevEgE=
Subject key identifier: 2B:D5:5B:F3:66:15:12:E3:73:23:5A:CF:C3:05:12:FB:06:E7:B1:25
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 4C668EB3D14BBBB989F4343044B20C7CCBF58F4A
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e342e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:54:59 +0000
ROA not before: Wed 22 Apr 2026 07:49:59 +0000
ROA not after: Wed 21 Apr 2027 07:54:59 +0000
asID: 38381
IP address blocks: 122.119.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:66:8e:b3:d1:4b:bb:b9:89:f4:34:30:44:b2:0c:7c:cb:f5:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:49:59 2026 GMT
Not After : Apr 21 07:54:59 2027 GMT
Subject: CN=2BD55BF3661512E373235ACFC30512FB06E7B125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:2e:b3:7d:74:60:79:56:91:8b:d8:89:33:
16:49:31:fb:3c:36:05:58:40:a0:ff:62:75:fc:60:
8a:31:db:76:85:c4:d1:fc:20:0d:72:f2:8a:d4:2d:
85:7e:cf:e4:32:4f:17:e4:91:96:fc:11:ba:de:af:
6b:bf:0f:f7:1b:2e:47:81:a7:bd:9d:95:f6:f5:55:
c5:ad:41:b5:37:a3:39:f9:db:01:01:43:bd:7f:b3:
4f:b7:18:69:5b:97:90:ac:16:9e:34:a0:a5:f5:4a:
83:28:ef:0f:94:9a:a3:31:c4:e9:42:5c:dd:cf:9e:
91:24:f7:74:a7:13:b8:1b:79:21:86:25:bc:c3:4a:
20:ba:35:8e:77:2b:3b:e8:5b:40:05:a5:04:f6:b6:
10:7b:2b:da:f6:60:91:b7:ef:42:3b:40:94:a6:90:
02:1e:62:bb:03:f9:54:5b:fa:05:2c:39:f6:41:95:
6f:e7:d0:70:96:7c:90:c7:8e:03:22:b2:f8:05:f1:
11:78:16:57:05:7c:f5:ad:01:20:b1:a2:b3:01:14:
6f:22:a4:76:c3:f0:ee:8e:c6:12:c0:34:38:94:bb:
a4:16:2a:3c:0a:30:d3:79:58:3c:0a:16:c9:9f:72:
0b:3f:41:7e:38:d3:94:02:75:4d:b2:bb:bd:ee:50:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:5B:F3:66:15:12:E3:73:23:5A:CF:C3:05:12:FB:06:E7:B1:25
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e342e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.4.0/24
Signature Algorithm: sha256WithRSAEncryption
68:24:cd:65:42:47:b4:62:63:2f:02:fd:45:7e:be:d5:82:ea:
ee:95:0b:2a:f4:f5:79:ab:65:77:55:11:cf:e1:7f:1b:35:4c:
72:86:c3:60:3d:95:1b:d5:00:dc:38:27:cb:b0:87:5d:78:a2:
90:c2:9d:ee:8e:c7:97:41:2a:19:2f:f6:99:32:bc:9f:9b:22:
89:68:0b:6b:3d:66:17:97:e8:e2:4f:5e:20:dc:a1:e2:50:6a:
19:55:98:bb:e8:f8:47:92:51:a5:59:b3:46:93:78:1e:cb:bb:
9f:4b:62:7f:d2:be:84:0f:f9:d7:f5:28:13:ce:f5:02:68:0e:
66:61:b9:55:5c:74:b7:3e:31:c1:db:66:99:0e:36:2f:f1:4d:
58:0c:10:bf:07:68:a7:a9:15:38:0d:ac:1e:2e:8f:8a:57:73:
99:de:31:07:05:1c:fb:b9:b2:68:a8:df:bb:71:a5:f5:61:ef:
e2:8d:5d:fa:e2:21:86:9f:7b:be:d9:b0:9c:3d:8d:66:65:f7:
27:a0:16:53:4a:f4:54:0f:80:99:c1:20:22:76:3e:3d:41:75:
4a:9b:d2:83:64:28:10:be:97:b6:fb:17:2a:57:8d:1d:7a:f5:
61:08:57:57:e9:80:15:5c:68:ac:da:1d:56:10:6d:b3:11:50:
b5:e3:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:28 2026 by rpki-client