
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e39362e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e39362e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: HBmdlpb06jtt1rH5zUGyvuBpZXPz5JpJ376GWPjrF+k=
Subject key identifier: 10:3E:1E:05:5C:CF:C4:11:53:7F:01:CB:24:81:A0:A9:53:13:E6:D7
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 0B5B57476B7B89ED2338BFD7D3DB75C1F1E78796
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e39362e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:55:00 +0000
ROA not before: Wed 22 Apr 2026 07:50:00 +0000
ROA not after: Wed 21 Apr 2027 07:55:00 +0000
asID: 38381
IP address blocks: 122.119.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5b:57:47:6b:7b:89:ed:23:38:bf:d7:d3:db:75:c1:f1:e7:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:50:00 2026 GMT
Not After : Apr 21 07:55:00 2027 GMT
Subject: CN=103E1E055CCFC411537F01CB2481A0A95313E6D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:a2:8d:68:48:e7:b0:94:48:f9:5f:8c:00:
08:e9:8d:c0:ab:42:f9:04:e9:a7:c6:78:6b:9c:4e:
df:74:a0:db:b5:75:1c:7c:93:9c:40:a6:7d:a7:d2:
26:6f:89:f0:ed:e9:56:07:89:5c:80:3a:13:45:f0:
d9:84:88:23:0c:a6:f4:a6:4f:f3:93:0b:ab:8e:15:
0c:d7:87:c1:dc:bc:c2:79:63:09:c8:91:2e:88:7a:
c9:17:29:42:06:c5:f5:12:85:93:d7:cf:18:42:af:
0a:2b:59:55:6c:2a:55:cf:eb:78:a7:9f:03:29:54:
2b:fd:34:bc:21:d0:99:b3:58:d3:7e:04:b6:73:35:
b7:41:d0:44:b5:af:d6:e1:4d:b5:30:38:5a:db:0d:
1d:b1:6d:ff:1a:1b:e0:be:5e:53:d7:ea:26:32:af:
62:f9:8f:16:5d:2f:a3:09:a0:d8:8c:65:a2:3f:1c:
84:fe:5b:d2:67:05:bb:99:e4:4e:c8:82:33:45:2e:
c4:03:a7:18:a2:9f:70:71:bc:4c:4a:11:39:e8:e2:
e6:49:35:be:d5:10:8e:5a:7a:3a:8b:b1:c0:33:f4:
13:d7:71:ba:cd:ad:95:d2:b8:7f:a0:f7:cd:26:08:
7e:53:b0:8c:f0:f5:f9:b4:b4:7c:fe:38:fc:c1:89:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:1E:05:5C:CF:C4:11:53:7F:01:CB:24:81:A0:A9:53:13:E6:D7
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e39362e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:eb:cc:db:a9:29:7e:73:a5:60:9f:29:9b:4f:d7:ea:76:53:
c4:4e:0b:a6:33:cc:f9:20:32:3b:57:d7:76:63:07:2c:34:d9:
6b:c3:61:4b:76:8e:4b:26:23:9e:a1:68:aa:21:56:c4:02:c5:
df:78:ee:88:c8:9e:8b:1e:7d:65:55:fa:e1:84:72:0b:77:92:
80:73:eb:d1:eb:cf:65:69:ec:f0:2b:54:15:03:9c:1f:af:24:
57:9f:7f:42:7a:d2:dc:d3:30:30:4c:4f:03:f7:3b:22:c3:b8:
fa:63:44:53:66:f9:05:0d:7e:6b:7a:8d:4b:e3:b0:47:84:43:
4f:de:d2:23:4d:19:7d:f3:ff:2d:dd:42:92:da:c7:cd:1a:2f:
38:fb:a7:ca:d7:18:56:a8:70:43:bd:cd:bc:09:bf:cc:23:f8:
b7:8a:cf:99:97:3d:97:63:72:8f:75:36:b3:24:c4:01:d0:3e:
83:fa:c6:d1:44:26:be:98:a3:c3:61:8a:dc:0c:70:c5:77:be:
92:7d:84:2f:eb:6c:45:49:de:db:c3:37:b7:c1:2a:13:87:fd:
38:01:3f:69:a5:05:78:ec:21:0e:38:36:aa:42:b7:bc:8f:9d:
fa:11:8f:8e:e3:2f:75:20:62:14:ec:f4:82:6a:19:a0:c5:89:
5e:d9:ae:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:37 2026 by rpki-client