
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096740874986979330/0/3131392e3134382e3136302e302f32302d3230203d3e20313339313534.roa
File: 3131392e3134382e3136302e302f32302d3230203d3e20313339313534.roa (raw, json)
Hash identifier: wXAduiWjp7UFtX2sJ8+R8PFnchSO4/z/J9zAx35yjFM=
Subject key identifier: E7:61:6B:D7:FB:8E:3C:BF:57:D4:9D:D4:E7:DD:0C:C0:E7:E6:BF:93
Certificate issuer: /CN=48394F266C145173319F25807E0F7F0C02A6894A
Certificate serial: 149E1ED93842111BCDC5EF2966D433ED0DC66266
Authority key identifier: 48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/3131392e3134382e3136302e302f32302d3230203d3e20313339313534.roa
Signing time: Fri 24 Apr 2026 09:34:11 +0000
ROA not before: Fri 24 Apr 2026 09:29:11 +0000
ROA not after: Fri 23 Apr 2027 09:34:11 +0000
asID: 139154
IP address blocks: 119.148.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl
rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9e:1e:d9:38:42:11:1b:cd:c5:ef:29:66:d4:33:ed:0d:c6:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48394F266C145173319F25807E0F7F0C02A6894A
Validity
Not Before: Apr 24 09:29:11 2026 GMT
Not After : Apr 23 09:34:11 2027 GMT
Subject: CN=E7616BD7FB8E3CBF57D49DD4E7DD0CC0E7E6BF93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:99:90:ad:49:54:37:ae:43:bd:05:f8:42:
ff:aa:01:2f:26:2d:2d:1f:a4:38:08:15:bb:e7:2e:
dd:c3:a2:e9:30:47:a2:85:7f:7f:03:05:6d:e7:54:
5d:fd:40:8e:5a:55:f6:1f:3a:4f:7a:74:14:54:7b:
69:56:05:0d:b3:20:5d:96:98:5f:05:3c:25:3b:5b:
24:a6:e6:e0:c2:74:77:19:b7:c2:d7:a4:23:8f:52:
f7:c4:bf:12:9c:d9:2b:3e:23:12:01:61:51:77:1b:
de:c5:d9:2c:ff:73:7c:c2:a9:08:7b:b5:9b:6c:eb:
8f:bc:bc:52:fe:f2:a7:a8:59:aa:96:17:59:b5:b2:
98:4b:bb:35:0f:59:d2:75:62:cb:70:0a:f9:45:bb:
bd:7c:c4:be:c6:39:79:97:20:22:bb:e9:9c:4b:c3:
f1:4a:d2:14:39:c1:02:27:45:ee:57:be:9d:b3:8f:
f5:95:3f:35:91:42:19:ac:ad:b1:97:f0:b5:91:d1:
ce:25:c6:37:12:1b:b3:37:14:ed:59:70:b3:c0:e1:
6c:b1:e7:03:7c:b7:c9:4a:e9:fb:6a:f8:e6:2b:a3:
a0:7d:06:5a:4f:9f:5a:7c:33:36:97:c5:14:75:e2:
7a:09:da:14:94:fb:1b:06:d6:3e:96:44:e1:79:45:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:6B:D7:FB:8E:3C:BF:57:D4:9D:D4:E7:DD:0C:C0:E7:E6:BF:93
X509v3 Authority Key Identifier:
keyid:48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/3131392e3134382e3136302e302f32302d3230203d3e20313339313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.148.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:55:c7:15:c3:f1:05:76:b7:c3:d3:ca:a5:6a:e9:d2:32:2c:
7e:13:71:2a:d4:d2:d6:71:79:7f:de:e1:58:c7:fa:11:cc:26:
0d:4a:92:fa:39:9c:38:a5:00:c1:46:45:21:63:9e:34:cc:03:
5c:cc:d1:05:f2:01:33:4d:b2:14:7b:37:e9:9b:19:a0:f5:54:
c7:09:e1:43:ba:fd:cc:43:09:3a:91:dc:61:7b:83:51:33:82:
95:92:cf:fb:e7:d6:6e:88:75:a0:7f:8f:56:a8:7c:e6:a8:5b:
49:11:11:cb:78:da:45:a2:73:b9:43:55:c7:8c:89:3d:57:e6:
68:9f:07:0a:13:8c:8b:4f:37:9d:e4:3e:49:92:16:df:60:77:
c8:f0:5a:e4:34:89:ba:3c:bb:86:39:b1:e2:16:d6:cd:d0:7c:
26:d1:72:7d:53:c5:3f:0c:ad:ee:2f:97:45:46:86:05:e6:1e:
14:23:62:71:00:96:db:7d:e8:40:b3:00:bd:bc:bb:23:f7:b7:
66:80:f5:44:2d:d0:6f:39:cc:53:cb:02:46:78:8b:10:29:48:
9c:da:17:c2:ef:b5:32:9a:b7:ec:7c:a4:71:fb:b2:01:0f:a7:
5b:3e:7c:26:5e:46:58:52:ec:98:f6:51:10:76:b8:56:94:a2:
df:49:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:42 2026 by rpki-client