
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa
File: 3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier: BMtu6B3U38eAWu5YqoZqyKgTEf3PbC5gRaMCWmOmm+I=
Subject key identifier: 1A:EB:C1:31:E4:F4:F2:93:80:91:55:89:57:90:D0:2E:30:B7:10:E0
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 69C33BCA7D3D425EA18F6446CE08339B693F7876
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa
Signing time: Thu 07 May 2026 05:31:24 +0000
ROA not before: Thu 07 May 2026 05:26:24 +0000
ROA not after: Thu 06 May 2027 05:31:24 +0000
asID: 139099
IP address blocks: 120.131.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c3:3b:ca:7d:3d:42:5e:a1:8f:64:46:ce:08:33:9b:69:3f:78:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: May 7 05:26:24 2026 GMT
Not After : May 6 05:31:24 2027 GMT
Subject: CN=1AEBC131E4F4F293809155895790D02E30B710E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:9e:bf:a2:e0:03:73:8e:fe:44:48:bb:4b:
9b:83:05:36:38:2f:ba:13:8a:7d:99:8c:8a:63:f0:
bf:40:65:34:0a:c6:4d:92:23:6d:7c:aa:25:03:e3:
e4:58:86:80:d1:52:2b:50:8b:58:95:7c:31:78:fa:
89:ef:62:33:8c:3e:31:ee:0b:fc:f3:09:17:28:70:
9e:89:10:e7:b6:c6:94:59:ce:5c:d3:27:8d:d5:8e:
9e:03:c1:f6:24:54:63:e0:81:04:89:4f:9e:aa:29:
7e:59:e8:d0:31:3a:30:a1:52:3b:d0:aa:32:db:61:
1a:a6:54:37:eb:19:f1:4e:4b:72:c9:46:8f:ee:13:
6e:de:c8:d1:68:ad:13:63:4a:a3:7a:73:a4:56:11:
fc:1f:29:89:9a:64:f6:2d:1d:a8:4a:7e:6e:ee:30:
3d:aa:ca:a6:57:d9:0c:13:ba:eb:22:ca:48:04:a1:
13:2a:d8:0c:25:38:dd:d8:13:2d:38:8b:ff:35:00:
8a:3e:65:4b:a3:39:be:5c:f3:bc:3c:2f:93:e8:d9:
15:b1:65:60:7a:b9:7f:6d:10:16:6c:e3:14:14:c7:
d4:3b:92:1f:80:b3:0d:dc:75:7f:20:43:94:c2:b0:
2f:d2:13:ae:00:8c:0f:e3:ab:cf:7e:86:aa:6c:db:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:C1:31:E4:F4:F2:93:80:91:55:89:57:90:D0:2E:30:B7:10:E0
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.131.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:98:3d:f1:88:f1:31:fb:bb:c7:24:53:7d:e4:fc:e9:fe:be:
b1:54:af:21:3d:27:b3:35:59:c3:84:70:fa:cf:9c:5f:8e:5f:
5c:19:fc:6a:25:67:a2:e5:1e:3f:b8:91:93:a7:a9:9f:4e:21:
39:5f:45:1c:34:52:8d:79:10:c9:84:7d:4c:01:e9:55:1b:b4:
05:8c:8b:85:2b:d7:42:67:f0:cd:52:93:bc:0a:85:f6:0a:74:
6d:45:71:ca:ac:a6:b5:90:f0:fe:42:c6:ab:7e:3d:c6:d5:63:
12:c2:b9:31:1c:8a:ca:3d:cd:fc:02:c9:4a:17:15:c8:03:6c:
c7:04:4a:95:d4:40:7c:06:56:a6:9f:4e:56:b1:96:04:77:15:
16:64:14:9b:59:62:55:63:5a:08:28:bc:95:17:65:45:9b:ef:
89:a0:f4:b8:8e:1e:c1:43:4a:cf:5d:66:92:db:e8:a7:5e:8f:
1b:98:c7:03:3f:65:03:17:10:e5:e6:39:3d:45:96:70:fb:ad:
1b:68:9e:2f:5e:13:7b:c4:da:d6:86:1a:80:9e:cc:e3:65:86:
ec:e8:52:b3:f9:d4:d7:ea:51:81:9e:c7:ad:a5:35:8f:b2:a1:
5a:ce:db:38:de:55:42:73:54:00:ba:74:9a:bd:eb:37:e3:95:
89:2f:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:07 2026 by rpki-client