
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa
File: 3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa (raw, json)
Hash identifier: pYS0lTYyVDBux3Ph4diRJtOMRVLU2UsuZ+UtPge0LOc=
Subject key identifier: 19:76:0C:C8:B2:8E:27:C1:06:94:5D:13:D5:56:1B:6A:87:C1:00:2C
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 7CC2166D96E886ED208805FE48B982212C9EB42C
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa
Signing time: Thu 07 May 2026 05:32:41 +0000
ROA not before: Thu 07 May 2026 05:27:41 +0000
ROA not after: Thu 06 May 2027 05:32:41 +0000
asID: 139099
IP address blocks: 120.131.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c2:16:6d:96:e8:86:ed:20:88:05:fe:48:b9:82:21:2c:9e:b4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: May 7 05:27:41 2026 GMT
Not After : May 6 05:32:41 2027 GMT
Subject: CN=19760CC8B28E27C106945D13D5561B6A87C1002C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:4c:d5:bb:28:95:39:de:57:36:e1:fd:aa:
c7:bc:93:6d:d0:02:76:ed:22:37:80:36:20:27:e0:
6b:f2:5a:86:a6:5b:6d:09:83:d7:6f:ef:a9:53:8a:
8f:7b:fa:c0:f1:af:a3:47:73:b9:c6:4c:5e:f8:1f:
9b:8f:e4:4b:b3:89:ce:80:bd:b4:97:24:ef:31:4d:
d4:79:0d:77:f4:de:70:2d:d1:68:7c:59:7a:b3:5f:
0d:b0:3a:9d:79:e9:29:b1:b8:0a:bf:bf:6c:62:23:
f6:1f:b4:03:45:d4:96:04:0c:c9:6f:84:9b:31:7c:
fd:32:62:75:ca:9d:81:37:bd:f7:3b:6a:81:41:04:
98:b7:6b:72:2c:b0:f8:31:ab:45:6e:1b:84:24:bd:
0b:bc:52:07:22:d9:ec:fd:39:4c:73:bb:a7:dc:76:
2e:aa:b1:cc:a7:aa:62:3c:3c:3e:28:e7:1a:1f:26:
cf:e1:1e:74:24:bd:70:80:21:5e:c8:0b:5b:3a:cd:
34:61:87:e7:33:96:48:8a:c9:ef:04:a3:cb:fa:4c:
fa:9a:db:a6:c9:f2:75:d9:3d:6e:1d:8a:99:6a:b3:
55:d4:82:99:a4:16:f4:7b:76:19:34:b5:64:52:b8:
ca:9c:8d:7d:df:ed:cd:70:e1:54:aa:92:2e:a6:c5:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:76:0C:C8:B2:8E:27:C1:06:94:5D:13:D5:56:1B:6A:87:C1:00:2C
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.131.18.0/23
Signature Algorithm: sha256WithRSAEncryption
43:d8:11:42:a1:6d:81:de:27:b3:66:32:d5:d7:1d:f4:73:f9:
72:72:af:04:5d:cc:a8:0d:87:36:24:72:f3:65:b7:73:6a:67:
cf:fb:38:0b:53:5d:12:48:ca:84:8b:34:4e:a3:af:32:4b:5f:
ae:23:a3:65:ff:ab:a2:78:76:78:a1:03:6b:48:92:1c:71:41:
8e:ad:e4:48:a1:a9:5c:9b:08:9f:34:8b:55:ab:1a:6b:a1:29:
cc:5c:5c:92:b9:d7:a3:ec:1c:c4:22:6b:0d:38:6c:d1:e1:fa:
03:b9:d1:3d:2a:5f:5a:fc:64:28:0f:be:97:2f:d0:76:f8:f0:
75:f4:81:23:33:c8:cd:ab:ac:31:e6:90:a0:04:41:29:e2:1f:
7c:f9:d1:d7:3d:47:24:ff:20:de:8b:30:07:a1:87:fd:ed:85:
f1:ba:36:0f:28:07:ca:9d:3c:33:7a:2a:5f:bc:96:b3:14:f1:
3f:25:a7:6d:c1:b9:2d:26:6a:60:81:2e:7e:db:7a:37:48:b0:
83:0a:19:b2:9b:fb:0b:29:7c:9c:81:41:19:83:36:49:31:b2:
de:0d:77:5a:70:92:c5:cb:7e:8d:44:72:63:2c:4b:69:f0:2a:
36:16:e0:ac:54:0b:3a:68:c6:f3:6d:27:d9:b2:0e:93:b5:07:
6b:b8:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:46 2026 by rpki-client