
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa
File: 3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier: ZhL9/4i3ODs6aX7o53WQ/DaiGBL27xevMOs/uL/pP1A=
Subject key identifier: 0F:C6:C3:70:29:33:F1:B8:1D:A5:2D:06:FB:F1:F3:36:DE:55:54:7F
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 293BC88A370DCD00D17CF1ED7FB1F52D5EA94A2C
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa
Signing time: Thu 07 May 2026 05:31:23 +0000
ROA not before: Thu 07 May 2026 05:26:23 +0000
ROA not after: Thu 06 May 2027 05:31:23 +0000
asID: 139099
IP address blocks: 120.131.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3b:c8:8a:37:0d:cd:00:d1:7c:f1:ed:7f:b1:f5:2d:5e:a9:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: May 7 05:26:23 2026 GMT
Not After : May 6 05:31:23 2027 GMT
Subject: CN=0FC6C3702933F1B81DA52D06FBF1F336DE55547F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:22:6c:ed:58:92:56:e4:f8:ae:8a:f2:79:
7e:77:b8:1e:94:fe:bb:30:dc:a0:78:3d:a5:af:24:
f7:d8:93:5c:5b:80:40:a9:24:eb:24:4c:d4:73:43:
ad:e2:c1:f8:b2:d7:6b:62:cf:8d:62:40:8b:1b:83:
26:4c:e4:c5:a8:56:97:4a:e8:31:66:91:b9:d9:3f:
94:13:60:36:5c:69:bf:0e:11:0a:7b:7c:82:fa:21:
04:60:b0:6b:d7:f8:7d:ce:bc:7b:8d:bb:e2:63:af:
1e:e6:bd:6d:fe:23:6b:1b:05:51:15:cb:49:1a:bb:
d8:d3:bf:2c:b2:0f:1d:fe:1a:b9:9b:89:5a:a4:40:
92:84:d5:4a:47:2b:27:06:73:ff:b9:30:5c:bc:82:
18:fd:48:60:e5:93:21:33:42:26:76:38:94:5e:ca:
2a:f8:95:26:2e:1f:d8:dd:00:e9:f6:e2:a4:af:a0:
da:88:7f:3f:53:11:da:31:04:f0:1f:5b:a9:07:43:
11:32:69:df:65:5d:f5:ed:8d:fc:b7:6a:05:3c:37:
dc:fc:cf:91:05:e2:19:84:be:2a:dd:54:f5:8a:9a:
95:d5:f3:37:a1:a3:4d:58:10:0e:a5:ae:4b:7e:7e:
2a:00:cf:45:32:86:6d:97:eb:d1:c4:b7:04:93:2e:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C6:C3:70:29:33:F1:B8:1D:A5:2D:06:FB:F1:F3:36:DE:55:54:7F
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.131.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b0:ae:62:28:56:9c:32:03:1c:22:e2:31:29:9f:14:ae:1e:
57:19:a8:f1:2b:57:4f:ee:5e:ff:08:42:f8:47:13:36:5c:ef:
bd:f5:1c:60:81:2f:81:d6:4b:c0:55:bd:f8:c6:0a:73:25:61:
bc:a3:32:82:a7:64:58:56:3f:7d:dd:a2:c4:21:10:f1:db:20:
dc:0e:c7:53:23:d0:cc:38:6f:fa:1a:78:21:02:a3:1d:73:38:
9b:cc:72:37:1d:ce:d1:b0:e8:04:ba:c7:15:22:94:ef:71:c9:
c3:dd:2a:2c:19:75:9a:36:00:0d:65:fe:03:0f:f6:6d:18:fe:
14:42:23:f9:c0:78:e8:02:27:6e:27:43:9c:0a:4a:50:13:ef:
1e:5c:a0:ef:55:7e:75:ff:64:14:77:c3:11:fe:df:03:a3:b1:
55:b0:49:22:c3:1c:00:6f:a8:ee:28:9a:43:74:0e:f7:9f:bb:
8f:b1:65:0e:15:8a:5d:e8:49:8a:af:68:39:e0:d0:c2:f8:9d:
8e:40:23:de:02:89:3e:18:e6:e9:4d:52:ca:65:52:ed:47:f8:
79:78:d5:15:54:6c:e2:8f:f0:53:5c:80:f8:d2:bd:47:ae:f5:
ac:89:7a:fe:b4:0f:0c:c8:fe:2b:f4:e3:95:b1:a5:a6:51:93:
3f:eb:b6:25
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUKTvIijcNzQDRfPHtf7H1LV6pSiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENB
REE1NzhGNTAeFw0yNjA1MDcwNTI2MjNaFw0yNzA1MDYwNTMxMjNaMDMxMTAvBgNV
BAMTKDBGQzZDMzcwMjkzM0YxQjgxREE1MkQwNkZCRjFGMzM2REU1NTU0N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUECJs7ViSVuT4roryeX53uB6U
/rsw3KB4PaWvJPfYk1xbgECpJOskTNRzQ63iwfiy12tiz41iQIsbgyZM5MWoVpdK
6DFmkbnZP5QTYDZcab8OEQp7fIL6IQRgsGvX+H3OvHuNu+Jjrx7mvW3+I2sbBVEV
y0kau9jTvyyyDx3+GrmbiVqkQJKE1UpHKycGc/+5MFy8ghj9SGDlkyEzQiZ2OJRe
yir4lSYuH9jdAOn24qSvoNqIfz9TEdoxBPAfW6kHQxEyad9lXfXtjfy3agU8N9z8
z5EF4hmEvirdVPWKmpXV8zeho01YEA6lrkt+fioAz0Uyhm2X69HEtwSTLqWDAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUD8bDcCkz8bgdpS0G+/HzNt5VVH8wHwYDVR0j
BBgwFoAUm6REL2sHBUZa5U+1yoGzjK2lePUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDYzOTQyOTAzMDQ0NTA2My8wLzlCQTQ0NDJGNkIwNzA1NDY1QUU1NEZCNUNBODFC
MzhDQURBNTc4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENBREE1NzhGNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDQ2Mzk0MjkwMzA0NDUwNjMvMC8zMTMyMzAyZTMx
MzMzMTJlMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzkzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHiDEjANBgkqhkiG9w0BAQsFAAOCAQEAPrCuYihWnDIDHCLiMSmf
FK4eVxmo8StXT+5e/whC+EcTNlzvvfUcYIEvgdZLwFW9+MYKcyVhvKMygqdkWFY/
fd2ixCEQ8dsg3A7HUyPQzDhv+hp4IQKjHXM4m8xyNx3O0bDoBLrHFSKU73HJw90q
LBl1mjYADWX+Aw/2bRj+FEIj+cB46AInbidDnApKUBPvHlyg71V+df9kFHfDEf7f
A6OxVbBJIsMcAG+o7iiaQ3QO95+7j7FlDhWKXehJiq9oOeDQwvidjkAj3gKJPhjm
6U1SymVS7Uf4eXjVFVRs4o/wU1yA+NK9R671rIl6/rQPDMj+K/TjlbGlplGTP+u2
JQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:08 2026 by rpki-client