
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa
File: 3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier: gFKYwJKOqZKKQPpUOYFHwiPbsrAs7XTTjNMgNcv1148=
Subject key identifier: FF:29:16:DC:0C:4A:FD:90:C0:6F:7A:61:1A:91:FB:D9:A7:43:C1:1B
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 641671654B79DE4D60AA2F30490D2BC9405034B3
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa
Signing time: Thu 07 May 2026 05:31:24 +0000
ROA not before: Thu 07 May 2026 05:26:24 +0000
ROA not after: Thu 06 May 2027 05:31:24 +0000
asID: 139099
IP address blocks: 120.131.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:16:71:65:4b:79:de:4d:60:aa:2f:30:49:0d:2b:c9:40:50:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: May 7 05:26:24 2026 GMT
Not After : May 6 05:31:24 2027 GMT
Subject: CN=FF2916DC0C4AFD90C06F7A611A91FBD9A743C11B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:7a:aa:80:e6:1d:08:f0:0d:df:d2:5b:1d:
96:24:df:8e:20:5a:8f:2e:ec:7f:5d:09:17:c5:de:
58:ec:f1:5b:a9:80:09:19:61:07:7e:ae:c3:f7:5a:
87:59:dd:b9:74:75:79:72:a2:4b:0e:4d:81:c5:8a:
7d:78:80:8c:0b:5e:66:0b:ef:0f:40:23:37:7a:dc:
e6:24:2a:d1:ec:f0:67:15:b0:cd:f6:89:ac:cf:19:
57:72:18:b3:bf:fd:37:ca:ec:58:30:ec:97:a0:df:
5a:02:45:18:df:32:be:b1:ae:f6:59:55:6e:d6:39:
a1:6c:bc:64:4e:44:06:d1:93:65:0d:27:82:d1:5d:
4b:1e:36:d7:e7:a4:85:15:d6:7a:b2:44:cd:92:b0:
c2:6c:4a:fd:58:8d:ec:78:6f:be:0d:e9:b8:1a:0c:
19:2c:a9:e4:dd:21:44:9b:27:c4:9d:e9:f8:c9:64:
a6:45:26:70:df:cd:5f:6b:c4:a2:36:eb:a2:6a:82:
90:5b:e0:99:7a:9a:76:15:bb:d3:c1:a2:83:e1:79:
ba:4b:59:f7:3a:7f:f9:03:32:30:13:e9:61:68:6c:
67:cd:07:87:00:5a:49:fd:6e:d0:a8:30:5e:1f:df:
7e:ea:7e:f0:c3:61:50:a4:6e:b7:6e:50:6f:39:8e:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:16:DC:0C:4A:FD:90:C0:6F:7A:61:1A:91:FB:D9:A7:43:C1:1B
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.131.19.0/24
Signature Algorithm: sha256WithRSAEncryption
53:91:cf:29:9a:f1:3a:d4:a6:7d:c2:d0:0d:38:dc:22:a6:af:
41:f1:4e:e2:e9:88:86:7e:1c:7d:a8:fb:11:db:68:d1:b6:b5:
28:59:45:6e:01:46:39:81:7f:b7:d3:d5:82:bb:a1:74:8a:8c:
4e:2b:79:94:4e:da:2b:87:ca:d7:32:19:48:4b:b6:4d:ee:a6:
bd:c5:b9:cb:74:ed:e1:7b:76:50:f7:d1:93:35:6e:b5:08:99:
82:0a:2a:01:ed:e3:cb:3d:80:46:ee:fb:17:53:f0:ed:c2:61:
4c:39:8e:15:ce:48:a5:56:e4:9a:45:57:04:96:2a:5e:1a:e1:
04:f0:f8:73:9c:21:01:72:2d:e4:57:3b:9c:42:de:ee:c3:a1:
d8:11:d0:d4:1c:7b:67:46:6e:54:2e:90:ba:83:7e:58:df:0f:
87:8f:86:6a:e7:7a:07:ab:d3:14:d0:dc:0f:ad:28:d6:5b:65:
52:8e:09:8e:61:c4:2f:90:65:55:87:00:89:25:67:92:7f:56:
1b:44:de:04:9d:e1:99:4a:88:89:d8:95:a7:c3:e4:fd:f1:b8:
d8:ff:c4:f9:ba:dc:17:61:1e:d9:a1:8e:46:ff:a8:fe:ef:4a:
fc:cb:ba:d5:54:e4:e9:58:62:ae:30:d9:f7:d7:06:d2:6a:1c:
03:58:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:09 2026 by rpki-client