
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa
File: 3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier: jaUN8w1uCkO8pF2L476a3dLINbH+eUPrcR66NG/n09Q=
Subject key identifier: 77:5A:17:B5:B1:1F:E5:A4:4C:BB:32:F9:40:B0:5C:DF:1B:BF:1A:DD
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 60F6673AEEEAD9BA9C5C8086FA30A555EF9A04F7
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa
Signing time: Thu 07 May 2026 05:31:24 +0000
ROA not before: Thu 07 May 2026 05:26:24 +0000
ROA not after: Thu 06 May 2027 05:31:24 +0000
asID: 139099
IP address blocks: 120.131.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f6:67:3a:ee:ea:d9:ba:9c:5c:80:86:fa:30:a5:55:ef:9a:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: May 7 05:26:24 2026 GMT
Not After : May 6 05:31:24 2027 GMT
Subject: CN=775A17B5B11FE5A44CBB32F940B05CDF1BBF1ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:96:19:8d:48:f5:a9:fb:85:aa:77:6b:40:
ff:22:01:28:a5:6a:5f:75:e6:13:99:35:12:91:0e:
97:50:68:3a:be:11:7f:15:74:e9:1d:ca:a9:4d:1f:
c0:d1:5a:75:fd:f1:79:2b:c3:b3:02:2b:8f:04:52:
36:1b:c3:d9:1d:cd:57:f2:be:b6:c1:a1:10:81:89:
67:b1:55:21:3d:59:95:51:ac:73:16:ea:ae:aa:73:
46:8d:a4:79:27:9b:88:b1:51:4a:03:1e:a0:f5:1d:
f6:0b:47:81:a0:26:f6:37:76:e0:29:15:ed:e5:dd:
90:52:de:75:55:64:f4:b7:06:f2:ca:d4:1b:0d:16:
8d:e8:a4:57:0d:ef:d7:53:b1:94:fa:a6:c3:90:e9:
eb:e2:f4:53:a2:47:fb:42:22:8a:74:fc:5c:b0:ce:
0a:12:7a:2d:1a:f4:43:ce:8b:65:7f:7a:5d:ac:a4:
93:0c:fd:68:8d:09:bc:48:44:18:72:84:3e:53:54:
b0:33:4f:16:11:c1:ff:65:b2:2b:e5:de:e0:e3:2f:
5e:9e:05:35:78:b3:77:8e:6f:db:4c:37:53:ef:e8:
0e:b1:b6:2a:d3:a9:c3:13:00:9c:b9:14:33:34:7d:
04:08:95:8e:90:e2:89:21:28:d9:3a:58:87:bc:36:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:17:B5:B1:1F:E5:A4:4C:BB:32:F9:40:B0:5C:DF:1B:BF:1A:DD
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.131.25.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2a:8e:23:f1:03:41:4d:1e:b1:ea:7b:7d:c6:2e:e3:7c:29:
64:44:22:7e:d3:8c:39:71:08:6d:d1:02:2f:ca:da:c8:88:49:
23:3a:df:23:e7:ee:2f:bf:e9:9d:ed:d7:fc:fd:cd:ce:69:ba:
25:1e:8d:46:dc:c4:c9:bb:10:d7:ac:0a:cb:6b:a6:33:04:e7:
b6:75:73:b6:8a:2f:8a:a6:85:dc:c1:49:37:81:9d:da:d9:d3:
25:3d:6b:ae:04:4f:af:7c:df:30:26:a0:69:04:00:66:73:0e:
25:d5:c3:0d:9c:b1:d9:c6:90:ad:15:86:06:b1:db:65:33:c2:
8c:86:b3:cb:20:9e:a2:25:ef:cd:27:3c:5e:92:f8:f1:7f:bb:
fe:18:3e:0b:2c:66:37:dc:90:4e:7f:24:5f:94:70:eb:9c:0d:
89:da:a9:6c:dc:d0:97:c5:76:f0:79:b5:87:dc:7f:76:cd:37:
52:ad:2b:2a:b7:34:5e:6c:73:b3:de:97:c0:b8:14:a1:a1:12:
97:84:91:fc:a3:e6:16:0b:b2:6b:4d:c0:b5:dc:b6:68:1a:45:
46:19:b3:4c:4a:b5:a5:66:8e:bb:de:2c:4f:9e:57:bf:84:8f:
72:f9:ad:0d:01:8b:12:c6:98:14:e5:bd:17:d0:22:50:9a:0d:
5c:6f:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:19 2026 by rpki-client