
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa
File: 3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa (raw, json)
Hash identifier: qeabMb+wsuy1HRs/tstZGEc3Gh+XVRmfsuQ0R4nRKAY=
Subject key identifier: E5:E3:FF:3F:5A:F1:97:B3:8D:61:17:44:03:8E:7C:85:77:2B:61:86
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 07AF3D9291B1DAED67F7713386EB600761A8850A
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa
Signing time: Thu 07 May 2026 05:32:41 +0000
ROA not before: Thu 07 May 2026 05:27:41 +0000
ROA not after: Thu 06 May 2027 05:32:41 +0000
asID: 139099
IP address blocks: 120.131.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:af:3d:92:91:b1:da:ed:67:f7:71:33:86:eb:60:07:61:a8:85:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: May 7 05:27:41 2026 GMT
Not After : May 6 05:32:41 2027 GMT
Subject: CN=E5E3FF3F5AF197B38D611744038E7C85772B6186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:3b:ae:f4:38:7a:7e:14:35:f7:b7:a2:67:
f3:d6:62:0d:d6:eb:00:07:14:26:92:09:38:3a:88:
df:e1:a6:1c:cb:fb:24:b8:d8:55:72:db:36:c2:c2:
91:ea:f4:2b:29:3c:e3:a3:b3:b8:9f:b8:37:eb:c9:
9c:f0:cb:5f:0e:96:19:c1:e7:91:9d:63:61:c7:32:
18:b9:fa:43:e7:00:82:dd:05:2b:97:b8:b1:dd:36:
87:eb:08:b3:d7:2d:38:6b:00:df:99:b2:21:51:43:
d4:3b:97:bf:66:9c:14:92:29:86:5e:08:7a:53:d7:
cd:21:69:df:1e:1f:60:aa:cd:b3:0a:de:a7:35:79:
d4:82:21:6f:21:53:ba:12:59:a1:af:7c:a3:3a:8c:
1f:ed:97:45:fb:ee:68:72:84:30:91:21:2e:50:5b:
37:2c:db:77:22:2a:51:d7:e2:bf:9b:a8:57:03:01:
6d:7f:37:5c:8d:e9:42:26:87:a1:dd:61:5a:f0:5c:
d5:85:71:ba:09:15:24:c5:ee:f7:78:27:76:8f:20:
df:e3:b8:f6:6d:b5:45:de:0a:fd:f6:f0:80:8c:31:
a3:e0:f6:10:db:51:ac:8f:5f:8f:d8:d9:3d:e6:44:
f2:81:69:6b:df:a2:ae:a5:86:a1:59:66:9d:3c:87:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E3:FF:3F:5A:F1:97:B3:8D:61:17:44:03:8E:7C:85:77:2B:61:86
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.131.26.0/23
Signature Algorithm: sha256WithRSAEncryption
15:7a:c8:d0:96:07:3a:b5:47:9e:90:32:72:63:67:56:2d:80:
51:e1:90:e0:e4:b6:56:be:66:04:f2:ad:ef:8f:ba:8d:4f:d6:
14:e9:c8:7a:bb:3d:09:d8:25:ac:22:34:21:a8:0f:bb:0a:45:
1d:22:ba:6d:ef:50:d8:b7:92:30:9c:90:7c:e7:00:7a:a1:94:
17:82:30:59:ff:18:3e:1f:ed:be:3f:69:d9:ec:42:53:a0:69:
94:07:64:18:81:07:ab:88:de:a8:d5:6c:13:93:4b:bc:13:4d:
87:8d:c1:91:af:d3:c1:ac:00:ba:74:8e:dc:47:3b:16:36:43:
8f:76:da:ab:15:26:f1:3a:c3:70:bc:09:0f:3b:99:01:f0:c5:
64:9f:99:73:d1:55:6d:d0:67:81:3a:12:24:c1:89:98:26:cf:
87:c4:83:03:7d:7c:a3:83:df:93:3d:61:48:01:af:8d:cb:8b:
80:88:fb:75:db:cc:75:68:fd:68:1f:3d:b1:5b:41:07:b1:f2:
1f:36:1f:e6:61:fa:7b:8d:f7:a5:ae:28:1e:77:37:64:51:64:
ac:86:54:63:13:ee:be:b3:6f:dc:d4:e6:c4:a2:a3:86:c9:ae:
11:8d:70:b8:3b:a9:87:d1:c1:97:47:ec:4c:8f:b3:86:a8:ea:
c5:58:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:43 2026 by rpki-client