
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa
File: 3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa (raw, json)
Hash identifier: zs+2Rg8d2lVyqGgR1D88RUigfUtxShIadf7BvzBvThQ=
Subject key identifier: C2:5F:D7:D4:39:57:A7:63:2B:DE:E2:76:DA:51:30:B4:03:C5:A6:0D
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 5D36F6745875B48767570BD7915981477DB4AC99
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa
Signing time: Thu 07 May 2026 05:31:24 +0000
ROA not before: Thu 07 May 2026 05:26:24 +0000
ROA not after: Thu 06 May 2027 05:31:24 +0000
asID: 139099
IP address blocks: 120.131.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:36:f6:74:58:75:b4:87:67:57:0b:d7:91:59:81:47:7d:b4:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: May 7 05:26:24 2026 GMT
Not After : May 6 05:31:24 2027 GMT
Subject: CN=C25FD7D43957A7632BDEE276DA5130B403C5A60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:2d:ec:50:26:23:7a:1a:1f:6b:8d:52:8c:
f7:48:ef:be:bc:e1:be:50:64:4d:3f:43:b6:28:95:
a9:9f:df:40:08:0f:5c:81:ec:c8:a5:e6:4d:58:77:
34:36:54:61:bb:e4:83:43:75:c2:fc:a0:b1:7f:95:
17:91:0a:62:82:67:68:27:01:09:09:bf:50:7b:00:
53:1e:5b:1e:5c:af:2b:dd:fb:32:94:9f:1b:e2:91:
43:83:34:f4:90:dd:4c:d4:7b:03:50:2a:12:b7:03:
4c:8c:bb:9f:0b:f7:4d:da:0d:51:20:10:0f:34:e1:
a3:48:fc:62:88:1f:f0:61:35:00:ec:96:c4:5a:c6:
08:ae:d3:90:8d:0a:1e:58:7e:45:d2:b7:a3:b7:84:
e2:c1:9c:7d:b5:70:05:db:e4:72:48:b3:a7:09:2a:
ab:a4:85:c8:cc:0a:7e:08:d0:34:e2:f3:cc:12:01:
af:90:ef:39:84:89:87:a2:ec:15:f8:1f:1b:6b:77:
61:6a:9b:24:da:40:94:22:5c:78:a0:e9:12:f2:16:
8e:23:f5:60:4b:12:9f:01:57:a2:53:bf:b4:72:f5:
40:e3:c9:08:81:d5:08:a6:7c:6b:27:fe:38:ef:16:
71:65:24:d3:22:62:ec:b6:65:5f:59:13:bc:66:29:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5F:D7:D4:39:57:A7:63:2B:DE:E2:76:DA:51:30:B4:03:C5:A6:0D
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.131.31.0/24
Signature Algorithm: sha256WithRSAEncryption
45:11:f7:c3:bb:a5:f6:e8:28:dc:33:f0:d7:45:a3:6e:9c:ec:
a2:80:ac:75:83:b7:dd:03:65:8a:78:4e:c6:aa:61:ef:45:50:
a8:8b:3c:fd:c0:ff:e8:6d:5e:84:77:23:51:67:53:48:68:3b:
d6:ba:35:46:3d:44:1a:2e:32:f2:81:c8:c5:8a:9e:9d:75:2a:
02:48:0d:0f:70:85:80:19:e7:7d:3a:73:65:6a:6e:a8:88:b0:
74:17:7a:03:76:fd:df:5c:61:a9:54:e3:53:e7:a0:43:88:6f:
ff:71:9e:fe:95:9a:2b:f4:0b:26:cf:6d:b3:23:9b:da:bb:bf:
ff:fc:9b:13:11:7b:41:87:1e:ad:14:f0:f2:3b:30:dc:80:d0:
f6:64:ef:e1:0e:d3:2a:25:ef:f6:7b:74:9a:b6:4b:ea:6c:15:
a7:51:eb:4a:37:96:59:b8:3c:9e:ea:f1:bf:bb:3e:a4:50:56:
86:8f:d3:cd:54:c3:4d:aa:28:6d:06:7d:1d:ea:e6:bf:92:35:
c2:26:3f:e2:4e:92:f3:d0:b5:1b:34:b3:35:1d:0a:8d:50:0b:
1d:ac:e7:44:8c:04:dc:16:1e:1e:f5:fe:d4:69:e0:39:31:80:
4b:f3:a5:4d:38:5c:56:ed:45:01:a7:dd:fb:b2:65:5d:68:78:
e1:42:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:19 2026 by rpki-client