
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/3131382e32362e34382e302f32322d3232203d3e203233373234.roa
File: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=
Subject key identifier: 5A:50:E5:CE:99:41:D2:B0:BF:2E:A0:99:B6:37:0A:35:0C:D6:34:7C
Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B
Certificate serial: 0FF9917BABF86BE4E8A8E269648A423D658B1D05
Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/3131382e32362e34382e302f32322d3232203d3e203233373234.roa
Signing time: Sat 09 May 2026 05:29:21 +0000
ROA not before: Sat 09 May 2026 05:24:21 +0000
ROA not after: Sat 08 May 2027 05:29:21 +0000
asID: 23724
IP address blocks: 118.26.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl
rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f9:91:7b:ab:f8:6b:e4:e8:a8:e2:69:64:8a:42:3d:65:8b:1d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B
Validity
Not Before: May 9 05:24:21 2026 GMT
Not After : May 8 05:29:21 2027 GMT
Subject: CN=5A50E5CE9941D2B0BF2EA099B6370A350CD6347C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:ac:5a:7f:52:83:9c:2b:e6:f2:c5:84:04:
12:7d:ca:29:aa:d1:53:d0:13:61:83:de:2d:61:29:
a3:f3:70:a9:80:13:9e:90:6f:ff:1a:24:b9:10:14:
5b:10:8d:71:df:83:78:53:73:54:96:b4:12:fb:a1:
de:d3:a3:26:a5:80:1f:a2:04:6c:a8:62:45:1e:c2:
64:90:2a:e9:23:ec:2f:28:a3:f0:00:64:ac:63:7a:
03:cd:54:1b:1e:72:5e:26:e8:cb:46:9e:83:56:ba:
f4:0f:80:eb:6b:f8:61:06:fb:2e:77:50:79:34:34:
81:a4:16:ee:ab:30:22:75:e0:cf:14:85:59:5f:d1:
76:da:9e:aa:5c:57:7a:d0:97:1a:36:9f:1c:d1:d1:
6a:e5:fe:a0:1a:6b:95:14:6d:c3:ff:fe:37:8e:09:
79:7e:7c:39:43:92:fa:f5:61:da:01:f6:13:d1:87:
f7:a9:1e:ae:0c:2b:de:27:08:6d:9e:19:12:13:2d:
bc:c5:ed:77:1d:76:6c:d8:ba:a2:bc:72:82:91:cb:
3c:c8:29:eb:ba:08:2c:a7:6e:50:03:a2:16:b6:64:
dd:8c:20:22:82:41:1d:91:ad:f9:c8:b3:c3:2f:64:
fe:df:23:38:03:43:02:e6:6b:67:3e:99:ca:ea:5c:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:E5:CE:99:41:D2:B0:BF:2E:A0:99:B6:37:0A:35:0C:D6:34:7C
X509v3 Authority Key Identifier:
keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/3131382e32362e34382e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.26.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:c4:30:b6:60:fb:1e:ab:f1:65:cb:ed:4a:a0:71:e8:e5:4d:
57:5e:1a:9c:48:6c:36:1e:6e:16:67:be:ec:f8:52:29:df:9b:
1e:e4:e0:6c:68:a6:cc:6e:07:26:fc:6d:15:69:f8:ea:34:dc:
d0:8b:cc:fb:d2:3c:70:4b:6c:3d:92:16:ab:45:cf:b4:ad:4e:
a2:0f:22:98:c7:db:1e:63:7e:50:9d:25:c4:03:df:a8:06:ce:
b1:27:2d:c8:2e:e8:30:e5:72:9c:5e:08:0b:8f:d5:02:6c:e9:
93:1a:6d:c8:fd:17:0a:5a:b7:4a:6d:6e:92:93:6a:96:88:3a:
4d:a9:bf:17:88:3c:f8:47:49:af:32:30:1e:ce:a3:73:a7:6d:
ca:d7:ca:09:31:6b:58:4e:40:82:f6:7b:ff:9d:f9:ea:52:6b:
b2:79:b8:e4:b2:b2:4f:77:ef:5b:fc:5b:c6:25:6b:6c:d1:4d:
2e:51:d5:8f:ca:f8:2c:53:6b:b6:84:25:15:3f:2e:26:4a:ed:
03:40:ba:a3:2d:b2:61:ba:57:c5:7b:6e:b7:b1:30:a6:17:02:
7f:a0:60:e8:64:80:4c:b7:67:dd:fd:27:5f:8b:23:a5:44:8f:
76:38:b7:a0:f9:7a:31:74:d1:71:de:1d:4f:8c:e3:88:d4:bd:
dc:c5:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:55 2026 by rpki-client