
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3132322e3131352e33322e302f31392d3139203d3e2034383038.roa
File: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=
Subject key identifier: F2:4A:09:8F:F9:B7:9F:B4:AC:F4:4B:10:D0:77:EC:8F:B6:11:DE:C1
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 7AC3E824648EBC3E6FBF312C3713D698B7F85412
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3132322e3131352e33322e302f31392d3139203d3e2034383038.roa
Signing time: Tue 12 May 2026 09:18:21 +0000
ROA not before: Tue 12 May 2026 09:13:21 +0000
ROA not after: Tue 11 May 2027 09:18:21 +0000
asID: 4808
IP address blocks: 122.115.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c3:e8:24:64:8e:bc:3e:6f:bf:31:2c:37:13:d6:98:b7:f8:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: May 12 09:13:21 2026 GMT
Not After : May 11 09:18:21 2027 GMT
Subject: CN=F24A098FF9B79FB4ACF44B10D077EC8FB611DEC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:c0:f4:b7:ff:31:81:19:59:4b:77:bc:7f:
ac:9d:12:d8:45:b1:78:d2:1c:75:3e:69:fa:13:83:
08:21:6d:84:cb:cc:90:d2:b5:42:27:ca:e6:35:df:
f8:07:9a:cc:93:34:ff:f5:0d:06:96:1d:51:f1:c4:
55:1f:7f:3e:90:3f:f6:55:2d:40:7e:b9:91:f5:ea:
f1:de:8a:51:d6:75:3e:c9:d7:34:ca:05:49:10:da:
3b:5e:14:39:88:52:51:f5:79:be:7a:88:50:33:43:
9a:cc:72:35:ac:78:73:40:85:36:8f:9a:ae:75:f0:
90:0b:2b:82:5f:72:17:c3:02:13:f8:17:0d:ab:26:
7b:b5:a9:c9:8f:10:79:c5:67:4d:98:bb:aa:a7:41:
c2:9c:ac:89:67:a9:82:5b:b7:e6:be:1d:b5:83:31:
4c:92:09:7e:db:ce:ce:8b:63:db:0c:b4:de:c7:27:
3a:a7:56:6a:ff:cf:80:fb:93:b7:d9:f8:0f:e8:93:
e0:ad:43:05:91:19:b3:63:1a:44:da:44:53:c3:58:
5a:7c:64:c4:c7:a5:8a:7b:c4:88:e1:7b:1f:b0:3f:
08:30:57:31:b0:66:3d:0c:5a:8c:e9:c3:14:b9:c1:
e6:28:80:78:b6:79:25:6c:8e:99:45:4d:b5:ba:b3:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4A:09:8F:F9:B7:9F:B4:AC:F4:4B:10:D0:77:EC:8F:B6:11:DE:C1
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3132322e3131352e33322e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.115.32.0/19
Signature Algorithm: sha256WithRSAEncryption
14:bf:5f:44:a2:13:00:f0:68:1b:82:26:cb:ce:3b:54:c4:79:
8d:30:c0:5f:b2:ae:89:22:9e:9a:5e:c8:8a:26:98:34:f0:09:
2b:0c:04:cd:91:a8:de:7f:ad:e0:7d:6a:41:bf:65:5d:c9:61:
a4:1f:b0:57:e4:1c:c4:49:fe:a8:84:14:67:7d:ca:61:91:dc:
bc:57:4a:93:1e:1d:3c:0a:12:17:51:b8:8a:da:9f:6b:02:10:
57:7c:cf:59:7a:49:b5:61:b1:40:28:c7:41:81:a2:2d:c8:9b:
2a:63:37:9c:2b:dc:73:0a:e3:00:dd:d5:5f:99:fa:d6:c5:e1:
df:c7:3d:66:2d:85:75:2b:73:77:d7:77:a1:b4:66:ee:10:a9:
67:b3:a6:e4:21:89:8e:eb:fb:98:fe:ab:ea:78:31:cf:43:8b:
90:00:cf:4e:5c:c2:ed:0f:c3:d3:6e:7f:bc:a4:89:a1:22:17:
b9:13:9b:f9:fa:e7:9d:84:82:a4:d9:90:3f:19:f1:a9:f7:62:
5c:6e:bd:77:f6:13:68:dd:a4:cc:08:ae:82:ec:be:ed:f6:87:
34:42:81:4e:33:d8:cd:2c:91:21:af:64:95:03:2c:bb:43:b0:
3c:2b:31:43:15:3e:b4:bc:05:5e:76:d1:97:2e:17:9b:9e:ab:
e7:74:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:54:15 2026 by rpki-client