
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa
File: 3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier: pUhjYD0PQ8rwZ1DafU0Rvby54ZCdFvTYF7jxsVBaHpI=
Subject key identifier: 8F:90:30:4E:84:58:C7:01:13:90:AB:3B:CC:76:32:51:92:B9:73:FE
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 238CCD15DE30DAD89131887081ACBB4F84590C59
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa
Signing time: Thu 16 Apr 2026 07:09:23 +0000
ROA not before: Thu 16 Apr 2026 07:04:23 +0000
ROA not after: Thu 15 Apr 2027 07:09:23 +0000
asID: 63631
IP address blocks: 119.161.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8c:cd:15:de:30:da:d8:91:31:88:70:81:ac:bb:4f:84:59:0c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Apr 16 07:04:23 2026 GMT
Not After : Apr 15 07:09:23 2027 GMT
Subject: CN=8F90304E8458C7011390AB3BCC76325192B973FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:9b:4e:cd:eb:e4:ee:18:58:5f:5d:08:73:
cd:59:4a:4c:40:31:46:13:61:f0:0a:99:1b:ba:4a:
7e:46:45:69:9f:d8:a6:e2:ff:5d:98:1b:36:c2:12:
24:77:0d:34:22:4a:b0:61:be:b6:52:eb:13:32:8f:
c0:f0:c3:b1:13:02:b5:c5:00:75:2d:9b:28:42:e9:
bd:4a:e3:ed:5f:68:a4:41:d4:1c:84:03:0d:d3:9c:
74:37:5d:db:16:93:7b:38:f9:56:31:a6:d3:d8:06:
c4:a1:b5:fa:34:cc:89:2f:b0:cf:fd:12:36:b2:b9:
d7:53:02:5f:12:74:2e:72:b1:e9:b3:9d:91:5d:7d:
a2:63:00:03:72:37:77:cf:32:13:bd:82:f1:a3:d8:
85:07:5e:d0:98:28:10:1e:2c:db:6c:28:b9:a0:f5:
75:b1:9d:f2:c8:c3:b9:a8:d4:47:f1:21:82:b4:d4:
05:a8:a9:38:7f:8e:73:6d:96:8e:c1:64:32:9d:56:
cb:84:b7:ab:23:27:ca:87:cf:73:fc:ac:b1:8c:18:
5e:d8:d3:e5:06:c0:ec:2e:3d:08:95:00:13:f5:a8:
dc:ee:d7:f5:22:84:a3:e4:08:37:7e:72:ec:88:cc:
7e:4b:d0:cc:1e:d5:de:20:87:92:de:83:c5:c9:9b:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:30:4E:84:58:C7:01:13:90:AB:3B:CC:76:32:51:92:B9:73:FE
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.145.0/24
Signature Algorithm: sha256WithRSAEncryption
73:93:d2:40:38:19:9c:c4:ca:58:81:b6:44:3b:bc:28:fb:9d:
f6:8a:37:15:35:c2:ac:1e:32:07:79:1a:ca:af:f0:31:86:96:
b3:bb:ec:b7:bd:e6:fe:0b:2f:93:48:3f:20:da:5a:11:38:cf:
b6:2c:72:a9:ed:05:b5:39:a1:90:a7:88:ef:a4:82:33:00:2f:
e3:f8:85:26:8f:bc:0f:d2:e2:d8:87:2f:04:00:9e:7e:b5:46:
79:f4:b0:02:f4:65:9b:98:f9:33:68:e0:72:90:39:d5:a8:55:
69:f7:b2:a5:2a:1d:82:7b:51:f8:06:3d:db:56:eb:d2:bc:f5:
10:b7:af:96:1d:8a:3c:69:22:f6:a6:2e:4a:69:fe:cc:93:87:
df:20:05:85:95:09:0a:cc:9e:ee:51:a9:fa:33:d8:c2:fe:f3:
b7:e3:17:1f:d5:7a:5a:6c:2d:06:eb:7a:93:e0:e2:7a:73:de:
94:d8:01:c5:b4:f3:43:43:e1:d9:06:d8:86:0a:c9:04:90:7f:
31:90:e1:6e:1b:55:f0:b3:99:c6:98:f0:b7:f5:d3:c2:a3:5d:
56:b1:a5:90:43:b7:4a:f7:4e:9b:ca:bb:28:a3:d4:bf:15:83:
de:27:be:14:d8:9b:06:a8:32:51:7d:a1:bb:6c:1a:ab:6d:53:
59:95:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:54 2026 by rpki-client