
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa
File: 3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier: 5KmbHs67IA/wY5tBVDS22+6mTsCdZcqAE09P4TvLmS4=
Subject key identifier: 75:34:B9:33:31:00:1D:29:01:E8:97:26:13:9D:36:DB:FC:AA:9D:01
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 0809B3AA973F8D964AD24A00BB031AFC335B0B1F
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa
Signing time: Thu 16 Apr 2026 07:09:24 +0000
ROA not before: Thu 16 Apr 2026 07:04:24 +0000
ROA not after: Thu 15 Apr 2027 07:09:24 +0000
asID: 63631
IP address blocks: 119.161.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:09:b3:aa:97:3f:8d:96:4a:d2:4a:00:bb:03:1a:fc:33:5b:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Apr 16 07:04:24 2026 GMT
Not After : Apr 15 07:09:24 2027 GMT
Subject: CN=7534B93331001D2901E89726139D36DBFCAA9D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:08:07:93:a1:74:2e:30:f8:6b:ff:b9:7c:
29:64:fd:04:ba:48:7c:c2:98:24:0d:33:22:b8:53:
2e:f0:d8:35:90:fc:da:4b:02:96:76:67:05:63:e1:
36:be:44:78:c2:44:eb:24:ea:b5:25:64:cd:23:c5:
b9:f4:e4:b2:b7:07:eb:bc:45:57:1b:c9:bb:7d:f8:
52:f7:26:29:05:c4:b2:d5:ef:7e:0c:f9:f1:a7:32:
df:09:a6:06:21:64:c5:0c:0d:fc:4c:43:19:24:b8:
dc:5f:c7:7f:48:11:6b:b0:78:cc:ad:73:0b:e3:6f:
d1:6b:13:e3:41:70:97:e6:93:43:6e:69:73:56:33:
29:f4:f1:43:91:45:ad:7a:6f:7c:bd:63:75:47:6b:
cb:54:22:1a:e3:9c:91:2d:b3:c6:76:54:b5:6d:bd:
0d:4d:fa:1a:cd:6a:7f:d2:a6:ef:b8:2b:51:51:22:
9f:b0:d7:5a:f8:4f:2c:32:27:ff:43:fb:e8:89:f1:
73:13:bd:65:a2:db:74:3b:6f:0c:64:27:0a:b7:52:
de:a1:4d:1e:07:9b:7d:22:c8:ea:d2:e6:fd:7c:84:
90:59:c0:51:d0:03:de:91:57:ec:ff:0b:18:ad:a8:
aa:7a:90:9e:c7:d1:ff:1d:ca:47:7e:c2:60:3f:f7:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:34:B9:33:31:00:1D:29:01:E8:97:26:13:9D:36:DB:FC:AA:9D:01
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:67:96:43:e8:37:05:9a:92:4a:3a:ab:91:ec:9a:31:4e:92:
86:b5:ea:8f:47:f2:03:94:76:79:67:62:6a:30:9c:20:06:7b:
2e:46:c8:c8:6c:60:01:ba:a6:90:de:46:c2:95:4a:0f:c0:26:
61:2a:24:f0:be:83:58:de:27:08:35:19:98:21:c7:30:a5:5d:
8e:f0:eb:08:7b:83:c5:55:cd:b8:b5:56:08:f1:62:20:87:0f:
d9:91:c0:f9:f6:13:cf:b2:f5:25:51:df:64:b6:c4:84:6e:31:
34:68:8c:af:fc:98:b2:c1:e0:01:9d:0b:75:e3:6d:85:b8:9b:
31:57:9d:5f:8e:0d:62:e6:c0:83:59:24:6e:4d:f9:22:c1:4a:
53:a3:94:f2:e2:a8:2b:f2:63:d9:67:f3:1e:19:bb:69:da:f4:
fd:68:5a:48:e9:6a:12:5a:30:fc:80:b2:c3:70:8e:a2:55:02:
4d:eb:a2:98:01:9a:a4:b4:43:d3:07:30:95:62:f6:2c:5a:a5:
18:48:98:ab:7e:62:3b:b0:ad:59:92:4b:2e:3f:0f:b5:b3:db:
d8:04:04:e5:77:23:ff:9b:82:f4:5b:78:c0:60:d5:af:66:0a:
89:cc:6e:6d:d3:a3:7f:b5:34:e5:8f:d7:15:a6:84:c9:db:7d:
95:64:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:32 2026 by rpki-client