
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa
File: 3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier: 34DEjgc+uFzAvaJR2gQqwSseBX9CZsTiDQ1qcyMCy+A=
Subject key identifier: 42:C7:19:EF:79:14:C9:16:7E:61:D3:46:8C:7C:E4:D7:0C:45:FE:61
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 4CF0BF5B09694E79AD2782096CCA63704BAA43DF
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa
Signing time: Thu 16 Apr 2026 07:16:03 +0000
ROA not before: Thu 16 Apr 2026 07:11:03 +0000
ROA not after: Thu 15 Apr 2027 07:16:03 +0000
asID: 63631
IP address blocks: 119.161.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 13:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f0:bf:5b:09:69:4e:79:ad:27:82:09:6c:ca:63:70:4b:aa:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Apr 16 07:11:03 2026 GMT
Not After : Apr 15 07:16:03 2027 GMT
Subject: CN=42C719EF7914C9167E61D3468C7CE4D70C45FE61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:31:2c:b9:c1:3e:11:e3:2a:e9:18:31:27:
ca:fb:55:48:99:df:31:b2:13:58:d2:3c:cc:00:a4:
e9:15:dd:f0:22:7e:17:4a:68:2b:64:c9:77:3b:dd:
ad:47:c4:81:af:e5:7a:72:0c:9a:06:4b:87:69:72:
2f:c2:2a:e5:2e:1a:66:67:c8:75:b3:8e:32:52:e7:
50:be:b7:42:b9:89:79:95:90:b3:fc:23:00:82:69:
3c:5d:1a:a0:64:4d:5b:6d:cc:07:b5:71:9b:9a:e4:
ed:ba:7a:fb:c9:88:04:49:30:55:b2:e9:08:5e:f4:
56:1e:57:77:e9:98:50:c7:14:f0:f1:37:4b:fd:0b:
95:5d:2c:e5:63:92:c8:13:fb:36:b5:41:d6:35:b3:
68:c2:5b:f0:04:e7:e0:b6:47:64:16:c2:4b:de:1d:
25:16:d2:8e:6d:60:a1:bd:22:40:3d:c5:f1:44:dc:
b2:a3:53:69:6e:25:11:4c:a8:3a:71:b5:8e:5c:d8:
d6:6a:34:32:12:16:4b:fd:23:a6:75:72:ff:da:1d:
f6:b1:f5:9e:cb:a2:70:b7:1f:81:b7:5f:b4:81:dc:
1d:ac:a2:0c:c7:e4:e2:84:f3:2c:5a:b4:5b:3b:b1:
cd:2a:38:c7:b5:49:63:e4:b1:92:e7:27:06:91:c6:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:19:EF:79:14:C9:16:7E:61:D3:46:8C:7C:E4:D7:0C:45:FE:61
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.151.0/24
Signature Algorithm: sha256WithRSAEncryption
24:df:96:1a:31:c4:5b:aa:08:65:15:94:1f:0b:a0:7d:bf:4f:
03:05:d0:77:7e:21:60:a8:40:b6:65:ce:8c:43:c4:32:fd:81:
17:4f:b0:10:68:19:a6:7a:85:e1:7f:f8:5e:87:a3:9e:c2:db:
ee:81:5e:79:1d:37:23:5d:15:fb:2f:1f:c3:20:03:11:33:1e:
c6:72:3b:9e:8f:7c:c4:03:5d:dd:d4:fb:9a:80:07:70:8a:46:
a6:4c:56:79:ad:d6:bc:17:4f:58:22:94:8d:b1:e7:98:87:ee:
c3:14:fd:2c:18:82:99:34:97:be:e7:69:c6:18:72:d3:f3:69:
44:4b:9f:58:ae:ea:a6:f3:b0:45:ea:68:54:64:49:1f:bd:b0:
94:49:f8:eb:5c:df:54:00:53:ec:a9:98:b7:85:4c:f0:f5:30:
91:b1:7c:6b:d2:7f:37:e2:58:31:09:e8:88:b2:83:56:16:0a:
07:af:9c:98:4d:f8:f5:6e:fa:0b:21:0f:44:f2:09:73:a3:4a:
6f:db:02:42:0d:3b:74:6c:0a:85:10:d0:ef:32:74:29:c4:07:
39:4d:80:d8:3b:1d:3f:2e:95:53:29:0a:7d:e5:29:e4:ca:32:
d7:88:91:30:7f:2b:df:ed:9b:d3:63:b9:53:74:13:54:8b:a3:
af:7e:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:23 2026 by rpki-client