
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3134352e302e302f31392d3139203d3e2034383437.roa
File: 3131382e3134352e302e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier: v1qAxEF4oSMmTdESXs8DoUZ4pGpDi2j4nExJCktI3e4=
Subject key identifier: EB:36:83:DC:9F:8E:F2:7D:8B:AD:19:5D:7B:A4:7A:78:B7:AE:1C:19
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 5A5199EE8FDC4748FA582A376DA9C91A11820D49
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3134352e302e302f31392d3139203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:05:03 +0000
ROA not before: Wed 15 Apr 2026 04:00:03 +0000
ROA not after: Wed 14 Apr 2027 04:05:03 +0000
asID: 4847
IP address blocks: 118.145.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:51:99:ee:8f:dc:47:48:fa:58:2a:37:6d:a9:c9:1a:11:82:0d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 04:00:03 2026 GMT
Not After : Apr 14 04:05:03 2027 GMT
Subject: CN=EB3683DC9F8EF27D8BAD195D7BA47A78B7AE1C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:04:b5:d8:8d:56:39:02:2c:c6:f1:4a:72:
a0:b1:13:76:a5:d2:0e:ba:cd:9c:b8:af:f0:89:b1:
24:65:bd:f7:21:86:bf:4a:aa:b5:d3:7d:b6:ad:a4:
12:16:7f:45:b2:6d:5e:57:b8:ce:2a:7e:7e:2b:54:
c3:b2:1b:fd:6c:3f:df:dc:2b:24:ff:4f:f3:87:bc:
fb:fa:ca:55:32:8e:1f:8a:8d:2e:3f:8e:71:1e:f6:
65:30:b1:0c:46:ab:48:de:04:6b:bf:79:67:91:3c:
c4:bb:c0:99:6d:ac:e8:5d:2a:22:b2:20:03:ef:e2:
82:3c:15:d7:89:df:bd:d9:3c:c4:06:7f:e0:9a:2b:
61:4e:24:74:e9:8a:c7:b2:df:8b:e4:0a:67:cd:02:
22:84:57:69:4b:5a:9d:67:1b:48:74:4f:56:d2:fa:
7f:95:ca:97:4d:90:a0:60:06:82:1c:4d:f3:ca:95:
cc:b9:f2:e7:c7:97:58:ae:f2:3a:dc:a3:c8:b6:9f:
ed:66:32:65:59:ae:3c:da:6f:8f:60:1f:b4:61:1f:
0b:53:fa:39:89:f0:22:f7:d2:6f:5e:5f:74:aa:87:
2d:e0:0a:f8:2c:04:83:b0:51:e0:f2:b1:1e:64:87:
97:cc:b9:59:ea:df:c3:80:eb:d8:07:f9:7d:c6:3f:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:83:DC:9F:8E:F2:7D:8B:AD:19:5D:7B:A4:7A:78:B7:AE:1C:19
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3134352e302e302f31392d3139203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.145.0.0/19
Signature Algorithm: sha256WithRSAEncryption
43:25:22:cb:ef:96:42:90:be:0d:0d:17:38:42:7a:79:fd:43:
f4:54:ed:cd:e1:5a:31:25:74:a7:d9:a3:08:e1:fe:7a:47:40:
08:24:00:8d:a3:a8:63:8c:5d:21:5c:14:81:3e:56:f2:7b:36:
d3:65:56:68:96:87:63:78:2e:c4:af:27:ac:b9:7b:d3:f3:fd:
de:58:da:60:6c:b5:0c:22:f7:54:84:78:08:91:59:11:71:4f:
cc:2e:3c:27:22:b0:09:9f:9a:b0:50:be:4c:7f:70:56:95:10:
0b:40:77:e8:9c:5b:21:7e:12:0a:43:3a:ab:de:c5:1e:a4:b6:
53:0d:6c:3b:1e:fc:dc:a2:1c:b1:47:d5:07:45:ee:e7:38:a0:
88:11:9f:fc:63:50:43:53:8d:71:9b:24:d9:16:e3:2a:24:76:
bd:c6:88:6d:a0:14:b0:f5:e3:e8:fb:7e:7e:e1:4a:45:81:ef:
ab:ce:7a:76:86:8e:88:45:ff:77:d0:12:28:6d:42:e1:d6:83:
24:56:1d:78:84:63:75:d0:9f:12:b9:95:6e:e3:78:87:c6:dc:
35:86:97:fd:1c:09:06:48:e8:eb:43:c3:9f:a6:a5:a8:51:a2:
71:60:0b:32:d9:80:93:e9:5c:4d:62:bb:a5:ca:e0:36:c6:b6:
2a:0a:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:03:42 2026 by rpki-client