
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa
File: 3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier: 8Kg3i3gQO/kmih5Qdyp2BmedRYRJpGBbIeSND8LSkfI=
Subject key identifier: 71:AE:02:DF:66:E0:30:D4:58:13:E7:C7:94:34:34:C8:0F:75:00:52
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 124D92A7638AAD8E481929CE1AC44409545A9AFD
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:05:04 +0000
ROA not before: Wed 15 Apr 2026 04:00:04 +0000
ROA not after: Wed 14 Apr 2027 04:05:04 +0000
asID: 4847
IP address blocks: 118.244.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4d:92:a7:63:8a:ad:8e:48:19:29:ce:1a:c4:44:09:54:5a:9a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 04:00:04 2026 GMT
Not After : Apr 14 04:05:04 2027 GMT
Subject: CN=71AE02DF66E030D45813E7C7943434C80F750052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:62:d7:6e:bd:47:e3:52:c4:44:37:c3:d5:
37:c2:e4:e1:7f:35:da:64:57:ac:28:d0:cd:23:a0:
7f:62:8f:22:9c:e4:7c:0c:dd:01:23:cb:d1:d2:7c:
05:75:14:ce:f4:68:b7:7d:40:78:97:66:9b:60:90:
31:72:a3:fb:b4:cd:29:23:2a:2e:58:dd:4f:e4:ca:
23:29:a7:f2:67:bb:57:01:61:cd:3a:2f:d3:d0:2e:
ce:ea:20:67:01:c3:ce:50:23:4d:65:50:64:df:02:
a0:16:9f:f1:cc:47:e3:ad:22:7f:5d:2f:5b:fb:8b:
68:80:7b:f0:01:3f:a4:78:e3:12:20:66:e9:57:f6:
bb:73:40:7c:95:bb:3c:12:f7:d2:27:4e:82:4c:7c:
d5:84:ee:e5:f1:fb:23:91:ba:eb:3c:a7:2b:ea:9d:
e2:d7:a5:bb:a6:6f:cd:e0:fb:03:8d:3c:90:55:af:
ea:42:14:a4:1e:5b:56:91:9e:5f:d3:3e:e4:c3:e9:
4e:54:07:5a:2a:10:58:36:47:56:ae:2e:6c:3f:38:
d1:2e:24:8b:55:c0:21:4b:00:ac:59:e5:ad:71:6f:
40:e5:bc:c6:76:6a:64:f4:a2:96:c6:19:38:39:b3:
50:05:96:d8:13:b2:b8:1d:f6:82:bf:55:b7:05:81:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:02:DF:66:E0:30:D4:58:13:E7:C7:94:34:34:C8:0F:75:00:52
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.244.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:76:b6:a6:c1:0a:15:16:61:8b:6b:55:18:41:1b:b7:dc:aa:
f7:49:65:6d:b9:76:b5:a6:1a:74:9e:bc:98:61:35:d6:d6:2d:
7d:88:ca:e8:a1:bd:03:91:79:be:ee:17:a3:c2:82:33:99:45:
63:07:6f:c4:32:a9:d9:a5:76:3e:e1:cf:95:d8:05:85:a1:e1:
b1:77:ab:75:1c:01:32:0c:65:22:21:8e:6e:20:9d:b1:ef:80:
91:2b:43:4a:b9:db:1c:33:63:a9:92:e7:42:93:a0:03:3c:b9:
f5:ed:ea:da:95:c6:d7:92:89:a0:81:ea:b0:58:62:11:e0:ba:
0b:7b:11:78:a7:31:74:53:a4:27:1d:2a:ca:6b:40:6d:14:7a:
5d:dc:7e:df:33:19:a4:c4:df:49:43:5f:a1:55:b6:af:de:22:
83:fb:8a:bd:95:67:95:c3:9e:11:1d:53:31:95:d3:02:56:54:
b6:79:5c:64:fc:89:6a:26:26:ed:dd:cc:44:ed:82:24:8c:7b:
27:34:94:e4:d2:46:4d:39:f3:e7:40:10:b5:2b:df:8d:89:df:
24:58:db:7d:83:86:f1:2e:ee:07:cf:8a:66:ed:d0:15:60:52:
c5:16:1c:9f:e6:0f:62:29:70:81:cf:02:c3:31:69:5e:f1:6a:
3b:a1:7f:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:32 2026 by rpki-client