
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131392e33312e3139322e302f31392d3139203d3e203234313337.roa
File: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (raw, json)
Hash identifier: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=
Subject key identifier: CF:D7:EF:72:D8:88:7C:BA:59:5E:DF:B3:C7:4B:B1:32:BB:A9:9F:0E
Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial: 7381A56B2BEEEE813864298623BF3CCBFD3ABB01
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131392e33312e3139322e302f31392d3139203d3e203234313337.roa
Signing time: Wed 15 Apr 2026 07:09:14 +0000
ROA not before: Wed 15 Apr 2026 07:04:14 +0000
ROA not after: Wed 14 Apr 2027 07:09:14 +0000
asID: 24137
IP address blocks: 119.31.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:81:a5:6b:2b:ee:ee:81:38:64:29:86:23:bf:3c:cb:fd:3a:bb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Validity
Not Before: Apr 15 07:04:14 2026 GMT
Not After : Apr 14 07:09:14 2027 GMT
Subject: CN=CFD7EF72D8887CBA595EDFB3C74BB132BBA99F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:61:58:7e:be:8e:6d:b0:92:1e:81:7f:d3:
78:7c:48:c0:6e:64:f7:fc:16:16:ac:37:02:b4:16:
1c:71:ca:14:5c:84:81:f0:6b:83:47:a6:f1:5c:8d:
ca:a8:64:27:48:87:78:df:3c:0f:5a:a0:07:2e:d7:
f2:e8:0d:4c:1d:33:e0:ea:16:22:ee:2a:12:23:2a:
67:69:70:ed:27:30:29:ce:65:5a:b3:89:4c:da:ea:
f1:79:a1:56:1a:49:84:f9:6b:cc:36:1d:3d:34:1d:
66:6f:46:2b:a5:0f:21:f3:fc:d3:5f:f6:69:7c:c9:
27:86:79:4d:13:ca:dc:df:93:25:8b:9e:f5:f4:ae:
fe:03:b7:86:56:45:7e:94:31:25:18:3b:6c:85:5f:
3f:a8:45:c7:69:72:ec:1a:fc:bf:da:35:a1:6b:d8:
80:9f:e1:45:f3:8a:d5:d1:5c:93:b5:d6:62:97:20:
8f:fa:1a:6d:93:04:a0:36:40:d8:f3:40:c2:3c:95:
00:f8:26:c3:7a:bc:ef:84:7c:d8:9f:f9:10:64:de:
a2:a3:9a:bd:80:a0:4f:ab:d4:7d:b9:a6:50:8e:5d:
7f:84:7c:fa:e9:dd:00:92:57:16:1e:e1:09:c6:17:
d3:da:e7:53:8c:29:89:ef:48:c5:81:5d:f3:bf:ac:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:EF:72:D8:88:7C:BA:59:5E:DF:B3:C7:4B:B1:32:BB:A9:9F:0E
X509v3 Authority Key Identifier:
keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131392e33312e3139322e302f31392d3139203d3e203234313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.31.192.0/19
Signature Algorithm: sha256WithRSAEncryption
83:b6:4a:dd:6e:90:0b:2f:70:00:7b:44:60:ac:13:28:26:1d:
7d:84:a6:35:ea:97:ad:97:8f:87:bb:aa:27:48:f5:35:16:0e:
98:33:7a:9b:06:09:dd:38:0d:8c:de:46:ed:aa:f8:fc:c8:1e:
fd:6f:76:7a:08:38:64:78:7f:5d:e0:19:77:fb:02:82:c4:88:
8d:75:90:31:79:d0:c5:8a:85:f1:58:55:fa:66:2e:60:dc:32:
6c:65:58:e2:f8:1e:ba:4c:ab:d5:de:a9:81:1a:2e:51:09:e6:
cc:bd:69:04:5f:18:e7:08:3a:69:a9:ef:e9:1a:67:52:a6:e2:
1c:43:5e:3c:9f:a8:ba:b0:01:95:fd:84:42:83:1e:3f:c2:2d:
83:73:57:70:ef:fd:b0:4d:67:ba:6a:6d:9a:cc:6b:a4:66:18:
57:6f:e9:e9:7f:a2:e9:8e:8a:5c:f5:3d:00:41:eb:91:83:88:
5c:9f:ed:cd:60:eb:9d:90:65:89:55:b7:67:61:45:c0:4b:52:
c3:b4:71:6a:a1:6f:b9:14:a6:c8:3d:fe:2e:02:73:85:32:5a:
27:cd:23:31:dc:b6:58:40:63:9b:10:ca:4e:2e:ad:6a:52:33:
96:1b:eb:5e:06:58:ba:57:db:c5:72:8b:c7:a3:df:07:d4:dd:
ba:e7:40:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:21 2026 by rpki-client