
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e31382e302f32332d3233203d3e20313333313139.roa
File: 3132302e35322e31382e302f32332d3233203d3e20313333313139.roa (raw, json)
Hash identifier: LUSlBpMtRj7UcNTXdizFl8eGa/XGLI7KSLw+1RqcaU4=
Subject key identifier: 8E:F1:3E:53:79:B6:62:C7:E4:C7:08:C6:27:0C:57:77:EF:EB:AC:A7
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 28BEF6C9A1A6EFF9D2B6E5C2771397856DF9AFB5
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e31382e302f32332d3233203d3e20313333313139.roa
Signing time: Mon 01 Jun 2026 06:36:07 +0000
ROA not before: Mon 01 Jun 2026 06:31:07 +0000
ROA not after: Mon 31 May 2027 06:36:07 +0000
asID: 133119
IP address blocks: 120.52.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:be:f6:c9:a1:a6:ef:f9:d2:b6:e5:c2:77:13:97:85:6d:f9:af:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 1 06:31:07 2026 GMT
Not After : May 31 06:36:07 2027 GMT
Subject: CN=8EF13E5379B662C7E4C708C6270C5777EFEBACA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:1d:22:7f:58:88:da:97:bc:d1:74:98:8d:
82:61:c0:43:c6:5a:a8:aa:51:ec:21:a2:e2:f8:99:
75:ee:44:a9:e4:67:23:5a:f9:60:c5:cc:63:d5:3d:
67:e2:c9:12:fa:bc:31:3b:ba:4b:18:47:40:15:75:
fa:e3:6c:a6:16:4a:bb:46:ba:55:4b:69:25:58:41:
ce:9d:3e:bb:a4:11:9f:8f:6f:86:16:81:11:09:c7:
5c:72:69:8c:7c:cf:48:61:ec:df:4a:9d:ee:89:d1:
0f:b3:44:df:03:eb:4e:01:53:f7:e3:c5:56:f0:ab:
f9:9a:2d:c6:bb:a0:14:b1:cf:b1:4e:33:d7:6b:e1:
16:c4:cf:e8:ff:ed:f4:92:47:c3:7e:5e:31:0c:b2:
9b:fb:4e:5b:0d:9d:12:8b:e3:b5:67:2a:67:81:65:
a4:1b:fc:9e:cc:bd:21:31:cb:d0:51:c9:a9:38:b7:
9c:62:4c:fb:a0:9d:ff:d9:37:96:ed:e0:79:93:46:
a2:60:48:7e:54:f8:16:e9:2b:2d:00:db:ff:0e:2d:
4c:c8:48:ce:a6:8f:ad:1d:c9:b8:41:b0:bd:59:7a:
87:91:84:d7:57:31:75:e2:ec:77:73:95:44:20:bd:
01:dd:e7:0d:bb:c4:77:75:1b:6c:e7:cf:e2:f9:12:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:3E:53:79:B6:62:C7:E4:C7:08:C6:27:0C:57:77:EF:EB:AC:A7
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e31382e302f32332d3233203d3e20313333313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.52.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:1f:7f:e8:6d:49:f2:46:ec:40:50:99:92:47:c7:81:3c:78:
03:3f:dd:18:24:71:5b:64:27:27:c5:ca:6d:a4:16:62:b9:13:
14:33:ab:a3:24:00:25:94:1f:c3:38:fc:04:ab:58:4e:90:0c:
40:2d:5d:2e:a1:86:d9:5b:15:f0:cd:2c:c1:0a:04:ff:32:07:
47:f9:6d:f1:eb:d0:ab:6d:6a:f9:cc:f0:27:05:7a:5a:da:4b:
6a:0a:6f:e4:22:67:67:2e:0f:0f:4a:25:4d:90:9c:37:8c:04:
0c:9f:f4:2f:2c:4f:9b:37:9e:93:95:88:9d:c4:3d:f7:bb:bd:
01:32:04:ed:53:1c:aa:6c:a8:44:e0:71:d5:1b:3a:dd:9f:f4:
74:43:f4:fd:ca:e1:8c:8e:97:0b:61:c6:27:d2:bc:55:60:86:
29:d5:f0:94:de:35:86:26:e6:d3:bc:f6:99:e6:67:a4:4f:9b:
21:aa:72:3f:29:13:ff:c2:36:26:7c:e1:ac:f8:f2:53:1e:7a:
cc:97:45:c6:64:02:33:b4:5e:be:6b:07:3d:fb:68:f3:c5:a3:
5b:22:71:00:51:b5:34:e8:9d:e4:9c:97:b6:52:e7:79:a1:e7:
5b:db:2a:4a:24:e2:7a:97:1c:f6:e8:01:c0:7d:83:68:09:59:
23:9a:16:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:53 2026 by rpki-client