
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/3131392e34302e3132382e302f31372d3137203d3e203538383334.roa
File: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (raw, json)
Hash identifier: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=
Subject key identifier: FE:03:9E:11:52:6D:2D:F8:6E:06:DE:20:71:45:F2:9A:D5:93:ED:1A
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 1831163C66DEA1A67E228A1711132D21B49AA54D
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/3131392e34302e3132382e302f31372d3137203d3e203538383334.roa
Signing time: Fri 17 Apr 2026 01:28:27 +0000
ROA not before: Fri 17 Apr 2026 01:23:27 +0000
ROA not after: Fri 16 Apr 2027 01:28:27 +0000
asID: 58834
IP address blocks: 119.40.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:31:16:3c:66:de:a1:a6:7e:22:8a:17:11:13:2d:21:b4:9a:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: Apr 17 01:23:27 2026 GMT
Not After : Apr 16 01:28:27 2027 GMT
Subject: CN=FE039E11526D2DF86E06DE207145F29AD593ED1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:dc:6c:62:17:c0:12:c0:a1:29:63:c0:12:
83:59:75:17:d2:43:af:57:f5:3c:8f:16:89:d0:28:
af:22:36:f7:0a:b1:a7:30:af:58:bc:de:be:10:e3:
10:9a:cc:3b:8a:5e:f2:c7:fc:7f:da:e1:10:85:5a:
0f:06:27:b7:41:78:c8:4e:48:8c:0f:60:17:ac:66:
ba:f6:4a:ab:46:d4:0b:8c:ab:ad:21:ce:eb:aa:7e:
76:9a:66:d6:b6:88:84:f3:4b:4b:f3:c6:2d:1f:1b:
76:18:2a:e0:91:ed:ca:77:fb:be:31:7a:f8:1a:ab:
e3:93:e5:72:2f:04:78:60:64:f4:a6:40:66:fb:4b:
6d:b8:ea:42:c1:a2:64:2e:22:e0:fe:f8:70:12:4f:
84:10:61:49:dc:3c:b5:ea:90:f7:9e:5b:ba:9b:e3:
ed:ba:1b:26:37:60:33:fb:c1:16:31:af:b8:f1:a2:
28:2e:c5:ec:18:fd:84:fc:0b:24:05:c9:37:f2:b1:
3f:73:72:d5:5a:bb:ec:b9:28:20:c8:f4:87:43:16:
9e:b2:0c:ab:cc:c5:ad:17:00:5b:da:0a:75:0d:4b:
f7:f6:35:34:9d:25:0b:dd:73:6a:69:2b:f6:71:61:
e9:4b:10:38:64:9f:6a:51:cd:da:2c:5b:2b:5e:94:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:9E:11:52:6D:2D:F8:6E:06:DE:20:71:45:F2:9A:D5:93:ED:1A
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/3131392e34302e3132382e302f31372d3137203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.40.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8a:56:60:17:14:62:2d:27:14:e7:2d:80:ce:2e:2c:d2:8b:aa:
6e:b3:d8:e3:6b:52:b8:50:2a:aa:4f:f7:d1:e0:94:db:fb:72:
53:b0:e8:5f:84:d1:7d:2e:94:62:83:e3:78:83:2e:34:f2:5b:
1d:c7:fa:d5:e0:ec:c1:e6:a9:c6:56:34:a8:ff:72:35:77:d9:
3d:e4:82:ca:cd:ad:03:3b:13:30:84:49:c2:95:26:3e:8c:a2:
b8:6a:d6:56:76:7d:40:f5:a3:9a:34:b2:23:05:13:49:ec:13:
a1:e9:7a:1b:40:cb:1e:6c:45:ae:15:b6:84:ee:ad:6a:63:1b:
fa:fa:0f:ed:6a:68:8a:b3:9b:24:16:2c:da:6c:f1:70:c6:1c:
4e:b0:40:a2:0d:b0:a7:bc:44:bb:db:fa:2e:99:b1:9d:41:8a:
1a:a0:da:2e:10:ff:05:40:e6:73:22:fd:8b:48:97:b9:20:f4:
6c:14:f3:bc:b8:8f:37:a6:9c:37:9f:cb:17:f1:0b:3d:01:ec:
3c:6b:b3:a1:60:6c:0b:4b:8d:fe:35:eb:42:a3:65:5a:8e:06:
fb:bb:fe:e3:1f:52:1d:90:82:a2:5f:67:67:42:73:26:ec:21:
08:e3:a3:b9:9c:be:7e:cf:f4:6c:93:e6:ac:df:5b:c9:c9:de:
bc:87:19:80
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGDEWPGbeoaZ+IooXERMtIbSapU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4
NTY4MDAyNDAeFw0yNjA0MTcwMTIzMjdaFw0yNzA0MTYwMTI4MjdaMDMxMTAvBgNV
BAMTKEZFMDM5RTExNTI2RDJERjg2RTA2REUyMDcxNDVGMjlBRDU5M0VEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU5dxsYhfAEsChKWPAEoNZdRfS
Q69X9TyPFonQKK8iNvcKsacwr1i83r4Q4xCazDuKXvLH/H/a4RCFWg8GJ7dBeMhO
SIwPYBesZrr2SqtG1AuMq60hzuuqfnaaZta2iITzS0vzxi0fG3YYKuCR7cp3+74x
evgaq+OT5XIvBHhgZPSmQGb7S2246kLBomQuIuD++HAST4QQYUncPLXqkPeeW7qb
4+26GyY3YDP7wRYxr7jxoiguxewY/YT8CyQFyTfysT9zctVau+y5KCDI9IdDFp6y
DKvMxa0XAFvaCnUNS/f2NTSdJQvdc2ppK/ZxYelLEDhkn2pRzdosWytelGZnAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/gOeEVJtLfhuBt4gcUXymtWT7RowHwYDVR0j
BBgwFoAUU7DOydAJgWhiZBZBJttvM4VoACQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA2MDEwNTEzNzk0NjYyNS8wLzUzQjBDRUM5RDAwOTgxNjg2MjY0MTY0MTI2REI2
RjMzODU2ODAwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4NTY4MDAyNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA2MDEwNTEzNzk0NjYyNS8wLzMxMzEzOTJlMzQz
MDJlMzEzMjM4MmUzMDJmMzEzNzJkMzEzNzIwM2QzZTIwMzUzODM4MzMzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEB3cogDANBgkqhkiG9w0BAQsFAAOCAQEAilZgFxRiLScU5y2Azi4s0ouq
brPY42tSuFAqqk/30eCU2/tyU7DoX4TRfS6UYoPjeIMuNPJbHcf61eDsweapxlY0
qP9yNXfZPeSCys2tAzsTMIRJwpUmPoyiuGrWVnZ9QPWjmjSyIwUTSewToel6G0DL
HmxFrhW2hO6tamMb+voP7WpoirObJBYs2mzxcMYcTrBAog2wp7xEu9v6LpmxnUGK
GqDaLhD/BUDmcyL9i0iXuSD0bBTzvLiPN6acN5/LF/ELPQHsPGuzoWBsC0uN/jXr
QqNlWo4G+7v+4x9SHZCCol9nZ0JzJuwhCOOjuZy+fs/0bJPmrN9bycnevIcZgA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:40 2026 by rpki-client