
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/3131392e34322e302e302f31392d3139203d3e203538383334.roa
File: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=
Subject key identifier: 05:40:E5:45:B3:8F:E9:07:C1:CD:FA:05:A1:ED:2B:4C:42:82:41:25
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 7D4A72E2FFD9718FA906FF9FF81FFD17207BD204
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/3131392e34322e302e302f31392d3139203d3e203538383334.roa
Signing time: Fri 17 Apr 2026 01:28:27 +0000
ROA not before: Fri 17 Apr 2026 01:23:27 +0000
ROA not after: Fri 16 Apr 2027 01:28:27 +0000
asID: 58834
IP address blocks: 119.42.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4a:72:e2:ff:d9:71:8f:a9:06:ff:9f:f8:1f:fd:17:20:7b:d2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: Apr 17 01:23:27 2026 GMT
Not After : Apr 16 01:28:27 2027 GMT
Subject: CN=0540E545B38FE907C1CDFA05A1ED2B4C42824125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:51:15:3b:51:59:01:6e:06:b8:81:06:3c:
08:cb:d0:56:f5:fb:9f:5d:8d:aa:4b:c3:89:a5:7b:
f5:9a:6a:3c:57:4a:38:88:38:f1:a7:a6:72:ca:a7:
c9:3d:62:06:92:a1:5b:92:a8:d2:dd:48:c7:51:b3:
14:eb:58:d2:d6:27:45:ba:40:02:94:9b:56:20:d3:
8d:df:0f:91:1b:26:44:81:70:4a:e8:fe:88:fc:42:
fe:05:ed:fb:46:eb:df:b8:56:ef:5b:0a:ed:d6:f0:
5c:60:60:47:29:d2:14:b5:86:e7:60:2d:61:4d:53:
48:f9:73:c6:e6:f8:0f:91:0c:d0:cb:fc:a8:e9:a6:
d4:93:d8:44:69:96:f9:ba:fe:37:36:75:aa:d7:2c:
c6:a1:57:53:62:e4:75:3d:bd:59:2a:0a:66:d1:63:
b4:c1:3c:ac:4f:e5:5d:82:23:e0:93:70:aa:fc:cd:
6b:7b:b5:c3:a1:2c:8b:34:2d:f5:cd:ce:f9:fd:5d:
c1:78:2f:9e:1a:bb:3d:af:c6:74:5c:82:6d:d3:ce:
9d:01:39:65:18:7a:14:c6:a3:00:23:fb:a1:72:e4:
a9:9a:f7:0a:ef:b5:e3:a5:5b:6f:91:96:66:70:03:
5d:62:1c:d9:87:4d:60:71:67:d2:ed:d1:e3:3c:fd:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:E5:45:B3:8F:E9:07:C1:CD:FA:05:A1:ED:2B:4C:42:82:41:25
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/3131392e34322e302e302f31392d3139203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.42.0.0/19
Signature Algorithm: sha256WithRSAEncryption
35:15:dd:cb:f6:c0:53:86:d0:b1:ff:2a:a8:1e:00:d8:ed:4e:
fd:cc:c4:e1:18:aa:f4:a2:61:90:fd:e9:2a:0b:21:5a:b5:42:
c7:f3:7e:b6:49:63:f7:cb:13:00:02:45:62:f6:53:04:bc:89:
c7:5d:74:69:86:93:71:bf:7e:43:fe:60:88:e6:33:5e:a9:66:
25:20:e8:62:90:fe:80:40:10:aa:cc:44:d4:1f:dc:0c:77:6b:
38:08:db:e9:06:ab:57:b1:7a:c6:54:37:ce:78:d2:f4:4a:30:
81:25:0e:c0:6f:cd:84:2c:50:93:fe:7e:23:18:9d:f4:d8:8d:
58:3f:bb:e3:22:f1:78:ad:34:46:09:a2:f9:fe:e4:ae:a6:31:
a0:0e:b4:e8:84:c8:ca:b0:50:ed:3b:1b:6a:15:ad:c1:9e:14:
b3:25:11:99:96:a7:55:4c:c2:b8:4b:cb:1c:ed:f0:13:91:ce:
fc:f7:5b:d2:d2:c0:51:7f:c1:78:12:05:1a:66:03:2c:54:d4:
4b:21:e8:a0:4b:49:cb:1a:51:43:b8:02:c8:3f:e8:72:7c:fc:
bd:36:22:bf:fa:84:b8:4e:81:b9:a5:2d:c7:43:b7:df:13:36:
2c:75:4d:df:9e:a9:2f:52:2e:87:be:cf:25:c6:01:70:69:0a:
dd:dc:22:eb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUfUpy4v/ZcY+pBv+f+B/9FyB70gQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4
NTY4MDAyNDAeFw0yNjA0MTcwMTIzMjdaFw0yNzA0MTYwMTI4MjdaMDMxMTAvBgNV
BAMTKDA1NDBFNTQ1QjM4RkU5MDdDMUNERkEwNUExRUQyQjRDNDI4MjQxMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKVEVO1FZAW4GuIEGPAjL0Fb1
+59djapLw4mle/WaajxXSjiIOPGnpnLKp8k9YgaSoVuSqNLdSMdRsxTrWNLWJ0W6
QAKUm1Yg043fD5EbJkSBcEro/oj8Qv4F7ftG69+4Vu9bCu3W8FxgYEcp0hS1hudg
LWFNU0j5c8bm+A+RDNDL/KjpptST2ERplvm6/jc2darXLMahV1Ni5HU9vVkqCmbR
Y7TBPKxP5V2CI+CTcKr8zWt7tcOhLIs0LfXNzvn9XcF4L54auz2vxnRcgm3Tzp0B
OWUYehTGowAj+6Fy5Kma9wrvteOlW2+RlmZwA11iHNmHTWBxZ9Lt0eM8/Rq/AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUBUDlRbOP6QfBzfoFoe0rTEKCQSUwHwYDVR0j
BBgwFoAUU7DOydAJgWhiZBZBJttvM4VoACQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA2MDEwNTEzNzk0NjYyNS8wLzUzQjBDRUM5RDAwOTgxNjg2MjY0MTY0MTI2REI2
RjMzODU2ODAwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4NTY4MDAyNC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDYwMTA1MTM3OTQ2NjI1LzAvMzEzMTM5MmUzNDMy
MmUzMDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDM1MzgzODMzMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAV3KgAwDQYJKoZIhvcNAQELBQADggEBADUV3cv2wFOG0LH/KqgeANjtTv3MxOEY
qvSiYZD96SoLIVq1QsfzfrZJY/fLEwACRWL2UwS8icdddGmGk3G/fkP+YIjmM16p
ZiUg6GKQ/oBAEKrMRNQf3Ax3azgI2+kGq1exesZUN8540vRKMIElDsBvzYQsUJP+
fiMYnfTYjVg/u+Mi8XitNEYJovn+5K6mMaAOtOiEyMqwUO07G2oVrcGeFLMlEZmW
p1VMwrhLyxzt8BORzvz3W9LSwFF/wXgSBRpmAyxU1Esh6KBLScsaUUO4Asg/6HJ8
/L02Ir/6hLhOgbmlLcdDt98TNix1Td+eqS9SLoe+zyXGAXBpCt3cIus=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:39 2026 by rpki-client