
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e31322e302f32322d3232203d3e2030.roa
File: 3131392e38302e31322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: hX440M+Wr7Ig6ORoOb9B089xro/8qY67jnC7q5UxTpk=
Subject key identifier: BE:AF:F8:CF:F3:FB:E3:E6:6A:C4:46:D6:0C:93:42:4D:A1:B6:BB:D3
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 7B68919EB0B485E42D345FFC1F0CB223AE2B1E4F
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e31322e302f32322d3232203d3e2030.roa
Signing time: Mon 25 May 2026 01:09:37 +0000
ROA not before: Mon 25 May 2026 01:04:37 +0000
ROA not after: Mon 24 May 2027 01:09:37 +0000
asID: 0
IP address blocks: 119.80.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:68:91:9e:b0:b4:85:e4:2d:34:5f:fc:1f:0c:b2:23:ae:2b:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 25 01:04:37 2026 GMT
Not After : May 24 01:09:37 2027 GMT
Subject: CN=BEAFF8CFF3FBE3E66AC446D60C93424DA1B6BBD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:0b:bd:17:fc:6c:bc:dc:e1:f4:d3:64:2a:
69:0d:32:94:5d:16:1e:a2:99:35:b1:89:e8:79:0c:
b8:f1:d2:af:22:7b:d8:ee:df:9f:f0:96:36:d6:cc:
4d:c4:a3:07:40:48:3e:4a:21:f3:e4:7e:b3:04:0d:
e3:7a:69:44:ca:ef:0f:38:bb:b4:02:3b:f1:d2:54:
40:67:c2:77:75:e5:fd:fe:3c:a7:6e:18:8b:f6:73:
41:e6:44:57:fd:5b:ea:e4:f1:fc:fe:a2:ee:8e:b2:
07:11:59:b2:51:5b:a8:1c:2d:f7:92:c0:bb:d3:1e:
22:7a:89:a6:9f:36:da:41:ce:85:45:a1:2f:67:42:
1a:e7:5a:9c:66:aa:05:48:40:5a:d1:b2:ff:c5:72:
02:d2:8e:6b:ac:5b:6b:3a:d5:9e:cc:e7:a6:c9:91:
80:d7:d3:e7:3d:ec:ad:e3:c8:d9:88:cd:bc:f6:5b:
d0:bb:97:26:d2:a7:77:d2:6d:a5:62:e8:55:82:66:
be:84:d9:23:b9:35:1b:6a:07:53:2f:b4:5c:56:cd:
94:af:54:6d:de:53:eb:66:fb:60:59:b5:2e:72:af:
c4:57:dc:82:55:50:da:b0:6b:ed:4c:87:51:4d:c0:
6d:4b:91:30:6c:f4:d8:68:d5:db:c9:41:16:c8:79:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:F8:CF:F3:FB:E3:E6:6A:C4:46:D6:0C:93:42:4D:A1:B6:BB:D3
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e31322e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:53:7a:e9:85:80:cf:15:e6:70:40:70:cd:93:89:c7:8e:8c:
05:d9:92:96:06:88:86:cd:ba:04:a5:85:1d:2f:84:06:ad:b1:
03:61:d4:ae:bd:a8:2a:7f:83:2b:1b:fc:00:cf:ed:d0:27:3f:
6f:ad:44:18:20:fd:6b:b1:c2:5f:dc:e3:00:af:a3:ba:29:3a:
a9:a0:5a:57:92:c8:1b:77:83:fd:6d:a7:5f:92:23:e7:fe:74:
13:40:c9:43:01:38:10:83:06:ad:03:9a:a1:54:84:00:36:34:
27:fc:5e:a5:ab:7c:d9:24:e2:06:4f:9e:31:06:e1:60:90:b7:
6a:18:2a:14:61:74:af:78:79:6f:13:a9:e5:20:38:40:4b:38:
ec:3a:35:e0:32:8f:cd:22:b2:bf:3c:29:32:32:de:b4:49:a1:
84:e8:30:ca:54:0e:1a:00:cd:36:54:22:7c:34:84:da:85:4c:
3d:a6:f2:e1:cb:a2:d8:ac:50:3c:8e:d8:d4:51:66:07:0d:0b:
eb:d4:e6:16:13:89:99:4e:85:4e:46:1c:c0:8f:50:7b:a4:ef:
3e:c9:c7:a5:2e:4a:d0:f3:24:0d:9e:1b:ae:3f:be:a8:cb:53:
3e:7b:82:1a:f1:7f:aa:66:4d:e3:ee:0b:88:e1:6b:87:9c:c4:
17:17:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:44:27 2026 by rpki-client