
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136332e302f32342d3234203d3e2030.roa
File: 3131392e38302e3136332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 5CdaaTQdvXXChpnSQuj4LrMOT2wdb5Jvb4r+gllu8XE=
Subject key identifier: F7:45:F0:18:40:98:DC:54:19:64:07:B8:3C:72:7E:4E:F0:3B:33:B3
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 1845F8EE9DEFEBF469BF1323D8E0237C9D9DC326
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136332e302f32342d3234203d3e2030.roa
Signing time: Mon 25 May 2026 01:23:24 +0000
ROA not before: Mon 25 May 2026 01:18:24 +0000
ROA not after: Mon 24 May 2027 01:23:24 +0000
asID: 0
IP address blocks: 119.80.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:45:f8:ee:9d:ef:eb:f4:69:bf:13:23:d8:e0:23:7c:9d:9d:c3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 25 01:18:24 2026 GMT
Not After : May 24 01:23:24 2027 GMT
Subject: CN=F745F0184098DC54196407B83C727E4EF03B33B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c3:29:29:e5:06:19:41:64:24:c8:ba:76:f3:
80:83:b7:43:d9:4e:fb:76:09:b8:b4:f8:e3:ff:a7:
51:05:16:b8:7c:0f:d1:44:da:4b:01:62:d1:db:e5:
e4:47:92:f6:1a:31:aa:1f:86:50:41:b8:df:33:3c:
88:aa:d6:d9:c6:19:1a:1e:2c:ff:c8:9c:3c:d2:cf:
6f:6a:4c:8e:1e:93:4e:12:ce:15:3a:5c:e4:88:77:
94:2c:96:30:b3:8b:e3:fa:7a:62:78:0e:db:d8:f2:
11:4d:c3:3a:03:50:8f:79:90:31:54:d2:27:69:70:
3a:05:e0:08:a9:2f:a4:de:8b:41:ad:5f:ef:cc:4d:
4a:00:d8:ee:4c:37:19:5f:bd:04:03:7f:a2:8d:12:
2e:66:e7:d8:3d:55:af:9a:41:13:c0:ed:ab:e3:83:
99:8c:b8:a9:61:32:79:54:4c:3f:04:0b:52:cf:95:
1a:94:54:91:4d:1a:93:0b:c7:78:9a:76:48:12:15:
bf:98:b4:35:2b:b9:f8:ea:13:07:98:20:5b:a5:a2:
01:0f:b1:a1:f2:9a:97:8d:38:ab:ce:29:f0:03:bb:
be:fb:5c:06:eb:30:b2:cc:40:08:cf:a1:40:1c:3b:
49:4c:a1:94:81:b7:ea:e9:56:bd:f4:52:f7:b0:3f:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:F0:18:40:98:DC:54:19:64:07:B8:3C:72:7E:4E:F0:3B:33:B3
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:00:7f:27:01:de:e4:8a:46:af:44:a6:79:14:ba:a4:a1:19:
65:21:07:54:46:1a:ef:50:8a:51:7a:f9:ef:9f:fb:aa:e7:75:
91:60:46:23:0b:f4:17:f2:7d:04:8b:d2:44:a6:b2:34:32:88:
2a:5f:d2:a8:3b:aa:6d:95:a8:89:7e:2e:ff:65:3d:5a:4d:29:
4c:69:a3:e8:df:e8:78:db:bf:89:3a:ca:f5:22:7c:41:ed:9c:
66:85:0c:ea:06:16:79:db:ba:1a:52:4a:ba:ed:79:f5:bb:e3:
26:f1:c8:2c:0a:8e:17:a6:51:a9:67:db:7c:54:02:44:07:00:
e1:00:7b:c5:e4:07:f5:99:fb:a0:bb:00:98:e5:b9:0e:a6:7c:
eb:6b:10:b5:12:4d:16:df:c7:66:33:c3:53:15:73:62:01:59:
48:42:22:ef:6b:c9:02:2a:df:d8:05:b4:8c:3a:4d:29:15:bc:
3a:a1:79:54:37:a0:d6:96:54:90:7c:98:9a:da:b8:fa:19:aa:
b9:d9:21:1a:ec:1f:93:f4:fe:e5:5d:da:5a:ab:29:fd:a2:e5:
a2:68:0d:a2:16:60:5d:d8:98:c0:72:f4:73:91:fb:02:da:a7:
6b:6f:34:91:97:d1:d2:5a:6d:4e:fc:13:50:7f:fd:04:8e:1c:
3b:8a:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:18:00 2026 by rpki-client