
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3137362e302f32302d3230203d3e2030.roa
File: 3131392e38302e3137362e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: WkeMQ5ShuDCNuxaVGUtgg2qrqKsnJFK/iRO/iA40KzY=
Subject key identifier: F9:29:E4:F6:32:DF:02:84:CF:98:25:16:7F:CC:BA:F9:F3:99:25:43
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 124A4E55D58502E48A5F30850701FF18EE115820
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3137362e302f32302d3230203d3e2030.roa
Signing time: Mon 25 May 2026 01:23:25 +0000
ROA not before: Mon 25 May 2026 01:18:25 +0000
ROA not after: Mon 24 May 2027 01:23:25 +0000
asID: 0
IP address blocks: 119.80.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4a:4e:55:d5:85:02:e4:8a:5f:30:85:07:01:ff:18:ee:11:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: May 25 01:18:25 2026 GMT
Not After : May 24 01:23:25 2027 GMT
Subject: CN=F929E4F632DF0284CF9825167FCCBAF9F3992543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:2e:7c:9c:c6:0b:32:8b:fa:b5:ae:b2:65:
01:32:11:a6:df:52:dc:6b:c7:77:ee:61:c7:ae:9f:
5b:ee:61:7c:47:da:18:40:89:ad:2e:c9:ae:c0:69:
88:f1:58:f5:57:38:67:71:9b:a6:21:d2:8b:bc:7b:
08:fb:a3:c7:72:80:07:79:0c:15:70:a6:f2:4d:90:
d3:2d:64:22:81:e6:3b:c6:ba:85:1d:62:5d:e7:85:
25:9f:81:32:db:e4:eb:73:69:ff:01:6a:00:ef:c8:
7c:be:6f:f5:e9:d4:73:10:80:ab:d7:88:d8:b1:2d:
98:14:d8:eb:47:43:59:92:46:92:b9:e1:c1:5a:8d:
c9:07:08:77:ba:f5:43:d1:74:d9:33:39:19:c5:51:
1c:aa:ed:00:fd:27:50:f2:95:29:56:ab:b1:2b:e4:
94:69:20:c2:89:ac:aa:3a:f6:27:8a:19:da:19:cf:
e7:c1:27:9b:f6:c9:8c:46:f1:ef:04:89:07:87:7c:
30:e5:f2:b2:db:7f:13:d8:e9:62:4e:66:25:98:93:
9c:fa:5d:9c:38:6b:74:94:6d:fc:41:62:ca:ac:0e:
d8:2f:1d:b1:9d:01:3d:26:25:ea:3b:e4:71:1b:70:
68:86:72:24:57:90:19:5f:29:55:2b:6f:c8:65:74:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:E4:F6:32:DF:02:84:CF:98:25:16:7F:CC:BA:F9:F3:99:25:43
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3137362e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.80.176.0/20
Signature Algorithm: sha256WithRSAEncryption
08:51:16:2d:42:9a:d3:d6:5f:ba:c1:60:74:ad:51:bc:a2:1b:
e4:c1:cc:15:68:90:81:d9:0e:25:9c:f9:20:24:61:13:18:6a:
fd:f0:ce:33:38:3c:4e:87:c5:52:be:df:8b:96:89:cf:fb:93:
55:4d:22:7c:76:34:7e:fd:9c:36:a3:96:ab:0f:ca:9e:d8:c3:
2b:0b:36:29:48:e5:b6:5e:03:5e:09:91:15:bb:ad:83:9e:9a:
ae:1d:63:eb:c7:a2:b8:0f:9c:8a:c7:91:c2:96:c6:56:93:dd:
bc:d7:e4:bd:20:dc:ec:fc:fe:5c:eb:23:f2:b6:33:ab:dd:43:
bb:2a:c4:6f:49:76:ff:c2:87:52:6f:13:c9:17:9b:22:a2:73:
20:d3:7f:0c:7b:b9:54:6d:a4:54:49:a5:a5:dc:3c:61:de:02:
b3:e1:4c:51:8a:b7:59:5d:b5:91:78:c8:21:7c:db:bf:df:78:
47:90:23:5b:10:5f:ed:46:8e:43:01:0f:f5:db:16:c8:fb:04:
0b:5b:66:cd:ae:b2:67:5a:92:61:42:52:d7:6a:06:62:06:7b:
e9:c2:20:66:6c:6d:cd:49:9e:5c:22:b4:45:ae:02:f9:6f:ea:
de:7c:29:f4:f1:e4:3b:d3:5a:9f:79:7c:fe:93:21:5f:15:44:
b7:a8:bc:2d
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUEkpOVdWFAuSKXzCFBwH/GO4RWCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC
NTFBN0M0OTAeFw0yNjA1MjUwMTE4MjVaFw0yNzA1MjQwMTIzMjVaMDMxMTAvBgNV
BAMTKEY5MjlFNEY2MzJERjAyODRDRjk4MjUxNjdGQ0NCQUY5RjM5OTI1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7C58nMYLMov6ta6yZQEyEabf
Utxrx3fuYceun1vuYXxH2hhAia0uya7AaYjxWPVXOGdxm6Yh0ou8ewj7o8dygAd5
DBVwpvJNkNMtZCKB5jvGuoUdYl3nhSWfgTLb5Otzaf8BagDvyHy+b/Xp1HMQgKvX
iNixLZgU2OtHQ1mSRpK54cFajckHCHe69UPRdNkzORnFURyq7QD9J1DylSlWq7Er
5JRpIMKJrKo69ieKGdoZz+fBJ5v2yYxG8e8EiQeHfDDl8rLbfxPY6WJOZiWYk5z6
XZw4a3SUbfxBYsqsDtgvHbGdAT0mJeo75HEbcGiGciRXkBlfKVUrb8hldBpvAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU+Snk9jLfAoTPmCUWf8y6+fOZJUMwHwYDVR0j
BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG
QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw
MmUzMTM3MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHdQ
sDANBgkqhkiG9w0BAQsFAAOCAQEACFEWLUKa09ZfusFgdK1RvKIb5MHMFWiQgdkO
JZz5ICRhExhq/fDOMzg8TofFUr7fi5aJz/uTVU0ifHY0fv2cNqOWqw/KntjDKws2
KUjltl4DXgmRFbutg56arh1j68eiuA+ciseRwpbGVpPdvNfkvSDc7Pz+XOsj8rYz
q91DuyrEb0l2/8KHUm8TyRebIqJzINN/DHu5VG2kVEmlpdw8Yd4Cs+FMUYq3WV21
kXjIIXzbv994R5AjWxBf7UaOQwEP9dsWyPsEC1tmza6yZ1qSYUJS12oGYgZ76cIg
ZmxtzUmeXCK0Ra4C+W/q3nwp9PHkO9Nan3l8/pMhXxVEt6i8LQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:44:32 2026 by rpki-client