
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e312e302f32342d3234203d3e2039333934.roa
File: 3131312e3134382e312e302f32342d3234203d3e2039333934.roa (raw, json)
Hash identifier: a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=
Subject key identifier: CE:0A:8B:71:72:ED:D7:5D:E5:60:1B:17:9A:A8:B6:A4:10:B1:75:4C
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 49A532A794DAD710E2DAE7F8E59E5BC778CBF802
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e312e302f32342d3234203d3e2039333934.roa
Signing time: Sun 31 May 2026 23:09:43 +0000
ROA not before: Sun 31 May 2026 23:04:43 +0000
ROA not after: Sun 30 May 2027 23:09:43 +0000
asID: 9394
IP address blocks: 111.148.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a5:32:a7:94:da:d7:10:e2:da:e7:f8:e5:9e:5b:c7:78:cb:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 31 23:04:43 2026 GMT
Not After : May 30 23:09:43 2027 GMT
Subject: CN=CE0A8B7172EDD75DE5601B179AA8B6A410B1754C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:c2:14:71:c7:be:b0:fc:6c:3d:e0:45:11:
38:3b:21:04:88:73:0b:d1:4d:e2:a3:ca:46:da:05:
07:d0:b6:c2:25:5c:00:a9:9b:bd:34:10:43:67:a8:
10:3b:97:c6:38:15:01:54:9a:71:01:dc:a8:66:d6:
5b:79:e5:4e:30:76:ec:ca:2b:4a:b1:72:0c:0b:e8:
99:00:53:0c:47:e9:ae:33:6b:9d:4a:7d:88:2e:d7:
f4:2b:6c:cb:37:42:cb:11:24:bc:82:20:f2:bf:ae:
0d:42:d5:e6:15:c6:90:5d:62:e2:a5:5f:2e:71:a5:
d0:9d:50:c7:c7:94:c3:93:87:68:02:4f:71:83:34:
5e:8d:f6:1c:93:e4:7a:86:fd:ce:03:e0:5c:4c:e9:
50:c6:c4:1f:91:40:f7:e4:b8:4d:e7:b7:ad:c2:f8:
1f:3f:17:d4:49:f2:93:c1:9e:ea:49:f1:7f:9a:c6:
05:da:f5:41:48:5f:b2:a1:7b:b7:5b:78:27:44:b3:
d9:fc:72:db:69:94:97:ad:4b:6c:97:0c:a2:08:4e:
7c:fa:08:55:ff:34:91:24:c6:3d:4d:7b:66:4b:00:
2d:55:5e:b6:9b:d5:42:5e:4a:29:18:ce:2b:e8:6c:
18:a2:d0:23:85:a0:0f:7c:a5:b6:fa:a4:cb:5b:ee:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:8B:71:72:ED:D7:5D:E5:60:1B:17:9A:A8:B6:A4:10:B1:75:4C
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e312e302f32342d3234203d3e2039333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.148.1.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7a:8f:bb:7b:53:c1:af:96:7e:43:e2:df:bf:35:12:37:8a:
f7:22:e9:f5:18:9f:df:6b:48:59:1c:c6:f8:a5:c4:8c:8f:3c:
f1:e1:a1:14:93:dd:ad:ad:c2:4a:c1:21:81:22:da:b2:3c:51:
6d:96:ab:ce:99:17:4a:72:db:c5:1e:18:1c:af:8e:e3:c5:fd:
7b:3f:b9:e7:3c:f8:32:7b:f6:03:a7:13:fd:73:02:f0:56:ff:
bc:9b:39:30:6c:fc:0a:e3:bb:3c:d6:50:31:8f:1a:99:00:d9:
79:25:5b:5d:60:47:4d:67:3d:37:84:b7:6a:ec:e8:d1:ad:2d:
9a:10:6b:da:a0:28:d2:4f:63:89:05:5b:e3:12:0e:19:b5:32:
12:1c:ef:37:ce:14:83:53:d4:66:ba:58:4d:69:e8:6c:44:01:
be:7b:97:79:f4:b3:0c:b6:b3:60:f9:50:a2:92:9c:a9:a3:5a:
e1:dd:dc:eb:12:48:14:d6:e8:cc:5a:8a:e9:1e:18:ca:24:37:
36:ce:1d:a7:01:78:0d:8b:7f:43:8f:b0:76:6c:44:95:ff:bd:
d7:50:6a:0a:47:5b:7c:1c:0b:86:f2:d8:ee:26:52:90:49:a6:
6c:33:27:b9:43:79:ad:67:c1:a8:ec:c0:32:a1:46:ff:c3:71:
50:49:3a:06
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUSaUyp5Ta1xDi2uf45Z5bx3jL+AIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx
MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUzMTIzMDQ0M1oX
DTI3MDUzMDIzMDk0M1owMzExMC8GA1UEAxMoQ0UwQThCNzE3MkVERDc1REU1NjAx
QjE3OUFBOEI2QTQxMEIxNzU0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIJwhRxx76w/Gw94EURODshBIhzC9FN4qPKRtoFB9C2wiVcAKmbvTQQQ2eo
EDuXxjgVAVSacQHcqGbWW3nlTjB27MorSrFyDAvomQBTDEfprjNrnUp9iC7X9Cts
yzdCyxEkvIIg8r+uDULV5hXGkF1i4qVfLnGl0J1Qx8eUw5OHaAJPcYM0Xo32HJPk
eob9zgPgXEzpUMbEH5FA9+S4Tee3rcL4Hz8X1Enyk8Ge6knxf5rGBdr1QUhfsqF7
t1t4J0Sz2fxy22mUl61LbJcMoghOfPoIVf80kSTGPU17ZksALVVetpvVQl5KKRjO
K+hsGKLQI4WgD3yltvqky1vuYcUCAwEAAaOCAg8wggILMB0GA1UdDgQWBBTOCotx
cu3XXeVgGxeaqLakELF1TDAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH
IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0
RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs
UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUF
BzALhmxyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0
MTg4MTY1MzMvMC8zMTMxMzEyZTMxMzQzODJlMzEyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzOTMzMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG+UATANBgkqhkiG9w0BAQsFAAOCAQEA
qnqPu3tTwa+WfkPi3781EjeK9yLp9Rif32tIWRzG+KXEjI888eGhFJPdra3CSsEh
gSLasjxRbZarzpkXSnLbxR4YHK+O48X9ez+55zz4Mnv2A6cT/XMC8Fb/vJs5MGz8
CuO7PNZQMY8amQDZeSVbXWBHTWc9N4S3auzo0a0tmhBr2qAo0k9jiQVb4xIOGbUy
EhzvN84Ug1PUZrpYTWnobEQBvnuXefSzDLazYPlQopKcqaNa4d3c6xJIFNbozFqK
6R4YyiQ3Ns4dpwF4DYt/Q4+wdmxElf+911BqCkdbfBwLhvLY7iZSkEmmbDMnuUN5
rWfBqOzAMqFG/8NxUEk6Bg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:53:31 2026 by rpki-client