
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e34382e302f32342d3234203d3e203538343436.roa
File: 3131342e36372e34382e302f32342d3234203d3e203538343436.roa (raw, json)
Hash identifier: ptXtpMIytZNoUk99FVrwvcJAzlbAlI8oZBo682edk6Y=
Subject key identifier: D7:77:6A:E7:54:EC:21:D6:06:76:9D:B9:4D:67:4C:87:B7:D2:38:1E
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 0D7A02976152084C4002D258EEBC8CBB9635DB10
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e34382e302f32342d3234203d3e203538343436.roa
Signing time: Tue 09 Jun 2026 06:55:14 +0000
ROA not before: Tue 09 Jun 2026 06:50:14 +0000
ROA not after: Tue 08 Jun 2027 06:55:14 +0000
asID: 58446
IP address blocks: 114.67.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7a:02:97:61:52:08:4c:40:02:d2:58:ee:bc:8c:bb:96:35:db:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:50:14 2026 GMT
Not After : Jun 8 06:55:14 2027 GMT
Subject: CN=D7776AE754EC21D606769DB94D674C87B7D2381E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:a0:fe:6a:2e:b8:f9:9e:4e:0b:8e:50:01:
6e:8a:5a:f8:11:0c:ba:3f:e0:11:24:b7:a6:39:2d:
8b:da:19:5c:f5:c7:9f:b2:a1:6c:6d:7e:25:8a:41:
29:3c:54:f3:cb:32:96:f6:47:b0:24:71:f1:ea:74:
b2:07:6c:e2:b9:3f:5a:f2:bc:43:40:45:54:87:0b:
20:85:03:83:ac:4b:ee:da:9f:3f:bb:e8:b9:35:da:
d7:54:89:66:8c:ec:87:20:ee:b6:b4:92:c9:67:5e:
29:24:f3:4f:25:06:65:ae:84:be:96:0b:07:45:82:
a2:8c:71:ad:6e:f5:ff:ca:d2:3f:9a:2e:5b:1c:a9:
3b:72:5f:be:ad:ec:43:ea:ab:52:ab:4a:1c:f7:db:
c0:96:7c:18:45:63:05:2f:36:c3:c2:5a:3b:73:0f:
ab:a8:b4:ee:e8:ab:ea:d3:10:e1:3e:7d:8d:9e:15:
5c:3d:33:b1:f1:d8:e5:98:bc:02:f4:e1:06:0c:56:
28:b6:2e:60:2a:12:21:5f:fc:10:d8:0c:88:d2:47:
39:0a:62:30:64:6e:2e:4c:cc:40:3c:9f:c8:e7:23:
09:6f:4d:9d:9a:13:f5:5c:6b:fb:46:f0:fc:1a:03:
70:8e:2d:0e:c5:42:e8:fc:db:2f:dc:21:8b:35:b5:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:6A:E7:54:EC:21:D6:06:76:9D:B9:4D:67:4C:87:B7:D2:38:1E
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e34382e302f32342d3234203d3e203538343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.67.48.0/24
Signature Algorithm: sha256WithRSAEncryption
08:65:8a:dc:21:69:9a:10:f4:c2:bf:1d:4e:b6:ce:3c:b4:c7:
fc:a3:e1:4c:b6:c8:4d:47:a1:28:2c:07:79:21:9e:d4:89:10:
a4:32:09:28:9b:69:2d:33:20:8e:48:79:cf:6e:19:d1:1f:8f:
3a:77:1b:6f:d8:25:8b:98:40:bf:5a:29:1b:42:5f:b0:ef:4b:
0b:9f:3b:0f:c8:cd:9b:48:f1:a7:a5:41:61:fb:31:b7:95:d4:
8a:dc:cd:26:2d:77:7f:65:d9:c4:ee:f5:81:cc:22:7e:fd:6c:
e3:7d:7d:fc:a2:94:80:e1:ef:4c:d7:4c:0d:0d:14:00:8b:a6:
49:13:d9:60:cd:56:14:5d:49:09:aa:7e:9d:50:5c:6e:53:e7:
ae:8e:91:9d:b0:07:35:56:86:ec:51:44:24:0d:5a:a1:53:32:
dd:50:fb:3d:93:74:5f:09:82:04:ab:98:d4:84:41:a1:f7:4f:
93:8f:e3:b8:fa:e3:d0:6c:c4:9b:d6:ee:03:2b:49:21:35:97:
53:43:f6:ac:76:8b:33:16:de:78:e7:8c:02:fd:a4:c6:de:65:
fe:54:ae:e6:95:1b:a2:ce:4d:a0:e4:6a:8c:8a:0d:3b:03:11:
a2:c8:78:f0:bf:de:fb:c4:0a:55:90:05:b4:9d:75:a8:01:26:
e9:ba:a1:ed
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUDXoCl2FSCExAAtJY7ryMu5Y12xAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjUwMTRaFw0yNzA2MDgwNjU1MTRaMDMxMTAvBgNV
BAMTKEQ3Nzc2QUU3NTRFQzIxRDYwNjc2OURCOTRENjc0Qzg3QjdEMjM4MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC436D+ai64+Z5OC45QAW6KWvgR
DLo/4BEkt6Y5LYvaGVz1x5+yoWxtfiWKQSk8VPPLMpb2R7AkcfHqdLIHbOK5P1ry
vENARVSHCyCFA4OsS+7anz+76Lk12tdUiWaM7Icg7ra0kslnXikk808lBmWuhL6W
CwdFgqKMca1u9f/K0j+aLlscqTtyX76t7EPqq1KrShz328CWfBhFYwUvNsPCWjtz
D6uotO7oq+rTEOE+fY2eFVw9M7Hx2OWYvAL04QYMVii2LmAqEiFf/BDYDIjSRzkK
YjBkbi5MzEA8n8jnIwlvTZ2aE/Vca/tG8PwaA3COLQ7FQuj82y/cIYs1tR2/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU13dq51TsIdYGdp25TWdMh7fSOB4wHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMTM0MmUzNjM3
MmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHJDMDANBgkqhkiG9w0BAQsFAAOCAQEACGWK3CFpmhD0wr8dTrbOPLTH/KPh
TLbITUehKCwHeSGe1IkQpDIJKJtpLTMgjkh5z24Z0R+POncbb9gli5hAv1opG0Jf
sO9LC587D8jNm0jxp6VBYfsxt5XUitzNJi13f2XZxO71gcwifv1s4319/KKUgOHv
TNdMDQ0UAIumSRPZYM1WFF1JCap+nVBcblPnro6RnbAHNVaG7FFEJA1aoVMy3VD7
PZN0XwmCBKuY1IRBofdPk4/juPrj0GzEm9buAytJITWXU0P2rHaLMxbeeOeMAv2k
xt5l/lSu5pUbos5NoORqjIoNOwMRosh48L/e+8QKVZAFtJ11qAEm6bqh7Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:05 2026 by rpki-client