
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35372e302f32342d3234203d3e203538343436.roa
File: 3131342e36372e35372e302f32342d3234203d3e203538343436.roa (raw, json)
Hash identifier: rJDWof6dg6VuE5Z6N2Y2YM2eiSYodwjkN/UZKwOox3w=
Subject key identifier: C0:93:5D:72:58:31:13:70:E8:6D:7F:EE:66:7A:41:3A:CB:7F:06:4B
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 65BBD73A39827AAF144A922822B858836A2F3A89
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35372e302f32342d3234203d3e203538343436.roa
Signing time: Tue 09 Jun 2026 06:55:42 +0000
ROA not before: Tue 09 Jun 2026 06:50:42 +0000
ROA not after: Tue 08 Jun 2027 06:55:42 +0000
asID: 58446
IP address blocks: 114.67.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:bb:d7:3a:39:82:7a:af:14:4a:92:28:22:b8:58:83:6a:2f:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:50:42 2026 GMT
Not After : Jun 8 06:55:42 2027 GMT
Subject: CN=C0935D7258311370E86D7FEE667A413ACB7F064B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:0e:76:cd:03:01:3a:ab:29:2b:e2:58:50:
f6:5a:b5:a0:4f:33:95:62:5f:01:1b:85:97:af:b4:
dc:f4:47:57:f1:a4:bc:48:49:79:b3:ea:f8:75:12:
0e:6e:3e:bb:1d:37:ca:eb:58:45:c3:54:e1:5d:0e:
10:30:9f:3a:04:a7:15:3e:48:45:b3:3b:c1:35:cb:
4c:92:ab:63:8a:34:1e:e0:0d:90:23:e7:73:18:0d:
9e:2e:dd:bf:d8:d4:84:d2:16:96:21:eb:44:fa:4f:
33:63:ee:7d:c4:fd:ff:44:1d:85:3f:a9:bb:a1:30:
d0:6e:3f:11:1e:7c:33:f9:a3:ee:a8:b4:ae:76:a9:
46:60:c4:37:07:22:80:0d:a7:c4:46:a6:e1:ac:49:
3f:f3:58:52:86:cd:cb:5a:74:f1:4c:3c:46:58:38:
33:31:a6:10:b7:6c:6f:9a:0e:3e:7b:b7:09:42:83:
84:f4:a5:37:43:6a:b0:5c:74:6b:15:c5:6c:4b:7a:
ac:b6:02:1c:a7:cb:9c:d4:7f:93:19:be:e0:be:30:
58:1b:fc:01:6d:0d:05:46:f0:59:0e:3a:e0:9d:72:
03:22:5c:4c:55:be:37:ed:4e:70:e3:c5:b1:39:03:
f4:03:e5:92:8d:54:f5:51:38:68:98:97:dd:23:88:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:5D:72:58:31:13:70:E8:6D:7F:EE:66:7A:41:3A:CB:7F:06:4B
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35372e302f32342d3234203d3e203538343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.67.57.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c3:d5:b2:e8:d9:ef:57:e7:dd:63:3e:ed:29:54:e4:aa:98:
ba:b8:d6:c0:35:b8:16:89:33:82:ea:29:0c:ae:38:64:13:ce:
5a:8b:ca:28:da:f2:5e:6a:fe:4a:bd:9c:3e:be:8c:74:fe:b0:
1b:26:de:56:54:03:e0:32:76:b9:cd:10:cf:8a:7e:44:63:98:
1f:09:7d:f8:9d:cb:92:c8:f9:91:eb:95:37:0d:1d:98:97:db:
74:3a:d4:27:29:b7:74:01:00:5b:4f:ec:5e:bc:63:ce:5a:40:
d0:26:2f:a3:25:fe:b8:bd:cf:00:a8:38:ba:6f:a0:7d:b7:2b:
d5:76:b6:50:14:9d:4f:3b:e4:e8:d0:99:26:b6:73:63:8e:f9:
eb:c8:5d:70:0c:44:d8:e7:c9:d9:42:d6:00:a0:71:0e:c9:a0:
89:e4:9f:d1:41:6f:05:6d:9b:bb:4c:26:94:9e:c7:23:8e:02:
2a:f5:f5:6b:8f:b8:f0:2b:2e:00:cb:45:df:d8:e7:5a:98:94:
81:f8:e7:26:c9:b2:56:03:28:07:41:ba:21:c1:dc:c6:a6:22:
9e:e3:6c:da:d9:76:3a:f8:d0:47:4b:2c:9c:f8:7e:e6:c4:d3:
b3:77:42:23:ba:d4:20:14:13:57:f6:4c:34:15:1e:e4:82:ba:
04:e8:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:07 2026 by rpki-client