
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35382e302f32342d3234203d3e203536323832.roa
File: 3131342e36372e35382e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier: i11CrJOTWmlEZoFzDHgvY9v7/SERfuWbEVHzCN7oZ3U=
Subject key identifier: 70:2F:73:06:99:88:66:A2:2B:70:61:9B:7A:DB:1D:0E:3A:61:CD:27
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 55C9CB737926663CC7132BA645A1B28DF8B5AA30
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35382e302f32342d3234203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:52:19 +0000
ROA not before: Tue 09 Jun 2026 06:47:19 +0000
ROA not after: Tue 08 Jun 2027 06:52:19 +0000
asID: 56282
IP address blocks: 114.67.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c9:cb:73:79:26:66:3c:c7:13:2b:a6:45:a1:b2:8d:f8:b5:aa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:47:19 2026 GMT
Not After : Jun 8 06:52:19 2027 GMT
Subject: CN=702F7306998866A22B70619B7ADB1D0E3A61CD27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:6b:db:52:3b:ad:1f:50:16:0d:9b:b8:b4:
f6:1d:19:d2:4c:59:b5:d9:55:e1:55:88:3f:cd:32:
8a:d0:e0:b9:bf:5d:03:e9:8a:22:97:9b:1e:39:65:
00:a2:ed:eb:35:ac:ae:a0:51:d7:a7:50:65:4d:fe:
6c:39:96:06:0e:27:c7:94:db:d4:10:2e:66:14:ea:
27:9a:28:ac:a7:e3:01:fe:8a:be:39:1a:94:d7:5f:
34:b1:b0:36:39:d4:40:fb:9d:44:d3:8a:0b:0c:44:
5b:7f:7c:e6:23:02:99:1d:22:f0:01:03:4e:76:81:
f6:71:9a:67:e0:76:fe:40:5a:ae:70:9a:38:da:a4:
d6:43:ca:c9:66:73:41:85:51:72:3e:13:82:a3:72:
42:b7:8c:12:37:74:8f:a7:c0:12:11:e3:42:e0:89:
27:2f:01:f2:53:fe:26:62:28:5c:b6:e5:7f:d8:f0:
0c:b8:51:94:68:a7:da:b6:dd:58:f7:e2:29:b0:f9:
ad:da:48:b7:3d:57:1e:cb:61:9c:c9:a0:8f:2f:dc:
e6:ba:ff:b3:19:82:f2:50:f8:68:a2:14:5e:42:a1:
d1:d9:0d:2b:d6:0a:47:3a:6a:82:d6:5f:78:9d:cf:
fd:20:8d:74:63:01:24:ff:ab:93:e8:33:6b:75:23:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:73:06:99:88:66:A2:2B:70:61:9B:7A:DB:1D:0E:3A:61:CD:27
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35382e302f32342d3234203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.67.58.0/24
Signature Algorithm: sha256WithRSAEncryption
83:14:6d:be:71:23:e9:8d:12:82:6b:02:df:7c:d9:cb:e5:4a:
ab:a4:fb:43:c7:9e:75:9e:ed:5f:d2:9e:6d:85:d7:4e:d5:a3:
59:95:3d:88:39:e5:a0:46:da:f7:17:6e:0c:d5:7f:bc:34:8e:
63:ba:e9:6f:39:5e:fc:cb:4f:79:1e:60:ee:4d:02:e1:74:46:
40:32:99:f7:43:28:62:da:d5:4b:8b:0e:78:f1:57:1f:d0:91:
b1:8a:da:c8:fb:28:c4:df:e6:6e:69:05:33:d3:2d:85:ae:1b:
5a:a0:30:a5:f9:04:d5:58:62:71:69:69:3d:5c:ec:22:c6:e2:
1e:f0:c1:06:be:d6:d8:c2:b4:1f:2e:b3:ce:86:bb:61:26:97:
b8:55:bd:11:25:7c:17:25:2e:89:9b:3b:3c:17:ff:44:d7:10:
ab:e7:2a:0b:8b:8d:23:62:0c:bc:96:75:1f:a2:ca:bd:ff:fa:
cd:a5:45:c7:4c:1b:31:79:ef:cd:21:8d:dd:95:2a:08:20:2d:
51:a9:8a:32:d5:b5:93:d5:49:17:3a:9c:57:07:ab:32:21:15:
47:bb:3a:84:d8:5f:14:00:f4:ea:4a:2c:be:bc:07:67:26:c4:
95:d5:c0:f2:19:9c:04:57:4d:94:8c:76:9f:29:07:67:34:a1:
0b:e7:b1:28
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUVcnLc3kmZjzHEyumRaGyjfi1qjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjQ3MTlaFw0yNzA2MDgwNjUyMTlaMDMxMTAvBgNV
BAMTKDcwMkY3MzA2OTk4ODY2QTIyQjcwNjE5QjdBREIxRDBFM0E2MUNEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJv2vbUjutH1AWDZu4tPYdGdJM
WbXZVeFViD/NMorQ4Lm/XQPpiiKXmx45ZQCi7es1rK6gUdenUGVN/mw5lgYOJ8eU
29QQLmYU6ieaKKyn4wH+ir45GpTXXzSxsDY51ED7nUTTigsMRFt/fOYjApkdIvAB
A052gfZxmmfgdv5AWq5wmjjapNZDyslmc0GFUXI+E4KjckK3jBI3dI+nwBIR40Lg
iScvAfJT/iZiKFy25X/Y8Ay4UZRop9q23Vj34imw+a3aSLc9Vx7LYZzJoI8v3Oa6
/7MZgvJQ+GiiFF5CodHZDSvWCkc6aoLWX3idz/0gjXRjAST/q5PoM2t1I3qTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUcC9zBpmIZqIrcGGbetsdDjphzScwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMTM0MmUzNjM3
MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMyMzgzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHJDOjANBgkqhkiG9w0BAQsFAAOCAQEAgxRtvnEj6Y0SgmsC33zZy+VKq6T7
Q8eedZ7tX9KebYXXTtWjWZU9iDnloEba9xduDNV/vDSOY7rpbzle/MtPeR5g7k0C
4XRGQDKZ90MoYtrVS4sOePFXH9CRsYrayPsoxN/mbmkFM9Mtha4bWqAwpfkE1Vhi
cWlpPVzsIsbiHvDBBr7W2MK0Hy6zzoa7YSaXuFW9ESV8FyUuiZs7PBf/RNcQq+cq
C4uNI2IMvJZ1H6LKvf/6zaVFx0wbMXnvzSGN3ZUqCCAtUamKMtW1k9VJFzqcVwer
MiEVR7s6hNhfFAD06kosvrwHZybEldXA8hmcBFdNlIx2nykHZzShC+exKA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:07 2026 by rpki-client