
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36302e302f32342d3234203d3e203536323832.roa
File: 3131342e36372e36302e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier: 7geGjPaGD31tXjQBjca6pWzliEEXP++dH5kyDhmLqSY=
Subject key identifier: 4C:C3:72:4A:6A:DE:CB:62:29:F5:FA:A1:A5:36:59:F1:65:DA:32:E1
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 0F89F0B0FB75F1E249B0D27A7E43CCC087964F84
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36302e302f32342d3234203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:53:16 +0000
ROA not before: Tue 09 Jun 2026 06:48:16 +0000
ROA not after: Tue 08 Jun 2027 06:53:16 +0000
asID: 56282
IP address blocks: 114.67.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:89:f0:b0:fb:75:f1:e2:49:b0:d2:7a:7e:43:cc:c0:87:96:4f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:48:16 2026 GMT
Not After : Jun 8 06:53:16 2027 GMT
Subject: CN=4CC3724A6ADECB6229F5FAA1A53659F165DA32E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:28:d3:7d:b4:84:fd:16:ce:ea:d9:eb:5f:
d6:fa:13:09:5e:7a:f2:5c:70:8f:66:0e:05:c1:53:
8b:d1:bb:4f:e7:74:e1:9f:ec:b7:c7:51:8e:7d:a2:
22:16:ac:61:f8:08:81:02:f6:a1:93:d7:64:8f:95:
7a:2d:ee:9e:6c:15:1e:a9:60:32:72:0e:07:f4:cd:
6e:57:87:ef:4e:c1:1d:05:1d:7d:ef:1c:d0:04:df:
4a:49:93:cc:52:c6:f3:c1:07:20:a0:fe:61:84:86:
12:f7:17:8e:37:27:4d:37:b4:91:5d:be:1d:a6:9c:
b6:2e:d9:ff:9f:74:be:67:4d:91:6c:56:91:44:e4:
bf:ae:9a:02:8d:8d:31:60:75:b6:8e:04:ae:3f:b3:
73:33:59:cb:a4:f3:ae:01:2d:99:52:82:56:17:be:
48:a9:7a:15:ce:d2:02:e5:b5:f3:69:92:2a:5e:1d:
c6:bf:03:07:12:c4:29:ba:70:d9:94:fc:f8:c5:57:
80:22:b4:4d:4c:39:4e:41:44:b2:c3:bb:57:6b:b9:
f8:20:c4:25:ac:62:84:9b:52:8f:a6:3f:c1:ca:37:
e2:0b:bc:88:c4:3a:25:af:9b:ae:34:77:d7:4b:1f:
b6:5c:3f:22:ab:92:55:82:0f:64:ca:5a:82:3d:f8:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:72:4A:6A:DE:CB:62:29:F5:FA:A1:A5:36:59:F1:65:DA:32:E1
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36302e302f32342d3234203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.67.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9f:19:fe:1e:3f:94:e2:3a:f0:45:45:e3:17:1f:a2:c5:3e:
13:d4:cf:4a:92:42:51:31:32:94:78:89:5b:a0:0e:34:a5:7e:
79:58:de:89:ef:67:59:14:18:6a:9c:d0:07:43:3c:44:1b:e0:
60:48:9b:84:0d:a6:d0:3b:15:9b:02:a1:a4:0a:49:fb:e9:bd:
d7:3d:38:2d:88:e2:cc:8e:dc:bc:a0:2d:92:be:90:6b:2d:ae:
a0:d6:7c:08:e9:72:cd:9b:22:a2:ad:cd:89:c6:8a:dd:2c:31:
62:4d:de:5f:65:e4:30:df:5d:11:ae:59:56:01:df:f9:17:df:
fa:89:91:2e:6e:61:d2:4a:d0:fa:15:60:a3:93:9b:32:25:b9:
8f:23:63:71:47:91:ee:19:2e:ac:65:04:7c:df:84:66:be:e7:
2c:c0:dd:3e:92:c5:52:94:c0:6e:d9:c7:55:d6:d1:7f:f8:64:
34:40:e0:b8:92:58:e7:49:b2:25:4f:81:bf:f7:08:89:97:a4:
eb:a8:1f:82:7b:1c:6d:1e:df:dc:af:92:c2:01:e1:e6:64:22:
00:83:2e:35:5b:e9:13:46:62:e8:67:49:3b:9a:ff:d8:42:83:
ca:38:24:48:3a:2b:a3:a7:b1:cc:16:00:16:46:d7:70:72:49:
78:a1:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:08 2026 by rpki-client