
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36322e302f32342d3234203d3e203538343636.roa
File: 3131342e36372e36322e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: ln5lS8Im+f9Moi78SowB+ChWuO5wzQu9J8hyfjHx+Sw=
Subject key identifier: 7A:3C:80:6E:62:BA:BE:50:FD:C9:DD:E4:73:75:C6:92:56:35:77:18
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 7079B83E41546B5F23DB829F747BDADC65362C4A
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36322e302f32342d3234203d3e203538343636.roa
Signing time: Wed 13 May 2026 05:34:44 +0000
ROA not before: Wed 13 May 2026 05:29:44 +0000
ROA not after: Wed 12 May 2027 05:34:44 +0000
asID: 58466
IP address blocks: 114.67.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:79:b8:3e:41:54:6b:5f:23:db:82:9f:74:7b:da:dc:65:36:2c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: May 13 05:29:44 2026 GMT
Not After : May 12 05:34:44 2027 GMT
Subject: CN=7A3C806E62BABE50FDC9DDE47375C69256357718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:91:1d:f3:26:21:90:a2:c0:b3:08:20:f1:
36:ae:e9:cd:ab:8b:f1:db:8e:3f:62:36:5d:a1:66:
75:82:46:b5:79:49:e7:b2:1c:2a:70:0e:b5:26:3d:
9d:1c:f8:e7:d8:c0:3e:53:9c:62:c9:c7:60:25:bd:
67:d7:2f:a2:c2:6e:32:21:b9:42:b5:0f:9c:e1:5c:
10:6a:e6:65:6f:e4:9c:09:24:91:1f:8d:f5:ba:be:
52:e0:9d:70:1a:5b:c2:21:a0:e5:56:3b:fd:40:a4:
e1:62:a1:e3:04:42:81:00:8a:e7:44:cd:6b:e4:4d:
49:ae:60:9d:72:e4:b2:2d:8c:07:e5:a5:63:72:c6:
4d:2f:1b:1e:bd:5d:1c:61:16:cd:ac:32:eb:bb:c5:
58:5d:26:96:ed:f9:23:31:d9:a7:cd:50:7e:9d:65:
07:1b:12:88:cf:48:50:62:28:0a:93:d6:68:9a:ce:
b7:f1:93:6a:31:90:6b:22:01:de:76:71:30:67:d1:
c3:e2:8a:37:e0:12:e0:78:eb:8d:41:8a:45:cb:ba:
0f:e4:68:c8:5f:a5:88:c1:78:e4:e5:ad:ca:b8:4d:
8a:8f:50:79:51:c6:26:21:4a:67:a8:d6:59:7d:22:
43:ef:67:90:ce:fb:5f:f8:39:0e:1f:f9:6d:a3:16:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:80:6E:62:BA:BE:50:FD:C9:DD:E4:73:75:C6:92:56:35:77:18
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36322e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.67.62.0/24
Signature Algorithm: sha256WithRSAEncryption
22:60:59:e3:3d:cf:ee:13:ce:d7:0e:9a:70:db:83:57:c5:ff:
a2:58:d4:d2:b7:c0:07:90:fe:80:77:0d:50:93:ad:bb:f6:ac:
10:52:ec:66:e9:a2:d5:32:38:db:f3:99:95:f1:d1:36:56:a0:
3f:77:80:93:a6:f7:9c:f8:22:58:ec:e9:4e:e4:65:70:b0:6c:
40:21:14:9c:02:c5:a3:27:94:6a:af:8f:92:f7:fa:70:16:fd:
cc:e7:02:0f:02:25:9b:9b:a9:f8:81:ce:bf:b8:e3:1f:5e:e5:
75:ed:be:06:7e:b1:16:48:aa:ec:2e:59:30:0b:cc:78:6c:9f:
1c:30:a3:09:57:cd:30:67:4f:0b:17:95:db:22:a5:b5:2a:8b:
2b:a1:d4:b8:fe:a1:8e:b4:68:e1:18:32:93:50:26:c5:59:89:
67:11:60:bb:b2:e6:89:38:bf:e4:ab:22:f3:5f:4d:2a:cc:76:
f3:79:7e:95:ae:dd:6b:70:bf:08:36:f7:1c:18:9b:7a:86:42:
13:59:d3:9b:83:f2:6e:ac:5c:d1:31:e2:db:1e:65:53:2f:fc:
7b:d5:cb:61:fe:f5:d6:94:10:a6:dc:ab:4f:51:ee:71:66:a1:
5f:d5:68:cf:f6:18:96:8a:9d:f7:6d:9c:e4:22:54:34:73:1e:
1d:ac:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:41:51 2026 by rpki-client