
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131342e36372e3132382e302f31372d3234203d3e203538343636.roa
File: 3131342e36372e3132382e302f31372d3234203d3e203538343636.roa (raw, json)
Hash identifier: +wvTkekgfJxR6MBh4jdrAEFTg1GALS71WfAHpriqEMk=
Subject key identifier: E0:81:AD:5E:3A:73:2B:F3:EC:2C:16:69:80:E8:06:EE:6C:7B:A8:BA
Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial: 33AE99F28C8D9FC4683531C9CD5F98BEB35E910E
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131342e36372e3132382e302f31372d3234203d3e203538343636.roa
Signing time: Fri 10 Apr 2026 09:46:04 +0000
ROA not before: Fri 10 Apr 2026 09:41:04 +0000
ROA not after: Fri 09 Apr 2027 09:46:04 +0000
asID: 58466
IP address blocks: 114.67.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ae:99:f2:8c:8d:9f:c4:68:35:31:c9:cd:5f:98:be:b3:5e:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Validity
Not Before: Apr 10 09:41:04 2026 GMT
Not After : Apr 9 09:46:04 2027 GMT
Subject: CN=E081AD5E3A732BF3EC2C166980E806EE6C7BA8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:39:0c:7b:0b:ba:55:be:42:ce:39:a3:9c:
ec:ed:ba:08:0e:2b:45:a7:d4:2a:40:7d:1f:f1:66:
56:2a:3c:c4:bc:69:3d:11:a0:ec:f7:15:7e:60:3b:
b6:84:0e:16:a3:e5:58:cb:dc:fd:d7:39:49:a1:4c:
c8:46:95:ba:60:29:63:6f:33:91:7b:a9:57:5e:70:
d4:14:11:ee:05:b3:33:98:27:22:73:a5:4f:d3:14:
1c:d2:cb:08:06:a1:9d:bf:81:eb:54:7b:d4:d3:74:
36:80:6f:1b:7d:89:73:5a:44:a4:30:c0:8e:94:f3:
c0:7c:97:c7:5c:2c:8d:4b:b2:d1:44:ec:d3:dd:c7:
bb:07:a3:c6:78:3f:e9:75:72:a3:9d:5b:34:cd:cc:
f2:f0:fc:1e:a6:d9:b8:0c:8a:27:dc:25:a7:f0:9d:
54:3b:87:98:f7:b0:b4:f7:f6:3e:d6:a0:7e:45:85:
66:29:8b:36:30:2c:af:fe:56:cc:c1:a7:e6:05:e5:
02:82:54:94:ca:f1:f6:e7:11:60:2b:06:7f:b8:3f:
cb:ad:21:79:64:2b:fe:5b:42:56:2e:4e:00:30:e6:
01:71:ba:45:5a:ca:d2:03:4e:06:bb:4d:80:7b:83:
ee:c6:f7:27:c2:8c:b3:9b:43:e1:35:e6:fb:92:77:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:AD:5E:3A:73:2B:F3:EC:2C:16:69:80:E8:06:EE:6C:7B:A8:BA
X509v3 Authority Key Identifier:
keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131342e36372e3132382e302f31372d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.67.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c1:14:46:e9:20:57:a5:9b:74:9f:a5:d9:b2:27:f2:05:c8:c5:
ad:79:d4:66:9b:be:cb:00:34:d2:3d:f2:57:2c:56:0e:7b:59:
60:72:a0:27:62:00:44:f8:c6:94:84:fb:17:39:73:27:28:b8:
25:b7:be:84:d9:93:fb:3c:0e:b2:90:f4:10:a3:2e:15:47:94:
fc:f0:3f:0b:1c:0e:4f:6f:5e:6d:85:23:5e:67:37:2e:c1:70:
d3:3f:88:4a:38:39:d9:ea:bd:dc:46:4d:3d:c7:2d:8e:89:31:
c5:6f:53:84:f5:9c:ea:b3:05:ff:7a:90:59:72:6d:1e:07:eb:
80:b3:b8:15:d5:74:4b:35:e3:d3:33:44:3c:34:c1:4c:b4:6f:
aa:4c:c8:46:34:75:5c:2e:33:eb:e2:aa:fd:8f:53:97:64:3a:
29:9b:e6:c1:88:61:16:69:c8:9f:f4:ff:63:1c:5e:7e:68:b0:
7f:7b:f8:84:3a:27:8a:c7:36:5f:f1:55:86:8f:2d:a0:de:a2:
71:15:67:4d:e4:4c:15:dc:cb:d2:ca:12:93:c0:2f:09:ea:54:
4d:cf:41:85:1b:53:06:0c:f0:1f:a0:47:f6:d4:8d:77:a9:ec:
f8:6e:1d:a2:c3:7f:08:03:50:32:c1:fd:a6:0a:eb:fa:a7:4d:
54:e2:43:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:57:37 2026 by rpki-client