
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa
File: 3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (raw, json)
Hash identifier: ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=
Subject key identifier: 3A:6B:90:F2:A1:FB:78:25:A7:60:B6:E3:6B:1E:F4:4C:2A:DF:49:DC
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 1763E6942F4749E118E2940B1B9D0BE4A9F87895
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa
Signing time: Mon 15 Jun 2026 01:48:02 +0000
ROA not before: Mon 15 Jun 2026 01:43:02 +0000
ROA not after: Mon 14 Jun 2027 01:48:02 +0000
asID: 63614
IP address blocks: 114.113.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:63:e6:94:2f:47:49:e1:18:e2:94:0b:1b:9d:0b:e4:a9:f8:78:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: Jun 15 01:43:02 2026 GMT
Not After : Jun 14 01:48:02 2027 GMT
Subject: CN=3A6B90F2A1FB7825A760B6E36B1EF44C2ADF49DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:7c:61:00:e1:1b:e2:7a:b3:33:ce:5c:56:
2a:e3:4c:85:65:85:44:be:de:c2:1c:25:1f:a8:36:
fb:53:00:07:5f:49:52:d3:af:17:da:c6:09:db:dc:
9d:97:77:34:f4:6d:05:a4:04:c9:b0:fc:f6:71:29:
5b:da:b3:23:f3:5c:8b:32:02:19:9f:3f:43:c4:53:
24:40:bd:cf:82:44:7a:ab:2f:fa:de:a1:83:25:a8:
d5:4a:15:1c:23:62:08:ad:39:e1:7e:43:ee:08:ba:
3e:eb:e7:4c:11:13:bd:08:ac:37:98:7d:98:a8:7a:
7f:13:79:1d:27:2c:64:04:34:c0:dc:c2:e5:f0:bc:
c2:0a:18:82:d5:42:12:8f:58:20:ef:82:ce:55:a7:
77:82:10:77:76:51:2e:db:14:23:5a:8b:39:56:bb:
a8:57:2e:ab:59:dd:6d:10:6a:56:8e:d8:2c:e2:da:
e4:1e:f0:1f:82:ce:28:51:98:fa:be:0e:4f:dc:c3:
75:9d:14:89:f6:e0:e5:ae:b1:ed:f7:6e:76:dc:b4:
4b:e4:cf:e6:d7:86:a9:7b:72:79:41:e6:21:ac:b4:
f5:2b:e1:e8:e6:6e:9d:63:85:b0:37:db:a9:cc:34:
f2:fa:d6:cf:b5:aa:09:b0:ad:66:4c:f3:27:c9:dd:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:90:F2:A1:FB:78:25:A7:60:B6:E3:6B:1E:F4:4C:2A:DF:49:DC
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.231.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6c:a3:f7:00:0d:08:a7:46:19:dc:a8:af:ef:1f:cd:af:a6:
b6:f3:b0:ed:fa:5e:3c:01:a8:0e:52:46:97:e8:92:ff:e5:c1:
73:31:cd:92:2a:fc:30:da:ef:51:02:b3:61:7b:ab:94:3e:dc:
f6:30:63:1e:6e:45:0b:03:7c:32:fe:38:99:9f:65:8d:c8:6f:
81:76:ae:bc:b8:e6:e9:bf:e1:ed:9b:1d:77:1e:3a:69:b6:4e:
ae:9c:08:24:1a:3e:9d:94:e9:b9:14:df:86:52:6a:95:76:ff:
68:73:74:3e:27:f1:7b:e4:3b:6e:23:b5:e7:86:7b:32:41:ba:
2d:70:16:21:6a:1e:b9:15:36:d9:0c:66:ab:ee:54:9d:56:ad:
47:4a:5b:29:a8:2b:7d:d7:d8:75:ef:8d:36:08:33:48:8b:cc:
4c:63:c6:8a:c8:38:55:7d:26:49:56:46:fe:92:48:cd:91:1d:
5c:47:1e:df:70:17:d9:91:8d:ad:ed:a0:0f:40:2e:b3:5c:2a:
82:bd:a3:a1:08:a4:f0:b6:c6:e4:89:5c:77:b9:66:8e:f0:a5:
9b:30:ec:68:62:d6:bd:43:58:43:83:5c:8b:28:f6:27:0b:7e:
86:5f:86:fe:1e:64:49:5e:29:36:15:47:a7:ea:90:dd:20:58:
bd:68:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:26 2026 by rpki-client