
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa
File: 3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (raw, json)
Hash identifier: bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=
Subject key identifier: B0:DA:BF:53:D9:38:E3:55:6B:92:DF:86:A7:08:CC:9B:F0:54:3E:94
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 49000478A4163B86EB016FA44923041EB1D5B2CE
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa
Signing time: Mon 15 Jun 2026 01:48:02 +0000
ROA not before: Mon 15 Jun 2026 01:43:02 +0000
ROA not after: Mon 14 Jun 2027 01:48:02 +0000
asID: 63614
IP address blocks: 114.113.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:00:04:78:a4:16:3b:86:eb:01:6f:a4:49:23:04:1e:b1:d5:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: Jun 15 01:43:02 2026 GMT
Not After : Jun 14 01:48:02 2027 GMT
Subject: CN=B0DABF53D938E3556B92DF86A708CC9BF0543E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:26:5b:bc:e6:2b:d8:0a:73:2c:27:1a:4f:
b6:0d:37:d4:e8:5a:f0:29:f2:54:8f:02:76:2e:02:
4b:cb:f2:1f:fe:7c:c6:6c:d8:c2:6d:0f:b1:92:d9:
29:f2:5c:9d:e2:64:39:5f:c2:0c:7e:b5:c3:ac:a8:
ad:eb:d9:25:1e:6b:bb:70:9d:86:8b:58:e5:b9:a2:
15:3f:4a:a2:d3:54:a2:29:70:d4:77:d9:ca:8b:3f:
66:c1:31:35:a0:95:40:74:15:22:55:06:5b:29:2f:
4a:dd:23:48:64:7e:97:dd:a7:09:5e:3d:77:ef:ba:
42:32:36:8a:71:73:f0:f1:cf:13:39:c5:b8:9d:04:
aa:b0:9e:2f:82:95:1f:10:80:ca:2d:8a:e3:8e:54:
97:52:bc:74:36:28:b3:29:f8:ec:c0:cc:51:e0:f3:
07:6c:5e:45:0e:bb:12:44:e3:d6:e4:30:7e:dc:78:
c5:a7:02:91:94:2a:2f:1f:67:8b:3d:76:a4:29:89:
6c:62:b5:6b:75:e8:81:b0:6c:eb:69:5f:c9:77:24:
de:6d:2e:68:40:cf:3a:8e:9b:be:f1:01:0b:40:01:
db:5e:c7:49:60:04:dd:64:38:ab:ac:a4:ba:3a:4b:
b7:82:68:1b:3e:b3:83:37:5c:f9:31:64:e5:e7:b2:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:BF:53:D9:38:E3:55:6B:92:DF:86:A7:08:CC:9B:F0:54:3E:94
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2f:38:b1:59:d2:92:09:8b:9c:5d:b3:72:19:80:2a:4c:7e:
de:c2:11:41:58:05:2a:a7:67:76:39:e0:5a:72:be:df:d6:94:
c9:ae:88:00:5c:d9:00:be:76:dd:ab:15:20:cf:38:e8:bc:6a:
2d:e6:c0:a1:87:6a:1b:5f:f7:c9:24:72:6b:95:a2:95:c0:d2:
cd:be:86:8a:ab:1c:dc:e7:27:4a:82:47:ee:24:13:a7:70:2d:
8d:93:94:c5:2e:be:23:bc:1f:3c:54:b5:33:d0:50:77:66:ce:
2d:8a:37:f1:ec:d2:08:28:a0:e5:d3:34:6e:3b:5b:d2:e4:37:
fc:80:aa:56:81:f7:b5:93:2b:bd:73:98:de:e9:c9:b8:01:f7:
90:b0:9a:66:f3:c5:f8:69:41:d5:1c:b5:2a:eb:03:3d:a2:93:
f3:42:3d:a5:83:d3:cc:84:38:78:da:7d:6c:b4:b9:b5:ee:75:
41:3a:38:df:10:40:ff:68:22:b0:a3:69:9d:81:30:61:cd:1f:
5b:fe:88:7b:74:5d:3a:a4:22:69:e8:d7:dc:bf:8c:ea:f5:f8:
a2:6f:70:03:6d:b8:c9:22:46:12:10:9b:24:fb:59:d2:6c:5c:
75:b6:d5:7c:f0:1b:a1:ec:33:63:b2:64:ec:11:a8:a5:69:14:
7a:27:b1:11
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUSQAEeKQWO4brAW+kSSMEHrHVss4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy
NkYxNDg3NDAeFw0yNjA2MTUwMTQzMDJaFw0yNzA2MTQwMTQ4MDJaMDMxMTAvBgNV
BAMTKEIwREFCRjUzRDkzOEUzNTU2QjkyREY4NkE3MDhDQzlCRjA1NDNFOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QiZbvOYr2ApzLCcaT7YNN9To
WvAp8lSPAnYuAkvL8h/+fMZs2MJtD7GS2SnyXJ3iZDlfwgx+tcOsqK3r2SUea7tw
nYaLWOW5ohU/SqLTVKIpcNR32cqLP2bBMTWglUB0FSJVBlspL0rdI0hkfpfdpwle
PXfvukIyNopxc/DxzxM5xbidBKqwni+ClR8QgMotiuOOVJdSvHQ2KLMp+OzAzFHg
8wdsXkUOuxJE49bkMH7ceMWnApGUKi8fZ4s9dqQpiWxitWt16IGwbOtpX8l3JN5t
LmhAzzqOm77xAQtAAdtex0lgBN1kOKuspLo6S7eCaBs+s4M3XPkxZOXnsmE/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUsNq/U9k441Vrkt+GpwjMm/BUPpQwHwYDVR0j
BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD
NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY1MDMxNTU2NjA2MTk3OTMvMC8zMTMxMzQyZTMx
MzEzMzJlMzIzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzEzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHJx7TANBgkqhkiG9w0BAQsFAAOCAQEALy84sVnSkgmLnF2zchmA
Kkx+3sIRQVgFKqdndjngWnK+39aUya6IAFzZAL523asVIM846LxqLebAoYdqG1/3
ySRya5WilcDSzb6Giqsc3OcnSoJH7iQTp3AtjZOUxS6+I7wfPFS1M9BQd2bOLYo3
8ezSCCig5dM0bjtb0uQ3/ICqVoH3tZMrvXOY3unJuAH3kLCaZvPF+GlB1Ry1KusD
PaKT80I9pYPTzIQ4eNp9bLS5te51QTo43xBA/2gisKNpnYEwYc0fW/6Ie3RdOqQi
aejX3L+M6vX4om9wA224ySJGEhCbJPtZ0mxcdbbVfPAboewzY7Jk7BGopWkUeiex
EQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client