
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa
File: 3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (raw, json)
Hash identifier: Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=
Subject key identifier: 1B:A0:EA:6E:8D:BA:F2:12:F1:04:B7:AE:56:75:C7:56:B7:5C:67:7F
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 55687F6DBBFF03F31A96AC886DA3FCFF77E3212A
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa
Signing time: Mon 15 Jun 2026 01:48:02 +0000
ROA not before: Mon 15 Jun 2026 01:43:02 +0000
ROA not after: Mon 14 Jun 2027 01:48:02 +0000
asID: 63614
IP address blocks: 114.113.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:68:7f:6d:bb:ff:03:f3:1a:96:ac:88:6d:a3:fc:ff:77:e3:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: Jun 15 01:43:02 2026 GMT
Not After : Jun 14 01:48:02 2027 GMT
Subject: CN=1BA0EA6E8DBAF212F104B7AE5675C756B75C677F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:72:60:74:ff:08:e9:05:f8:81:78:45:4e:
20:3d:01:8a:de:29:a6:11:dc:0a:9d:01:2f:16:92:
bc:5f:00:53:ba:71:01:08:49:e8:d4:04:4d:a3:9f:
23:16:36:29:b9:3f:9f:97:eb:13:7d:22:a8:a6:7f:
97:24:4a:5f:59:6c:e5:16:b4:2b:e2:f9:c7:70:88:
e8:b0:d9:ec:4f:c5:33:ce:e4:d6:aa:4c:e4:5f:72:
a0:b5:b5:7c:34:56:3a:d1:f8:32:39:21:f1:10:97:
b8:dc:24:53:79:2f:4a:82:4f:15:d5:36:ab:cf:a3:
1c:e1:36:77:e0:3a:e1:d1:0b:9e:93:4c:20:b6:01:
b2:d4:4f:d9:5f:c9:28:2f:68:9f:88:a5:de:cb:ac:
64:78:b7:27:b1:a5:1d:ab:41:74:d7:e3:a0:94:e6:
1c:42:6d:a1:b6:47:ee:e7:3a:26:a4:36:a0:48:af:
2c:69:e6:e8:1b:c9:8f:84:12:e6:a4:fb:10:74:a6:
f4:2e:62:b8:08:e3:a3:95:64:aa:9b:34:29:a5:4b:
a9:e8:a9:9e:79:18:51:46:0b:53:e0:b1:81:9b:6b:
50:58:40:3a:7b:d1:39:eb:ea:b4:57:70:2e:4c:af:
8b:b7:59:2a:98:b8:df:e2:8b:93:d6:85:9c:2a:30:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:EA:6E:8D:BA:F2:12:F1:04:B7:AE:56:75:C7:56:B7:5C:67:7F
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0d:d3:b9:09:42:bb:4d:25:26:28:24:1e:ed:39:85:cc:9e:
04:69:c0:25:a1:40:78:1a:d3:bb:48:7c:a5:c3:2f:b9:e4:c2:
0b:a1:d9:ff:ff:23:21:8e:ee:89:fa:9a:32:04:ff:10:ac:b7:
d3:89:be:6e:ba:79:65:e7:b6:42:d3:64:83:9e:e1:a3:76:4b:
f6:5d:cc:ce:88:a4:74:b0:2f:cb:cd:1d:9e:97:ca:7b:84:a0:
04:31:f7:6a:1c:b6:a3:5d:ba:19:21:9a:24:59:af:63:44:8e:
85:e9:0c:e8:4e:56:93:07:c3:ee:15:6e:ce:93:23:bb:2e:17:
76:77:09:d3:60:20:32:f2:e4:aa:4a:6c:af:c3:67:ce:12:83:
e6:f6:ae:7c:23:fa:5d:19:43:07:f3:a4:60:56:a0:50:5f:53:
09:ae:94:80:31:6e:3d:af:20:2a:72:32:58:1e:b8:de:b5:14:
6a:a2:2e:22:89:7b:82:9c:5b:db:dd:d9:da:c0:fd:82:2b:c2:
2e:b6:fa:95:52:52:32:87:09:c0:54:f7:23:08:82:7c:87:cf:
3e:15:35:9e:39:95:a1:b0:d9:b4:95:2c:03:2d:bd:5d:a5:aa:
2a:a3:fa:7c:c3:3b:77:87:51:30:93:f8:0b:42:91:fd:73:e4:
ff:52:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client