
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232302e302f32322d3232203d3e2034383337.roa
File: 3130332e3231312e3232302e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: Y71qTXeZ8On8p+rfSQru1yzGN3uauRLVpRWXma7V/E4=
Subject key identifier: 6F:B7:AC:4F:50:49:32:E6:03:A7:39:9A:22:0A:84:5C:C9:2A:97:36
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 2AFE09674F7A117533F193C37BE025CD50B4BF55
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232302e302f32322d3232203d3e2034383337.roa
Signing time: Thu 04 Jun 2026 07:16:48 +0000
ROA not before: Thu 04 Jun 2026 07:11:48 +0000
ROA not after: Thu 03 Jun 2027 07:16:48 +0000
asID: 4837
IP address blocks: 103.211.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fe:09:67:4f:7a:11:75:33:f1:93:c3:7b:e0:25:cd:50:b4:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 4 07:11:48 2026 GMT
Not After : Jun 3 07:16:48 2027 GMT
Subject: CN=6FB7AC4F504932E603A7399A220A845CC92A9736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:59:bb:78:eb:e1:d7:f7:4c:ed:9f:fe:c8:
87:88:c0:fd:9c:f8:5c:3f:35:e3:22:d5:2d:91:cf:
6d:2f:6f:08:8a:12:35:ba:7d:7a:0f:2f:d4:11:b4:
90:14:68:4d:1a:85:d6:9a:f9:da:c3:62:ad:cd:0b:
9e:42:c9:f1:24:f0:01:20:c0:b7:d8:db:e5:8b:e8:
7a:b9:13:37:08:e2:7b:30:ff:73:76:0c:a7:26:aa:
17:d7:bb:4e:19:34:a0:52:32:cb:fb:ef:f6:4a:ad:
a2:90:14:4d:e7:2e:dd:47:51:44:b6:68:43:ae:2d:
5b:f7:c3:db:05:29:67:58:5d:22:11:54:e6:05:55:
0d:83:a2:ef:47:48:49:5b:8d:3e:a9:2e:20:4f:3c:
5c:45:1f:42:c5:cf:b0:7a:4e:aa:26:81:2f:43:dc:
04:f8:11:44:16:12:bd:27:61:cf:87:1a:d8:0a:aa:
20:6c:d6:e5:26:67:35:7f:1e:5b:07:5c:43:21:a2:
97:cc:5e:a4:4f:57:ca:a0:85:8c:dc:f5:88:91:ba:
2c:a6:bd:c3:e4:3d:b4:a8:4c:bc:bd:d5:83:2e:a3:
36:2f:7d:c5:06:fe:4a:03:01:de:35:e0:79:f5:16:
69:c2:f8:36:1b:e9:8f:d2:28:50:0a:0e:04:6e:42:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:AC:4F:50:49:32:E6:03:A7:39:9A:22:0A:84:5C:C9:2A:97:36
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232302e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:07:43:f1:57:8b:2f:cd:fa:f2:b5:b5:29:3e:fa:62:05:08:
77:29:c0:80:30:5f:3e:15:55:74:4e:96:8c:6b:d2:89:97:b1:
ec:7a:f8:7c:03:19:af:e1:f5:03:b4:9e:a0:9a:94:25:fb:29:
23:64:8e:f4:13:33:f6:b3:73:e3:66:2b:ff:96:78:cc:48:00:
1d:31:4e:06:b9:cc:9a:23:84:3f:d5:84:3c:bf:e4:d5:a1:ad:
30:96:75:70:d1:59:0a:49:f0:2e:bf:d1:a4:77:ca:5f:b6:4c:
af:38:07:99:75:59:28:48:1b:68:9a:31:f1:44:24:fe:ba:b3:
9d:58:a0:84:39:3c:16:d0:d5:45:90:b1:80:3b:78:9d:a1:14:
58:81:a0:07:a3:ee:ca:d6:50:bd:c5:ef:04:9c:d5:3c:68:54:
1a:ee:7a:cc:76:6e:bf:dc:fe:29:af:c7:5b:20:0a:48:22:14:
ac:a2:45:39:79:9c:8e:91:7b:14:77:06:cd:84:d5:8c:71:35:
2c:2a:08:d0:13:7f:22:c2:5a:47:f7:d1:93:3a:f7:f9:75:d7:
f8:37:ff:2b:80:1d:4b:05:7c:44:8f:ef:f5:90:85:35:1a:5a:
85:7c:42:c5:75:65:2b:34:fa:bc:96:40:23:25:b3:d3:4a:f6:
0e:65:82:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:31 2026 by rpki-client