
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa
File: 3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa (raw, json)
Hash identifier: hqKaVNdB6OOTXLSeVqBBrshLhChbiJmgqwdgu45Wzms=
Subject key identifier: 17:D3:64:63:59:88:78:E7:0F:51:C2:2B:63:2D:7B:3A:EF:AB:73:D3
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 7CAA3B819E80122B28585D4D7E052B32A61AE968
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa
Signing time: Wed 03 Jun 2026 06:30:11 +0000
ROA not before: Wed 03 Jun 2026 06:25:11 +0000
ROA not after: Wed 02 Jun 2027 06:30:11 +0000
asID: 140717
IP address blocks: 103.211.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:aa:3b:81:9e:80:12:2b:28:58:5d:4d:7e:05:2b:32:a6:1a:e9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:25:11 2026 GMT
Not After : Jun 2 06:30:11 2027 GMT
Subject: CN=17D36463598878E70F51C22B632D7B3AEFAB73D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:f1:59:47:0e:8c:90:e3:e8:98:d5:f1:0d:
2a:b6:d6:87:00:ea:fa:3e:aa:fa:b3:18:b1:6e:fd:
08:bd:6b:2b:e1:64:8b:0a:35:4d:b2:03:1e:11:e1:
d1:95:59:62:36:cf:8f:cb:1e:63:e9:74:b0:a8:7a:
20:bd:b5:74:57:4b:7b:2f:23:cd:13:e2:de:60:02:
0d:d5:4f:27:bb:eb:e4:f4:de:d1:05:74:22:ac:2e:
f3:a2:a4:12:2d:05:2f:9d:2d:a4:50:04:bb:86:07:
b9:35:4a:3e:53:65:38:93:92:96:78:d7:b9:e0:48:
2e:9b:8e:37:70:c7:5d:f6:32:a4:c6:86:35:fc:58:
71:dc:89:65:af:34:2e:4a:bd:d7:ca:f7:76:9a:34:
6a:0f:7d:b8:d8:6f:81:29:6e:3c:bf:26:99:70:1d:
06:4c:75:8f:41:6b:38:3d:f9:b2:84:6f:d8:be:40:
8f:70:01:7a:9b:61:80:cb:44:39:7c:8b:9a:d4:ad:
26:ff:7b:79:e0:25:d6:0e:36:f0:14:47:33:00:cf:
fb:dd:a9:47:59:c4:94:b1:51:09:b3:f0:fd:4b:38:
28:b8:82:c6:df:35:f8:27:72:e1:f4:4f:b5:b0:f3:
3d:ce:18:6c:ad:4a:e0:cb:19:63:8e:49:82:f4:25:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:64:63:59:88:78:E7:0F:51:C2:2B:63:2D:7B:3A:EF:AB:73:D3
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.221.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a6:7b:a0:59:a6:53:8c:84:15:3b:b4:34:ff:d4:2a:7b:c5:
9f:17:96:ea:0c:01:e7:67:b2:27:f2:54:06:4f:c9:a1:b0:1d:
1c:6f:cd:19:39:f9:87:88:d2:e4:30:3d:59:8a:fd:cd:95:11:
ba:0c:fe:1d:80:74:0a:6b:d3:c9:42:36:e6:99:c9:fb:03:b5:
92:f9:d6:d6:0c:d6:02:d0:7e:98:63:77:b7:6c:18:40:13:44:
cf:f4:f8:07:78:52:1f:80:d6:60:7f:09:23:3d:72:f8:e5:9f:
9a:10:40:6d:1e:36:23:1d:c1:d7:e4:61:54:0b:e1:50:c7:bb:
1d:52:4f:88:c1:d5:91:dd:50:4e:b0:3e:c3:04:11:f2:00:6a:
2e:48:e8:6c:00:e0:68:cd:0e:d7:ff:fa:ff:cd:f0:36:2b:06:
4a:c7:53:88:59:d4:a9:34:2e:7b:a2:45:a2:75:dc:7f:e8:08:
ef:74:ce:7b:7c:43:99:3a:be:b1:bc:7c:af:44:71:84:ef:6e:
80:0c:c5:8f:32:1f:e2:f7:c4:b6:16:52:b2:56:db:b3:89:20:
e0:b7:2e:2a:d3:e7:ff:83:5b:cc:f2:9a:35:dc:3b:b0:6f:c7:
17:f6:a9:27:d8:54:9d:2b:b5:07:cd:c4:85:70:9b:82:79:8e:
4e:88:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:57 2026 by rpki-client