
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa
File: 3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier: K4xf4cf2+ZznS4RIQlAiviMNsg3gjxddQubF3x2EYIQ=
Subject key identifier: 1F:3D:D5:1E:89:BF:1A:F0:2C:0A:6B:5C:E6:67:0F:A8:88:C5:E3:76
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 0C1FD46B2A7212370BDC00F832E0AB91E8B362E0
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa
Signing time: Thu 04 Jun 2026 07:20:29 +0000
ROA not before: Thu 04 Jun 2026 07:15:29 +0000
ROA not after: Thu 03 Jun 2027 07:20:29 +0000
asID: 4837
IP address blocks: 114.112.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1f:d4:6b:2a:72:12:37:0b:dc:00:f8:32:e0:ab:91:e8:b3:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 4 07:15:29 2026 GMT
Not After : Jun 3 07:20:29 2027 GMT
Subject: CN=1F3DD51E89BF1AF02C0A6B5CE6670FA888C5E376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:51:4a:b1:38:fe:56:d8:da:08:32:88:73:
4b:19:74:5c:65:59:68:14:f5:ee:08:b7:8d:f3:37:
7e:ef:d6:e4:91:24:f7:a2:8a:a3:8a:27:c4:a8:63:
3c:81:45:8f:94:eb:b7:62:3a:54:65:3b:6c:e1:77:
e1:2d:a2:90:42:f1:26:0e:2b:50:97:6b:12:32:ca:
b0:3e:2a:0c:21:ae:4b:b7:58:c3:72:1b:38:6f:72:
92:de:f3:aa:c9:59:c8:d9:78:67:3d:22:11:3a:33:
83:7d:b8:73:14:8b:55:89:3d:b5:7e:51:65:84:db:
9c:20:c7:b7:31:dd:18:d3:f5:25:e1:fd:04:c0:ff:
ef:6b:10:e8:40:57:23:01:9b:c5:c1:2e:c3:be:a3:
82:5e:94:46:90:7c:10:e9:64:a6:32:e6:51:4a:b7:
c2:ad:e4:14:1c:5a:02:c1:2e:22:82:60:3a:ff:a4:
d8:b8:6a:84:1c:55:db:a9:23:6b:ff:5c:6d:64:27:
64:cb:53:c2:58:2f:64:13:4d:f0:ed:00:3e:fe:23:
e0:74:ef:cd:48:a7:bb:ca:28:3a:e2:e7:49:f7:00:
48:05:ce:62:4a:6f:92:03:be:3f:dd:0e:a9:37:fe:
c6:00:12:e5:1f:3c:39:96:43:f2:31:68:2a:ec:8c:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:D5:1E:89:BF:1A:F0:2C:0A:6B:5C:E6:67:0F:A8:88:C5:E3:76
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32312d3231203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.200.0/21
Signature Algorithm: sha256WithRSAEncryption
00:ff:51:5c:62:5f:d8:2f:76:28:0f:a4:01:14:28:b7:b2:98:
91:86:21:70:b5:b4:72:1d:cd:dc:c5:2d:0a:97:57:c9:5c:dc:
60:9f:1f:1f:a9:ce:0e:0d:7f:c2:85:ea:56:37:dd:f3:65:b1:
0c:1c:86:bd:68:b2:9c:ba:fd:3a:28:36:98:76:fc:59:fb:26:
5a:97:89:fd:41:5d:87:8e:bc:a6:27:4d:ee:2e:48:81:ac:9e:
64:3c:00:ae:b6:84:c8:8c:50:cc:87:29:ee:13:6c:d3:f2:58:
89:6c:6f:12:8e:34:af:b6:66:d4:14:cd:b6:f3:0e:24:15:02:
5a:72:c7:19:1b:a6:e8:92:fa:b7:69:48:43:00:6d:d6:2e:c4:
f2:33:5e:95:f8:f8:71:48:36:12:21:52:74:96:3f:38:98:75:
71:b5:ab:92:0d:0c:1a:8d:5a:16:cc:90:e9:a0:e5:8a:4e:75:
42:d5:35:42:05:47:c0:a6:ea:e1:aa:ba:5b:b1:0c:e2:1f:80:
0a:56:7c:d4:b6:cf:ce:f5:fa:39:26:6d:0f:d4:07:b3:81:7b:
d5:1f:c0:64:86:d0:34:64:fa:de:24:0c:8c:1a:a3:6f:70:bc:
91:81:a6:15:79:5b:a8:07:d0:09:00:18:48:9a:df:22:ba:a8:
d5:83:11:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:40 2026 by rpki-client