
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32332d3233203d3e20313430373137.roa
File: 3131342e3131322e3230302e302f32332d3233203d3e20313430373137.roa (raw, json)
Hash identifier: tUUq1vqJm+apDCrc+8kYht7sILBAobIItBuLspurpMo=
Subject key identifier: BC:35:A9:75:06:D3:D1:29:05:70:71:F3:C4:F6:62:D6:F4:A4:1B:A3
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 7EE8391AC1499D6C854A44C41E1CED73E60CD4A3
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32332d3233203d3e20313430373137.roa
Signing time: Wed 03 Jun 2026 06:46:25 +0000
ROA not before: Wed 03 Jun 2026 06:41:25 +0000
ROA not after: Wed 02 Jun 2027 06:46:25 +0000
asID: 140717
IP address blocks: 114.112.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e8:39:1a:c1:49:9d:6c:85:4a:44:c4:1e:1c:ed:73:e6:0c:d4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:41:25 2026 GMT
Not After : Jun 2 06:46:25 2027 GMT
Subject: CN=BC35A97506D3D129057071F3C4F662D6F4A41BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:07:48:44:c8:c0:75:7e:2b:6e:1c:c2:4b:
23:39:56:b0:09:24:a6:1c:d5:b7:4a:59:cb:09:5b:
75:78:ee:82:53:09:19:6b:77:89:d2:21:7a:77:a1:
0f:d4:91:43:7f:b1:af:5d:a8:60:d6:45:c8:85:6b:
56:99:eb:8f:35:27:c1:64:6e:78:a9:fe:f0:37:3a:
fa:1b:e8:1b:ac:b0:72:b0:5c:47:38:db:76:02:ce:
44:e4:99:62:e4:c9:b1:63:ae:56:f6:22:e5:d7:c6:
77:9c:2c:e5:59:4d:b1:9f:05:38:aa:88:3e:83:19:
37:20:77:01:8c:b0:9f:69:4f:7e:44:a1:34:5e:10:
dc:1a:26:db:c5:84:55:7e:d1:46:be:f9:71:6a:00:
4e:80:cc:96:a4:fc:c1:80:de:a4:cb:e9:fd:e8:53:
a1:0e:86:13:dc:a9:54:29:db:59:18:97:c8:51:26:
09:f3:58:5a:a4:fc:3c:dd:94:58:76:ad:13:ef:c4:
a4:1b:a0:fe:81:8e:e9:0e:49:ff:16:51:76:09:f9:
0b:f2:f5:9f:d9:aa:38:20:9f:bf:7b:ba:c7:0f:48:
84:89:75:b9:dd:db:59:ee:53:c7:09:b3:41:d6:70:
91:56:87:df:71:56:c7:c6:ef:67:80:3c:4e:d2:64:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:A9:75:06:D3:D1:29:05:70:71:F3:C4:F6:62:D6:F4:A4:1B:A3
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230302e302f32332d3233203d3e20313430373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.200.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:7a:bf:7d:35:a7:23:cb:d6:e8:7c:68:f8:20:88:b0:6e:bd:
06:1c:ae:5e:9f:0a:fb:48:df:3c:b8:04:98:0a:04:c0:13:74:
5c:79:0d:55:19:7e:c0:69:e9:52:35:71:59:a7:68:07:1d:38:
e3:c9:db:f5:66:b7:a6:0e:08:29:71:9e:b2:1b:32:6e:9a:86:
e0:db:96:3a:b6:fe:7c:99:d7:ee:24:b1:64:a2:d9:63:eb:67:
bd:f4:2b:53:a8:ba:5c:40:96:6d:b8:31:44:fe:67:c9:aa:8b:
86:5a:39:f9:bc:bd:04:35:74:8a:c3:53:52:0e:7f:54:2a:53:
0b:f2:1d:cd:47:d1:b2:04:0c:a5:60:4b:74:2c:28:de:31:78:
53:6f:85:5b:f9:70:61:11:ad:c2:6d:d8:7d:9e:21:0c:69:65:
a2:99:26:45:2b:d9:e7:d3:ad:53:a8:c7:fa:15:61:89:2c:ca:
1e:59:a9:e5:19:ba:94:fc:45:a5:fa:e3:07:b6:67:c6:58:fa:
8b:47:f8:e7:1b:04:85:9d:16:36:eb:d9:5a:cb:30:d7:ef:d7:
da:0b:8a:61:1f:b7:8e:cd:f0:ab:7d:1d:cc:5e:08:9d:e9:f2:
a9:3c:bc:59:1d:b4:df:95:75:90:98:08:44:de:57:85:fb:ff:
09:79:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client