
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230382e302f32302d3230203d3e2034383337.roa
File: 3131342e3131322e3230382e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier: CX4s6gW6coS6glMsipEyHFERBb22Z0/AtCkfdATaOQo=
Subject key identifier: 17:35:B4:6B:8F:A8:02:CE:32:1E:45:7E:71:7F:33:14:29:59:12:46
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 0AD8CB8105DAC645BBC6F64D50EF8BE1AC5D332A
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230382e302f32302d3230203d3e2034383337.roa
Signing time: Wed 14 Oct 2026 10:26:16 +0000
ROA not before: Wed 14 Oct 2026 10:21:16 +0000
ROA not after: Wed 13 Oct 2027 10:26:16 +0000
asID: 4837
IP address blocks: 114.112.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 11:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d8:cb:81:05:da:c6:45:bb:c6:f6:4d:50:ef:8b:e1:ac:5d:33:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Oct 14 10:21:16 2026 GMT
Not After : Oct 13 10:26:16 2027 GMT
Subject: CN=1735B46B8FA802CE321E457E717F331429591246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:3a:09:1a:15:44:b0:46:20:e3:4b:1e:32:
8c:19:5a:26:e9:bc:47:48:95:ec:ae:fb:91:7f:2a:
f5:a0:8f:1e:c0:95:3b:6b:cb:5e:98:eb:e1:2d:dd:
c4:f6:11:51:60:09:ab:c8:c3:a8:4b:a5:14:38:c1:
e6:33:00:b1:92:a4:67:e0:6f:e5:6b:76:f6:c6:27:
d9:4c:0f:ed:e5:f3:61:14:b3:a8:20:d8:00:69:cc:
76:16:9e:74:80:c2:e8:4a:55:60:9c:ff:6f:62:42:
95:21:ee:5a:4f:10:58:47:2d:99:35:d4:16:fa:94:
e6:d9:54:73:2a:53:e7:fb:0e:72:c7:89:19:19:04:
34:5e:18:97:ce:db:7a:2b:87:34:a4:33:f1:0c:96:
7d:38:da:7b:0e:0c:cf:e5:d6:a5:1f:e6:53:d0:ac:
86:a9:07:b9:60:17:c7:32:46:96:da:27:5c:ff:5c:
e4:f9:35:0d:39:e6:c2:e2:5d:2e:ca:69:c9:cd:1a:
23:6b:0d:d1:b9:8c:df:4a:66:e0:d1:d3:89:1d:3f:
85:dc:b1:b3:9c:2a:c3:79:85:62:e9:c8:81:49:00:
19:cb:1c:b1:44:ea:53:22:d1:4b:94:f0:c6:e4:a8:
0b:e9:6f:44:c6:71:b0:a6:4c:ed:28:1f:e1:41:ed:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:B4:6B:8F:A8:02:CE:32:1E:45:7E:71:7F:33:14:29:59:12:46
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3230382e302f32302d3230203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:4d:12:02:a9:73:9c:a7:5a:b1:8f:07:aa:4d:db:54:68:21:
bc:6c:5d:91:e4:b9:cc:8b:c1:ce:77:39:28:03:df:b2:9a:e7:
da:cf:11:59:65:4b:44:55:26:27:c6:5b:66:a8:9b:c8:fd:de:
de:c3:c7:d2:fe:53:0f:49:c5:82:fd:d3:1e:4f:ed:ef:ef:01:
34:67:b1:73:70:98:7f:e7:5b:ad:0b:f1:bc:b1:67:73:9d:14:
e0:96:22:f7:50:6d:09:13:7e:c3:fb:55:d4:66:d2:2c:b5:55:
f1:07:2d:3b:60:e9:ac:d3:7e:83:9a:e8:af:bc:08:fd:5a:0e:
e9:63:55:1c:ee:92:08:4e:47:36:b5:c1:df:b6:42:97:01:f3:
c8:56:7b:4a:7c:01:88:fd:4b:73:51:16:6b:73:f6:5c:99:99:
62:8e:b6:46:45:b7:6d:af:0f:99:27:ba:b2:48:73:8c:74:6c:
af:89:73:b1:63:21:f9:92:f8:9b:de:2e:29:db:55:32:04:b4:
c4:de:18:7c:e5:ca:33:ab:a0:4d:35:63:38:55:8e:59:fe:d4:
e1:3c:33:56:43:b4:41:59:4f:61:ee:72:79:b0:ad:bf:1a:b5:
81:e8:11:2e:43:1b:0e:6c:b9:f6:6f:7b:04:e8:d7:80:64:c6:
c6:fa:47:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:03 2026 by rpki-client