
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3231362e302f32312d3231203d3e2034383337.roa
File: 3131342e3131322e3231362e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier: BDYn3Sc6iLeXcxxnxyyg8Oj7O+mldw/C8QKEDe/z1IU=
Subject key identifier: DE:77:7D:93:84:24:F1:5E:7E:5B:B6:27:01:4D:9D:0B:E4:D5:7E:D4
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 7958C1C090AD9B9895100D8EAD6784FD21E22DDD
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3231362e302f32312d3231203d3e2034383337.roa
Signing time: Thu 04 Jun 2026 07:20:29 +0000
ROA not before: Thu 04 Jun 2026 07:15:29 +0000
ROA not after: Thu 03 Jun 2027 07:20:29 +0000
asID: 4837
IP address blocks: 114.112.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:58:c1:c0:90:ad:9b:98:95:10:0d:8e:ad:67:84:fd:21:e2:2d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 4 07:15:29 2026 GMT
Not After : Jun 3 07:20:29 2027 GMT
Subject: CN=DE777D938424F15E7E5BB627014D9D0BE4D57ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:03:3a:94:ac:14:68:b9:4f:cb:a7:85:1e:
92:12:2d:1a:06:76:ca:b6:dc:0c:5b:23:7d:56:a4:
68:04:52:4c:9d:60:ac:3e:79:7f:aa:89:19:3e:a1:
21:69:3d:c6:5f:fa:0d:03:0c:ed:a3:2c:0a:aa:d0:
a7:8a:9c:dc:08:e5:d3:f0:9f:d5:f6:ea:6a:0f:ec:
bc:d9:92:38:66:01:03:e7:6a:d0:13:7f:4d:03:51:
c4:fb:93:b7:61:e7:4d:bb:6b:bc:4d:1f:bd:12:9c:
b1:52:b4:0e:57:17:b8:ad:bb:bb:a1:2b:e8:0a:32:
79:d9:5b:65:1a:cb:a7:cc:95:05:37:7d:cd:96:d1:
d1:9d:7d:98:08:e1:b1:ea:aa:11:89:ed:41:51:66:
15:15:bf:44:40:b6:37:d0:6b:5e:d6:1e:84:25:be:
ae:c8:8d:f1:b7:1e:bb:c2:74:56:79:67:05:47:cb:
7b:f8:59:b4:df:5e:8c:65:36:04:e9:18:b2:42:e6:
8d:78:a6:0e:ec:4a:fb:9d:dd:d3:2a:19:22:c4:e7:
92:34:3f:72:03:2c:6c:63:33:63:4b:fe:4f:b7:6c:
7a:d3:60:6e:a5:6b:bb:9b:8d:31:09:77:fc:e5:2c:
06:47:58:23:de:53:fa:44:b8:71:98:7b:3a:d9:8d:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:7D:93:84:24:F1:5E:7E:5B:B6:27:01:4D:9D:0B:E4:D5:7E:D4
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3231362e302f32312d3231203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.216.0/21
Signature Algorithm: sha256WithRSAEncryption
69:e6:f4:61:da:d5:94:f0:f2:65:c9:e1:47:1d:00:df:f1:9e:
14:8c:ab:f2:23:86:0a:19:f0:83:7f:64:87:e1:6c:2d:0c:74:
64:3c:33:e1:49:2e:95:b1:f2:29:b3:94:80:db:5d:b5:ff:6e:
d1:ef:f4:89:f4:43:63:fd:c9:91:62:61:a0:68:ea:77:b8:da:
65:27:11:c6:ae:e7:45:47:96:9f:d9:ac:96:c2:5d:f0:e1:19:
12:82:98:38:09:70:a0:34:41:4d:af:bc:2d:df:81:2b:9f:5a:
92:27:6e:38:7c:90:24:1f:fe:0d:93:30:46:28:6c:d8:75:4b:
28:02:80:88:7b:a3:3a:35:ff:0f:22:81:76:81:9c:2b:51:bc:
8f:12:84:0f:ab:0c:88:32:fe:5b:cf:1c:9e:28:69:4f:1c:6d:
5d:2b:b8:c7:c7:99:2c:46:e6:8e:f8:f3:3c:16:3e:b7:b2:8a:
fa:68:a7:35:40:fb:8a:70:e4:cf:c5:4c:73:02:77:b7:67:6a:
5c:fc:26:73:6e:ca:84:1b:58:1d:8f:dc:cb:67:19:52:45:1b:
7d:4e:ab:78:23:7c:ce:90:ed:7f:94:b1:41:75:6f:06:3e:20:
2a:0a:93:55:a6:9b:45:5a:92:c6:1e:8b:47:33:20:80:27:ed:
1a:03:16:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:39 2026 by rpki-client