
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3232302e302f32332d3233203d3e20313430373136.roa
File: 3131342e3131322e3232302e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier: NDRxO+NYtPJGgrFL38LooGKx+ar8VJxB0l+xz4inuUU=
Subject key identifier: 03:F1:85:B0:3C:05:C5:C1:5C:54:D4:F5:23:44:67:D5:AC:F4:A6:57
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 4B57515B0F9DAADED03BC8FAF995F0F8E55D66A4
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3232302e302f32332d3233203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:46:25 +0000
ROA not before: Wed 03 Jun 2026 06:41:25 +0000
ROA not after: Wed 02 Jun 2027 06:46:25 +0000
asID: 140716
IP address blocks: 114.112.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:57:51:5b:0f:9d:aa:de:d0:3b:c8:fa:f9:95:f0:f8:e5:5d:66:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:41:25 2026 GMT
Not After : Jun 2 06:46:25 2027 GMT
Subject: CN=03F185B03C05C5C15C54D4F5234467D5ACF4A657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:79:ef:10:61:c2:a7:87:34:fa:80:fb:6a:
37:3f:a9:03:63:f0:d9:46:e1:b9:20:86:a5:eb:25:
a1:8b:16:ca:bd:cb:20:b9:08:6c:43:13:24:84:e8:
39:db:00:1a:66:19:5c:fa:45:45:99:66:6c:f9:4a:
8e:53:a8:be:1f:9b:42:fb:e6:56:3b:cc:cd:1e:dd:
4f:a2:09:54:4d:4d:d7:75:8e:9f:5a:61:d9:c4:4f:
3c:56:77:09:0a:9b:af:d7:82:7e:5e:ed:c9:11:f8:
d1:fd:d3:21:12:32:2b:a5:89:a1:af:20:12:2b:7d:
b0:69:e0:ef:f7:f7:2c:63:7b:cf:21:8a:84:13:92:
d4:2e:61:8d:02:96:94:b7:57:08:fd:54:99:70:c1:
60:ff:fe:53:52:32:30:c3:87:fb:ce:04:66:cb:16:
da:1d:45:a5:77:cf:61:1f:f0:e4:87:57:96:58:a6:
d2:2b:5e:ab:c0:9a:8d:a9:ba:37:21:83:e6:9a:64:
d3:34:0b:1e:77:8b:15:b5:58:a3:c6:2e:96:aa:83:
1e:cd:7c:cd:d1:81:08:44:df:75:7b:55:be:8f:8a:
29:5b:04:54:68:b7:61:1c:34:8d:85:13:59:0f:72:
e0:80:f3:5c:df:29:01:89:14:31:e2:c8:cd:d4:4e:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:85:B0:3C:05:C5:C1:5C:54:D4:F5:23:44:67:D5:AC:F4:A6:57
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e3131322e3232302e302f32332d3233203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.220.0/23
Signature Algorithm: sha256WithRSAEncryption
48:ce:a1:27:73:43:57:76:cc:8b:ed:6a:59:5f:b7:ca:08:e0:
3b:39:ac:38:d9:13:75:8e:79:51:dc:50:81:e1:8f:82:8e:70:
99:c6:b2:84:61:f3:0b:c2:66:29:3c:40:8e:c1:93:b4:30:ec:
65:88:bc:30:34:38:d1:3f:f3:d9:c2:97:ce:f9:7c:25:f0:60:
ad:38:35:e3:d4:22:38:46:7c:c7:53:a3:5a:29:f6:08:b9:9e:
91:fa:e9:06:96:18:8e:d3:69:97:7f:cc:0f:5b:9d:e8:83:9b:
12:a5:15:2d:d4:89:c4:02:90:49:81:44:e5:27:91:f8:77:7e:
a1:57:00:18:36:77:ac:ec:51:53:9b:b9:2d:c4:25:78:72:bb:
da:56:a8:2b:3b:81:48:a4:86:7d:b4:a0:2b:6b:35:85:aa:06:
f9:13:a3:a7:7c:98:96:6b:4b:c6:1c:94:59:54:ad:d6:2b:04:
d2:e5:72:d7:4c:18:43:6b:af:2a:9d:d1:ee:a4:9d:4d:f1:de:
ed:f2:48:02:36:ac:c6:5f:34:0f:0b:0f:c2:5e:39:d5:56:73:
5b:35:55:3c:fd:ad:53:f5:f5:4f:d8:fd:29:75:23:72:73:90:
1b:b9:38:7b:63:c6:ed:db:e9:c9:9b:d2:15:55:49:69:e2:bc:
9a:32:52:59
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUS1dRWw+dqt7QO8j6+ZXw+OVdZqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjQxMjVaFw0yNzA2MDIwNjQ2MjVaMDMxMTAvBgNV
BAMTKDAzRjE4NUIwM0MwNUM1QzE1QzU0RDRGNTIzNDQ2N0Q1QUNGNEE2NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+T3nvEGHCp4c0+oD7ajc/qQNj
8NlG4bkghqXrJaGLFsq9yyC5CGxDEySE6DnbABpmGVz6RUWZZmz5So5TqL4fm0L7
5lY7zM0e3U+iCVRNTdd1jp9aYdnETzxWdwkKm6/Xgn5e7ckR+NH90yESMiuliaGv
IBIrfbBp4O/39yxje88hioQTktQuYY0ClpS3Vwj9VJlwwWD//lNSMjDDh/vOBGbL
FtodRaV3z2Ef8OSHV5ZYptIrXqvAmo2pujchg+aaZNM0Cx53ixW1WKPGLpaqgx7N
fM3RgQhE33V7Vb6PiilbBFRot2EcNI2FE1kPcuCA81zfKQGJFDHiyM3UTgprAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUA/GFsDwFxcFcVNT1I0Rn1az0plcwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzEzMTM0MmUz
MTMxMzIyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzMDM3MzEz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAXJw3DANBgkqhkiG9w0BAQsFAAOCAQEASM6hJ3NDV3bMi+1q
WV+3ygjgOzmsONkTdY55UdxQgeGPgo5wmcayhGHzC8JmKTxAjsGTtDDsZYi8MDQ4
0T/z2cKXzvl8JfBgrTg149QiOEZ8x1OjWin2CLmekfrpBpYYjtNpl3/MD1ud6IOb
EqUVLdSJxAKQSYFE5SeR+Hd+oVcAGDZ3rOxRU5u5LcQleHK72laoKzuBSKSGfbSg
K2s1haoG+ROjp3yYlmtLxhyUWVSt1isE0uVy10wYQ2uvKp3R7qSdTfHe7fJIAjas
xl80DwsPwl451VZzWzVVPP2tU/X1T9j9KXUjcnOQG7k4e2PG7dvpyZvSFVVJaeK8
mjJSWQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client