$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32302d3230203d3e2034383337.roa File: 3131342e36362e3234302e302f32302d3230203d3e2034383337.roa (raw, json) Hash identifier: IF+mZG3NrZv22DMi5vKV7ykxhZGdBb704lSO7yygpUQ= Subject key identifier: BC:48:23:99:BB:99:D8:AD:D6:F7:C9:9F:71:52:5B:FE:AC:DE:54:EB Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Certificate serial: 4A2DB3F5409F569B3E50F2A69B78CE7DA028BD21 Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32302d3230203d3e2034383337.roa Signing time: Thu 04 Jun 2026 07:17:41 +0000 ROA not before: Thu 04 Jun 2026 07:12:41 +0000 ROA not after: Thu 03 Jun 2027 07:17:41 +0000 asID: 4837 IP address blocks: 114.66.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2d:b3:f5:40:9f:56:9b:3e:50:f2:a6:9b:78:ce:7d:a0:28:bd:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Validity Not Before: Jun 4 07:12:41 2026 GMT Not After : Jun 3 07:17:41 2027 GMT Subject: CN=BC482399BB99D8ADD6F7C99F71525BFEACDE54EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6d:df:af:06:c2:bd:65:5f:9a:0a:05:59:2f: 81:81:3f:00:99:3b:3a:cc:77:84:93:55:e6:f2:8a: 47:4a:04:1f:8b:92:89:13:93:a2:aa:3f:8e:3f:de: 2c:50:c2:ce:c0:de:56:1c:4d:1e:c4:e6:57:5a:47: 11:49:b9:95:76:63:96:e6:c6:98:ca:df:e2:fc:2a: 92:4f:e9:1a:96:6e:7e:05:51:d5:b5:4d:0a:7c:0e: e5:a1:8f:bb:a4:e3:97:2a:85:2d:41:e5:13:be:c2: c1:47:f6:88:43:54:51:fd:f6:90:41:80:03:1d:e2: 84:2d:20:44:da:70:57:8d:52:3c:b4:36:d3:ba:4b: b5:17:18:e4:ae:3e:73:33:c6:b2:0a:63:17:a8:59: 83:be:1e:3d:90:34:4b:7c:17:e9:6b:25:6b:ad:e7: 3e:b1:22:32:f2:dc:f3:68:e1:18:bb:24:96:fd:51: 70:7e:d3:eb:84:cd:f5:82:6c:1a:47:4d:53:e8:2c: 05:6c:f5:49:48:eb:b4:cb:66:76:94:90:b4:17:ef: 4d:c1:01:69:ef:12:bd:98:e7:f1:17:33:95:ed:f7: c9:08:05:4c:ee:d4:c6:30:d3:3a:49:03:6c:a3:13: 99:64:5a:1f:09:60:31:ff:22:2d:3a:76:eb:86:7c: f3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:23:99:BB:99:D8:AD:D6:F7:C9:9F:71:52:5B:FE:AC:DE:54:EB X509v3 Authority Key Identifier: keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32302d3230203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.66.240.0/20 Signature Algorithm: sha256WithRSAEncryption 06:aa:e6:9e:5c:70:fe:7f:9d:49:f0:83:fc:47:f4:fb:35:f7: 7f:ac:bf:a7:c8:fe:2e:95:65:24:da:3a:a2:fd:1a:90:8b:fd: 08:64:11:8c:c5:a5:d0:e2:32:e1:ea:8a:f1:60:11:64:e0:d7: 97:d3:3d:77:ac:a0:5f:8d:75:7b:e9:1d:85:cc:69:ce:ec:d1: 93:2a:08:c0:d4:b8:32:49:84:c4:75:fb:48:27:67:ae:05:c5: 61:7e:a4:7e:d0:13:dd:ac:fd:a6:fa:c5:b7:c9:8b:41:36:15: 57:9a:04:09:7b:9b:c0:31:bb:b7:29:a0:1f:68:ff:66:cf:9e: f8:86:04:03:1e:e2:b7:42:92:1b:98:e4:54:af:33:52:85:44: a0:52:ae:6b:d0:83:28:e8:16:5e:3b:7d:49:5b:8f:87:53:82: cb:d0:64:9e:15:4e:d1:19:a1:75:77:44:59:7b:f9:ae:19:24: 40:89:51:29:43:cf:e7:68:8c:97:23:99:b9:7a:e1:b1:52:a9: 3d:7a:ce:ae:71:9a:2d:e6:2f:e0:68:4e:91:63:51:e4:d8:78: ea:d3:7e:40:cc:90:c0:08:87:0c:fe:ff:39:47:3c:92:92:95: 76:42:8c:9d:48:50:03:67:9e:fe:9b:60:ba:19:51:8e:53:75: d0:93:63:5d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSi2z9UCfVps+UPKmm3jOfaAovSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz NUI3ODFERDAeFw0yNjA2MDQwNzEyNDFaFw0yNzA2MDMwNzE3NDFaMDMxMTAvBgNV BAMTKEJDNDgyMzk5QkI5OUQ4QURENkY3Qzk5RjcxNTI1QkZFQUNERTU0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSbd+vBsK9ZV+aCgVZL4GBPwCZ OzrMd4STVebyikdKBB+LkokTk6KqP44/3ixQws7A3lYcTR7E5ldaRxFJuZV2Y5bm xpjK3+L8KpJP6RqWbn4FUdW1TQp8DuWhj7uk45cqhS1B5RO+wsFH9ohDVFH99pBB gAMd4oQtIETacFeNUjy0NtO6S7UXGOSuPnMzxrIKYxeoWYO+Hj2QNEt8F+lrJWut 5z6xIjLy3PNo4Ri7JJb9UXB+0+uEzfWCbBpHTVPoLAVs9UlI67TLZnaUkLQX703B AWnvEr2Y5/EXM5Xt98kIBUzu1MYw0zpJA2yjE5lkWh8JYDH/Ii06duuGfPNBAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUvEgjmbuZ2K3W98mfcVJb/qzeVOswHwYDVR0j BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5 RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzEzMTM0MmUzNjM2 MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHJC8DANBgkqhkiG9w0BAQsFAAOCAQEABqrmnlxw/n+dSfCD/Ef0+zX3f6y/ p8j+LpVlJNo6ov0akIv9CGQRjMWl0OIy4eqK8WARZODXl9M9d6ygX411e+kdhcxp zuzRkyoIwNS4MkmExHX7SCdnrgXFYX6kftAT3az9pvrFt8mLQTYVV5oECXubwDG7 tymgH2j/Zs+e+IYEAx7it0KSG5jkVK8zUoVEoFKua9CDKOgWXjt9SVuPh1OCy9Bk nhVO0RmhdXdEWXv5rhkkQIlRKUPP52iMlyOZuXrhsVKpPXrOrnGaLeYv4GhOkWNR 5Nh46tN+QMyQwAiHDP7/OUc8kpKVdkKMnUhQA2ee/ptguhlRjlN10JNjXQ== -----END CERTIFICATE-----Generated at Fri Jun 12 06:42:43 2026 by rpki-client