
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa
File: 3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa (raw, json)
Hash identifier: bw+EnACZZYWMgTaIMwL0tX7tCOMyECZC8lmOBP7GohE=
Subject key identifier: C1:47:B9:BE:28:51:C7:25:5A:71:7C:22:40:BB:CC:93:0E:88:65:C6
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 1C5A574BF9140B2D073AFCAE5E1A45D4265C29EC
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:38:46 +0000
ROA not before: Wed 03 Jun 2026 06:33:46 +0000
ROA not after: Wed 02 Jun 2027 06:38:46 +0000
asID: 140716
IP address blocks: 114.66.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5a:57:4b:f9:14:0b:2d:07:3a:fc:ae:5e:1a:45:d4:26:5c:29:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:33:46 2026 GMT
Not After : Jun 2 06:38:46 2027 GMT
Subject: CN=C147B9BE2851C7255A717C2240BBCC930E8865C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:20:2f:b5:0e:43:37:b5:94:3e:95:49:52:
43:ae:1e:46:80:47:30:c9:b8:81:47:47:81:f0:1a:
fe:9c:5b:0c:1c:a0:ec:3e:d2:fe:4f:38:b2:83:39:
f6:3e:b6:16:cb:0a:4b:c3:cf:89:dc:30:13:7d:54:
31:5a:59:92:93:dd:ee:4a:dc:ef:6a:ca:6e:16:ff:
1c:21:44:40:8e:42:0d:52:7e:26:e7:ca:8a:05:5a:
69:5d:79:e2:d5:a4:cf:a1:64:ea:65:64:74:31:04:
f1:11:8a:c3:04:39:3a:e2:ad:50:11:8e:06:f5:b0:
a0:06:1e:ed:ae:ac:98:2f:41:b8:e0:d6:ec:21:13:
63:b2:f4:64:fd:77:c0:f3:00:5c:53:88:55:c3:0c:
8b:d5:94:1a:eb:48:66:a9:d0:39:8e:6c:10:5e:6b:
d0:b6:00:ba:1f:58:ca:ba:4d:42:24:6c:ad:fe:de:
a3:c9:c5:59:43:a2:c7:a0:cb:30:dd:d4:ac:f2:f7:
0f:be:a5:d7:28:6b:a7:bb:6e:71:5f:ff:c7:69:5e:
aa:34:43:65:dd:b7:02:60:27:4c:be:78:3b:cc:96:
e5:6e:25:74:f7:64:26:8d:19:fd:77:3d:bd:34:df:
75:18:3a:a4:42:e9:20:35:1d:33:b7:97:95:e1:4a:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:B9:BE:28:51:C7:25:5A:71:7C:22:40:BB:CC:93:0E:88:65:C6
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234302e302f32322d3232203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.66.240.0/22
Signature Algorithm: sha256WithRSAEncryption
08:21:2c:e5:2e:e9:16:67:e4:00:a0:84:da:6a:1f:cb:8f:53:
79:6a:2d:8a:b3:27:49:93:79:a2:3a:77:8a:23:6f:29:81:f7:
94:92:3d:1b:c3:cd:ea:50:c4:53:f3:3f:e2:3e:93:ce:3d:94:
9a:ae:69:d8:50:57:7d:c2:ea:72:4f:65:3c:ef:e9:d9:9b:fb:
b0:a8:3d:39:ec:1a:66:e6:9d:5f:70:64:1b:30:a9:a6:61:71:
85:a6:4f:02:00:07:50:d0:26:20:67:f5:3c:d7:ff:37:ec:a8:
2a:74:26:01:a0:60:bc:29:55:a4:25:33:17:5b:27:db:5e:d1:
98:02:ff:dc:5e:7f:52:96:a7:1b:4b:c8:1a:6b:6f:ce:3e:be:
f2:f8:31:f9:7b:46:80:70:9b:ba:23:75:97:7d:1e:d5:a9:cd:
b6:2a:a8:7a:bf:ca:f2:a5:e7:d4:07:8d:4f:97:da:a0:3b:b3:
9c:20:4c:7e:e5:86:5d:19:b3:cd:54:cd:12:34:ec:9c:85:3e:
77:18:37:1e:92:54:c6:b5:79:9a:c4:93:d4:b9:3e:61:a0:b5:
06:d7:36:e6:3f:19:5b:3b:09:6b:1a:ff:17:05:d1:d7:6f:3e:
c9:ee:7e:12:0f:50:7f:49:ab:14:56:a0:32:d8:c6:9a:46:5a:
8b:59:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:03 2026 by rpki-client