
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234342e302f32332d3233203d3e20313430373136.roa
File: 3131342e36362e3234342e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier: sZ6k5Nq2wAsOiTMDPXtHO3RuT72KBqy/3qDinYoNsL8=
Subject key identifier: 13:DC:46:2C:EC:34:E2:5F:AF:E9:54:BE:E9:D4:E5:7F:82:2C:B7:0E
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 3B875BD5EF23B0E88E67B4C4ADD612D28FB3935D
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234342e302f32332d3233203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:38:46 +0000
ROA not before: Wed 03 Jun 2026 06:33:46 +0000
ROA not after: Wed 02 Jun 2027 06:38:46 +0000
asID: 140716
IP address blocks: 114.66.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:87:5b:d5:ef:23:b0:e8:8e:67:b4:c4:ad:d6:12:d2:8f:b3:93:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:33:46 2026 GMT
Not After : Jun 2 06:38:46 2027 GMT
Subject: CN=13DC462CEC34E25FAFE954BEE9D4E57F822CB70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:95:77:92:26:1c:34:d9:d1:1a:a9:12:cb:
f0:36:4f:42:c6:93:be:b2:0a:48:2d:ac:b5:91:4f:
af:b1:98:c6:8a:e0:ca:18:aa:37:fe:8d:ff:11:78:
4b:cb:b9:b4:74:d8:f0:af:45:50:db:1b:02:21:a7:
e4:39:da:5a:63:bb:7e:c6:f1:2c:c7:8d:77:b1:79:
db:fc:c6:8e:5f:7b:53:7f:1b:da:9f:15:7f:7e:57:
12:eb:0d:f3:db:2a:af:ce:1a:14:c5:a3:58:e6:83:
5f:f3:38:ff:84:4d:5e:59:de:1c:68:ff:7c:d8:b8:
2b:ba:02:06:57:74:ca:0c:f7:35:8a:c6:a0:d3:be:
64:d3:f8:de:07:be:63:9f:35:77:9e:73:5e:e8:74:
b9:91:f8:35:01:88:42:28:69:ba:4c:0a:60:61:61:
97:3b:9c:76:7d:39:a4:ef:78:ab:fc:01:4f:0c:c9:
ef:5f:f7:e4:dd:c5:78:45:62:dd:33:f3:33:9a:7d:
9c:1b:08:ca:00:19:59:31:44:9b:44:30:90:b0:02:
d8:02:95:ad:17:88:c1:b7:bb:8d:96:74:5b:16:02:
2e:07:04:a4:84:29:76:29:fe:a1:0d:b9:28:1e:b7:
8e:d4:69:22:ec:6a:4c:a3:09:51:ec:61:f5:a2:09:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:46:2C:EC:34:E2:5F:AF:E9:54:BE:E9:D4:E5:7F:82:2C:B7:0E
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234342e302f32332d3233203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.66.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:70:fb:0d:71:2c:6d:bf:23:55:1b:3f:2d:a6:e0:6f:dd:13:
b6:ae:b6:6a:1c:f8:01:02:bd:65:2c:35:29:89:82:3d:7f:3b:
db:db:ca:a4:ae:13:fd:88:d4:64:16:37:54:58:b8:eb:fe:e1:
80:a1:a0:ae:3f:16:84:6d:a8:f9:cd:e4:a9:d3:9a:5e:42:55:
4e:dc:ae:56:5a:e9:5c:73:bf:85:50:d6:1a:16:cd:a4:fd:a1:
24:d8:47:54:78:4f:54:47:ac:19:0c:ad:9b:35:9e:77:e7:ac:
75:83:f3:9b:18:76:a1:fa:4b:f4:4f:dd:c1:3d:b5:f6:b1:80:
c7:fe:17:e8:37:88:60:7a:e7:3d:c3:18:dc:78:3c:78:2b:04:
97:9a:d8:06:c9:5f:13:99:c3:38:a5:52:a7:6b:17:43:75:ce:
ac:d1:39:b7:b3:3b:d5:90:0b:d9:d1:07:55:71:da:fc:9f:fb:
17:80:56:99:23:f4:25:70:06:90:59:c2:ce:26:af:ae:8f:67:
05:ea:54:76:67:93:b3:86:09:6b:8d:25:13:02:55:ab:07:2c:
14:75:5b:5e:f3:5b:4d:a3:56:c3:af:03:b3:1a:3a:f0:b6:67:
cd:db:74:3e:c1:f1:18:b6:61:d0:5c:be:46:09:a1:07:c3:28:
87:33:7a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client