
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234362e302f32332d3233203d3e20313430373136.roa
File: 3131342e36362e3234362e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier: s2LD+uv7pnnsvSp6kovh95OhPQJuBiOsZKMDoIH+vn8=
Subject key identifier: F6:00:FF:E6:D6:D9:49:31:B0:2E:E2:54:91:86:CF:69:6C:5D:02:E4
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 6B43BEBD7243A2736D96CB72E3808D7BACCD4979
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234362e302f32332d3233203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:38:46 +0000
ROA not before: Wed 03 Jun 2026 06:33:46 +0000
ROA not after: Wed 02 Jun 2027 06:38:46 +0000
asID: 140716
IP address blocks: 114.66.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:43:be:bd:72:43:a2:73:6d:96:cb:72:e3:80:8d:7b:ac:cd:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:33:46 2026 GMT
Not After : Jun 2 06:38:46 2027 GMT
Subject: CN=F600FFE6D6D94931B02EE2549186CF696C5D02E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:af:8c:9b:23:ac:1c:d5:58:76:42:04:f6:
37:fa:70:71:7f:30:73:7c:bb:8a:4e:55:e1:d0:a9:
de:63:01:0e:b8:2e:ee:d8:3a:57:2b:93:d1:ed:e4:
ec:e5:4e:1c:3e:6e:72:b5:89:e4:72:95:84:97:1c:
a5:70:bd:72:6f:5f:36:d5:99:e6:62:e3:33:b6:de:
4f:ba:4e:0c:14:a8:1a:d2:60:26:d3:5b:35:5b:84:
5d:56:c0:53:32:cf:66:5c:6a:77:34:0f:37:6f:0a:
67:80:57:0e:2c:ea:5e:57:23:50:59:6d:cc:99:30:
fa:7e:4e:28:b6:6e:ce:b1:93:5e:05:65:0d:a4:1b:
e1:26:57:74:cc:dd:61:9f:a4:e5:7d:1e:17:93:ed:
65:3e:d7:bf:e4:cb:86:e2:29:b8:eb:04:79:0b:cb:
d5:74:76:3a:1e:17:3b:cb:2f:a2:a7:76:7b:18:4e:
9d:2f:79:a7:7a:72:fc:22:ed:42:19:a4:39:2b:66:
ca:ca:26:0e:12:ec:01:a5:b6:fc:b6:6c:4d:67:36:
35:3f:d6:fe:42:e9:db:84:7e:d4:8f:b7:00:d5:5d:
72:f5:50:02:4b:7c:ec:72:df:2f:7e:69:0e:e1:d9:
f6:d9:d9:ef:63:ac:7e:52:bd:cc:11:59:45:83:03:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:FF:E6:D6:D9:49:31:B0:2E:E2:54:91:86:CF:69:6C:5D:02:E4
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3234362e302f32332d3233203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.66.246.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:cc:0b:0c:95:1e:8c:21:5f:58:1b:45:64:57:50:ee:c4:54:
07:ae:29:f3:cc:a0:bf:16:97:8b:b3:07:39:77:37:b0:9c:02:
8d:64:8b:29:73:62:4b:57:57:39:70:0a:71:99:97:00:74:d7:
e8:ed:94:52:e5:5a:05:02:cf:fa:b0:d1:1d:70:a9:62:4d:3a:
2f:ba:c8:1a:1f:ea:f4:b1:ed:8c:de:88:d3:6a:0a:fd:24:16:
d8:1f:10:2a:3e:73:a1:b6:3b:50:cc:57:56:64:7e:39:9c:4a:
4c:e6:d6:62:47:a1:da:b7:58:fc:94:b3:19:12:84:52:a5:cc:
bd:d6:b3:6c:d2:dc:77:09:22:6c:7d:7a:2b:a7:82:67:de:28:
a4:6a:e9:dc:b6:a6:47:b8:39:d8:1c:af:47:9e:38:67:5a:9e:
ed:60:c1:29:84:00:b4:db:7d:fd:ee:5d:9d:c6:eb:08:78:ab:
25:9b:6c:e9:ab:ae:69:c2:fb:52:db:0f:87:b3:d8:dc:97:bc:
0c:0b:2f:bd:5c:5a:6c:66:c3:7c:19:83:8d:5f:d9:41:8e:5e:
de:57:cb:ac:06:da:40:98:25:4a:a3:3d:52:ee:2e:20:bb:79:
73:1a:df:b6:14:56:52:fb:89:14:89:4d:0a:bf:08:29:73:f6:
c3:3a:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client