
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3235342e302f32332d3233203d3e20313430373136.roa
File: 3131342e36362e3235342e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier: LEC4X+Ohu5qhbtzzohxLmJr/1v/DGtkNkvuwABE69Qk=
Subject key identifier: 9A:FA:DD:6E:6E:37:43:A1:22:F8:01:94:FA:E9:D3:D1:1E:45:2A:B4
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 4F39DA6D16255089E2708CC425543B87B01BBFAD
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3235342e302f32332d3233203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:38:46 +0000
ROA not before: Wed 03 Jun 2026 06:33:46 +0000
ROA not after: Wed 02 Jun 2027 06:38:46 +0000
asID: 140716
IP address blocks: 114.66.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:39:da:6d:16:25:50:89:e2:70:8c:c4:25:54:3b:87:b0:1b:bf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:33:46 2026 GMT
Not After : Jun 2 06:38:46 2027 GMT
Subject: CN=9AFADD6E6E3743A122F80194FAE9D3D11E452AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:b9:b6:91:f6:20:9a:fd:12:f1:67:d8:91:
6c:68:71:40:52:10:de:0c:b5:b7:73:22:0f:d6:ce:
ca:2f:06:a0:30:31:dd:6a:33:6d:62:1a:d3:81:88:
20:fa:2d:fb:4e:52:2a:3c:45:ca:61:c0:98:4b:29:
4f:fe:8a:b9:6f:c7:2e:fb:1d:cb:07:c3:cb:b5:06:
7c:9e:e2:27:2d:2e:7a:f2:d9:19:68:81:c9:5c:7a:
53:8f:8e:56:03:f2:a8:ce:e6:53:b6:99:1e:21:03:
41:21:f2:9a:93:87:b3:8e:9c:f7:9c:f4:60:72:15:
8c:ff:2e:99:00:42:7a:b4:46:e6:7f:4f:1e:49:6e:
fc:ec:21:ac:7e:9e:87:68:26:36:52:d7:f5:34:54:
bd:f2:3a:bc:13:64:2f:a4:f2:cc:09:ed:6b:24:d4:
98:b8:67:ed:26:fb:a4:2d:53:d8:5e:ed:67:6a:c8:
87:e2:05:a8:86:a2:fa:86:80:fc:7f:38:53:78:89:
76:d2:01:c2:89:ae:d7:a4:d6:7c:10:71:bb:f5:11:
20:4f:b8:d8:e7:36:17:62:8f:f6:e6:07:40:0b:15:
0f:2a:ed:f8:11:00:54:5a:21:d0:e6:96:a4:02:d4:
8e:83:2e:1b:f6:44:b0:a5:1d:85:79:1a:bb:81:b9:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:DD:6E:6E:37:43:A1:22:F8:01:94:FA:E9:D3:D1:1E:45:2A:B4
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3131342e36362e3235342e302f32332d3233203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.66.254.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:67:ef:58:91:d2:26:e1:18:1a:5e:24:01:37:2b:7b:d5:ca:
6b:c1:de:4a:ec:fd:e8:34:16:2b:12:70:41:03:cd:ac:e8:e3:
a4:79:4a:b1:e0:63:d5:32:ad:c7:f0:eb:f7:57:40:fb:92:2a:
00:ce:78:84:57:41:7b:b9:0c:67:de:d9:fe:b4:3a:f8:75:20:
ca:bc:f0:15:03:66:de:63:9c:18:cf:17:77:5f:d4:0d:f8:54:
b5:b9:77:61:eb:e0:59:fd:6c:20:ed:ec:d2:97:29:af:81:17:
52:d9:44:1a:78:d6:6d:c6:2b:e9:db:31:29:b6:e2:7c:a3:ef:
ed:a7:11:6a:02:e0:c7:33:1d:af:b0:8e:8a:c8:8a:84:38:38:
0c:46:52:cd:6f:9b:15:9a:1f:a6:c0:17:58:e9:cf:ec:c3:8d:
76:d1:42:d7:d1:3d:63:00:97:98:98:c2:ce:38:c2:ee:86:35:
b4:fa:5b:61:9f:2e:f9:77:83:54:05:90:79:3d:9a:fc:80:29:
d7:d8:9f:5e:df:aa:d0:5b:6c:77:c6:ee:da:5f:e7:08:e7:99:
84:98:eb:72:d2:bc:0f:a8:aa:83:82:fb:08:d3:76:5c:be:c5:
60:f1:11:e9:ad:a0:68:04:75:ea:4b:a5:48:39:9e:bf:da:ee:
76:46:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:04 2026 by rpki-client