
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33382e302f32342d3234203d3e20313430373136.roa
File: 3132302e37322e33382e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier: xUJjyLiVwYMTllBBXwbxP8aO0FuAk2lA+KuXCy646dU=
Subject key identifier: 37:55:89:8B:17:76:51:12:73:66:B0:58:2C:04:22:AE:F5:27:D0:2B
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 69AD6CBC28C6C53F1375E0265B4EACB2C7AB20E2
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33382e302f32342d3234203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:56:46 +0000
ROA not before: Wed 03 Jun 2026 06:51:46 +0000
ROA not after: Wed 02 Jun 2027 06:56:46 +0000
asID: 140716
IP address blocks: 120.72.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ad:6c:bc:28:c6:c5:3f:13:75:e0:26:5b:4e:ac:b2:c7:ab:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:51:46 2026 GMT
Not After : Jun 2 06:56:46 2027 GMT
Subject: CN=3755898B177651127366B0582C0422AEF527D02B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:ae:7e:3f:1d:77:e5:5a:c6:a5:ee:4b:bb:
69:0b:94:2a:ae:32:83:e3:f7:1b:b9:6e:20:37:93:
4c:cd:bb:74:1a:1e:27:44:b5:cd:6c:f9:af:a9:2c:
af:0d:f5:17:1f:e4:04:8d:22:f8:8f:5d:7a:04:d6:
ad:9e:57:cf:0d:8d:66:2c:9b:46:9d:dc:49:e4:32:
37:d7:d7:5b:59:44:7e:a0:76:16:80:0a:7c:4c:6e:
41:19:1b:0b:af:b1:7a:1f:68:1c:42:01:15:ae:b1:
6e:c5:ea:90:e8:d8:69:7e:2c:34:9a:48:32:77:81:
ad:04:cc:7d:20:ca:e8:98:23:18:43:83:1f:36:0d:
dc:47:94:c6:fe:91:0d:90:f7:c4:c8:ec:19:ee:11:
a0:84:fa:c1:d9:15:35:cc:da:e3:30:e1:bb:2e:55:
08:4c:a0:05:bf:8c:83:1d:cc:47:83:e8:2d:47:4e:
b1:c0:39:03:45:e8:7a:aa:f8:d0:30:d9:c9:97:18:
91:46:85:9d:c9:57:d4:59:8b:e6:82:65:35:98:c3:
86:56:11:84:ef:32:7f:f2:75:85:43:d5:c6:2a:d3:
85:94:a1:6e:97:c5:3a:62:fd:fe:36:3c:4b:7e:3c:
13:50:69:9f:0d:a5:f1:a5:8a:f1:ad:5a:26:6c:04:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:89:8B:17:76:51:12:73:66:B0:58:2C:04:22:AE:F5:27:D0:2B
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33382e302f32342d3234203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.72.38.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5e:5d:55:43:c8:de:13:f6:b4:07:ad:42:f8:cd:f5:a5:1d:
96:f3:63:21:9c:94:9e:db:2c:f4:e3:11:c7:4c:8c:36:ff:f1:
4c:31:23:be:4a:b9:cc:d0:b5:ed:93:dd:13:60:da:99:2f:15:
25:40:6b:9a:17:fa:bf:94:45:1a:93:92:e9:83:f4:37:fa:b6:
2c:58:ed:3e:e6:97:eb:ba:6e:a5:34:d2:87:40:2d:11:00:4c:
2b:e7:4f:f8:10:2b:3d:3f:35:73:23:b7:0e:6d:d4:16:8f:ac:
80:7c:49:cb:29:4a:3b:85:b8:82:30:2c:6b:c4:12:8c:76:0c:
c2:98:8b:53:37:2b:e2:3f:75:ba:c8:8f:aa:33:86:3a:c1:38:
7e:85:4b:6c:30:30:df:be:10:0f:e6:ae:4e:90:fd:99:6e:ee:
10:82:0c:e5:fb:16:74:95:1e:0f:99:b3:7d:cc:20:08:da:e8:
c7:10:14:d4:e3:d0:a6:a9:f2:04:03:2c:8b:bc:e6:76:03:17:
4c:1a:66:3a:10:87:f3:f8:5d:4c:d7:4b:51:08:05:d6:e2:27:
fd:e9:e7:fa:f3:47:01:65:8b:37:83:73:77:36:cb:4b:e6:c5:
da:c3:5a:31:f9:fb:42:a3:e6:21:df:bb:e0:35:fa:d8:43:05:
75:e9:e5:97
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUaa1svCjGxT8TdeAmW06ssserIOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjUxNDZaFw0yNzA2MDIwNjU2NDZaMDMxMTAvBgNV
BAMTKDM3NTU4OThCMTc3NjUxMTI3MzY2QjA1ODJDMDQyMkFFRjUyN0QwMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpa5+Px135VrGpe5Lu2kLlCqu
MoPj9xu5biA3k0zNu3QaHidEtc1s+a+pLK8N9Rcf5ASNIviPXXoE1q2eV88NjWYs
m0ad3EnkMjfX11tZRH6gdhaACnxMbkEZGwuvsXofaBxCARWusW7F6pDo2Gl+LDSa
SDJ3ga0EzH0gyuiYIxhDgx82DdxHlMb+kQ2Q98TI7BnuEaCE+sHZFTXM2uMw4bsu
VQhMoAW/jIMdzEeD6C1HTrHAOQNF6Hqq+NAw2cmXGJFGhZ3JV9RZi+aCZTWYw4ZW
EYTvMn/ydYVD1cYq04WUoW6XxTpi/f42PEt+PBNQaZ8NpfGlivGtWiZsBCpxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUN1WJixd2URJzZrBYLAQirvUn0CswHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzMxMzIzMDJlMzcz
MjJlMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM3MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHhIJjANBgkqhkiG9w0BAQsFAAOCAQEAgF5dVUPI3hP2tAetQvjN9aUd
lvNjIZyUntss9OMRx0yMNv/xTDEjvkq5zNC17ZPdE2DamS8VJUBrmhf6v5RFGpOS
6YP0N/q2LFjtPuaX67pupTTSh0AtEQBMK+dP+BArPT81cyO3Dm3UFo+sgHxJyylK
O4W4gjAsa8QSjHYMwpiLUzcr4j91usiPqjOGOsE4foVLbDAw374QD+auTpD9mW7u
EIIM5fsWdJUeD5mzfcwgCNroxxAU1OPQpqnyBAMsi7zmdgMXTBpmOhCH8/hdTNdL
UQgF1uIn/enn+vNHAWWLN4NzdzbLS+bF2sNaMfn7QqPmId+74DX62EMFdenllw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:24 2026 by rpki-client