
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e34312e302f32342d3234203d3e20313430373137.roa
File: 3132302e37322e34312e302f32342d3234203d3e20313430373137.roa (raw, json)
Hash identifier: 80WPFCX/0OXsYeb1r8TCa1TMnqlkNzeWgoBQlJyIr1c=
Subject key identifier: 25:25:30:95:32:C7:09:B8:B3:56:67:EA:A3:E9:F6:4B:84:F4:6C:18
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 2F1D431C162AACF77B725DEA9E98CC1F5017F91C
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e34312e302f32342d3234203d3e20313430373137.roa
Signing time: Wed 03 Jun 2026 06:56:45 +0000
ROA not before: Wed 03 Jun 2026 06:51:45 +0000
ROA not after: Wed 02 Jun 2027 06:56:45 +0000
asID: 140717
IP address blocks: 120.72.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1d:43:1c:16:2a:ac:f7:7b:72:5d:ea:9e:98:cc:1f:50:17:f9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:51:45 2026 GMT
Not After : Jun 2 06:56:45 2027 GMT
Subject: CN=2525309532C709B8B35667EAA3E9F64B84F46C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:12:37:91:20:bb:39:17:d3:6b:30:7d:d4:
58:ad:03:f9:8e:8a:e3:13:16:ac:ab:f5:fe:aa:fb:
24:3a:68:15:b2:42:90:33:b3:c2:a9:66:4c:7a:1e:
65:ea:6b:8f:7d:00:52:06:d6:6d:21:e0:04:6b:2d:
5c:56:18:26:a1:88:10:14:4a:ed:72:83:77:68:0f:
6d:65:5b:9f:9e:33:9e:e3:47:7b:34:83:3a:04:77:
97:76:15:16:6c:62:c6:c4:2b:03:a8:cf:01:a1:3a:
5f:d9:db:ab:be:f0:9e:0b:70:9a:22:e1:3f:ef:87:
97:c9:9a:d4:fe:f4:f9:04:ac:44:50:ef:c3:40:5c:
af:60:3f:4e:b1:d0:62:f7:78:79:5c:43:6e:cf:40:
db:42:78:08:bf:7a:b2:c8:37:7b:f3:1e:03:9f:d0:
81:91:8c:66:74:55:e4:2b:db:7a:27:53:88:e2:54:
48:36:93:53:37:3f:1c:0c:d2:9a:1d:16:1b:3b:45:
23:ce:c8:05:c6:14:fe:0c:1b:7d:3f:c9:59:5f:37:
95:04:22:f2:a4:a5:db:3b:87:bf:89:c8:b9:31:8b:
66:03:89:43:85:b1:50:b8:5f:30:05:3e:58:47:72:
6e:ee:a9:6f:b6:81:cd:ed:88:db:78:16:c9:b4:4c:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:30:95:32:C7:09:B8:B3:56:67:EA:A3:E9:F6:4B:84:F4:6C:18
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e34312e302f32342d3234203d3e20313430373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.72.41.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7f:1d:a5:79:88:36:31:13:61:33:d0:2e:8c:fa:0f:2d:d7:
f0:32:d5:13:ba:18:37:96:c5:37:5b:85:aa:df:6a:ee:6a:98:
ee:1e:98:2b:90:ff:1f:8d:e9:fc:1a:04:99:72:25:82:c4:0a:
05:d0:e2:32:58:64:aa:1e:6a:47:2c:fc:8a:1a:e2:e1:22:e7:
aa:5f:a7:ef:a1:98:c4:a6:13:2b:f2:af:4b:2a:5f:99:10:00:
9a:57:21:a8:60:a5:58:fc:a3:ae:a0:6e:0c:d0:17:ba:7d:ed:
e2:ed:9c:14:a8:02:59:ea:e8:9b:bf:8d:8f:08:61:14:9a:56:
dc:21:9f:f7:c4:4b:5b:89:5a:ca:50:ad:4f:98:e6:d7:b7:de:
81:26:18:9a:a8:74:94:3d:66:4c:b6:b7:5e:5b:6a:15:8c:3a:
b3:71:4f:03:8c:ba:e9:e9:26:46:59:e8:f1:b5:68:0e:27:36:
fc:72:ae:bc:f9:16:e0:85:e7:e5:ea:9a:7b:f3:37:b4:e7:22:
db:db:b2:ac:f0:8b:e2:3b:8e:9c:8d:6e:12:92:a5:68:ca:2d:
fd:14:5e:e0:8c:86:ac:31:23:10:a4:46:3c:42:dd:bc:2c:26:
46:8f:56:3d:23:fd:9e:b8:46:a5:64:a4:7b:fd:11:01:ae:f1:
47:dc:35:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:58 2026 by rpki-client