
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e34342e302f32342d3234203d3e20313430373137.roa
File: 3132302e37322e34342e302f32342d3234203d3e20313430373137.roa (raw, json)
Hash identifier: JuaZK9+sdJXN1ptBOPT+Mu7j5zGd7scqGqXJZqbm3CI=
Subject key identifier: 0D:E1:4F:A4:F6:3A:20:08:83:AF:2B:74:75:9E:2F:00:7C:08:FD:F7
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 2BAF870DE200ABC35A990EB300EC590EA44D9B1B
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e34342e302f32342d3234203d3e20313430373137.roa
Signing time: Wed 03 Jun 2026 06:56:45 +0000
ROA not before: Wed 03 Jun 2026 06:51:45 +0000
ROA not after: Wed 02 Jun 2027 06:56:45 +0000
asID: 140717
IP address blocks: 120.72.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:af:87:0d:e2:00:ab:c3:5a:99:0e:b3:00:ec:59:0e:a4:4d:9b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:51:45 2026 GMT
Not After : Jun 2 06:56:45 2027 GMT
Subject: CN=0DE14FA4F63A200883AF2B74759E2F007C08FDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:2d:ba:33:36:b2:29:54:69:a9:a4:ab:6b:
9c:5a:fc:d2:b8:e2:7c:9f:a9:63:e8:f2:02:76:b2:
a1:8a:6d:45:88:3e:ad:65:3c:87:d7:c8:0c:d7:15:
ca:fc:6c:dd:d1:cd:80:62:95:4b:74:b9:e7:58:3d:
d3:37:4d:80:db:cd:4b:80:dd:94:f9:6d:9b:a8:6a:
b9:2d:16:e9:1c:2e:2b:4b:23:fe:fa:b8:a3:69:0d:
52:9e:e5:35:49:eb:57:d7:1f:81:66:99:e9:1b:d2:
9b:59:c9:a7:fd:77:2a:0d:30:d8:52:97:d7:22:a9:
0f:8c:91:84:b0:fe:59:3f:67:42:52:8e:60:ad:e6:
55:8e:85:e0:13:0d:ba:b1:7b:e5:ec:97:33:09:66:
7a:5f:b9:14:9f:d5:3d:92:06:e6:86:9c:94:ea:71:
db:53:52:2a:5a:40:f7:59:eb:59:86:89:81:6d:fd:
9e:0f:21:e5:f8:1d:f6:7d:6f:44:20:1e:74:82:5c:
eb:ef:9b:cb:7c:f6:1f:8c:8f:e8:07:82:54:b6:18:
a5:3c:b5:d8:dc:8c:dd:75:22:29:2f:10:63:bc:e0:
7e:fa:d1:a6:4a:da:52:b5:4e:48:b0:93:73:a8:ca:
6b:bd:c7:38:c6:69:21:ab:37:33:2e:54:1b:df:a2:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:4F:A4:F6:3A:20:08:83:AF:2B:74:75:9E:2F:00:7C:08:FD:F7
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e34342e302f32342d3234203d3e20313430373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.72.44.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:58:2f:e9:c6:a6:4f:53:c3:d2:51:1b:c1:68:6f:e1:3e:82:
9a:28:c2:1e:79:5d:01:31:95:ca:07:88:9c:ca:50:8b:c2:b2:
28:b9:9e:a7:f3:0c:b3:ed:e3:e6:dd:af:0c:77:ba:e6:ad:56:
cc:55:39:66:a8:a5:00:3b:48:0d:36:ed:9d:5f:59:54:cb:c7:
b6:8d:59:5d:ba:72:5a:46:d6:42:43:7c:29:30:3b:8a:50:67:
a1:04:96:06:fe:95:4a:b1:7d:c0:03:08:ae:e5:8d:f2:d7:eb:
4f:12:7a:e7:fa:a0:dc:6e:59:14:91:9c:44:26:e1:ca:38:66:
ab:34:82:27:0c:8b:4a:e7:69:bd:d2:3b:75:0c:31:c3:72:0b:
33:0b:cf:05:a3:38:99:de:83:4c:f6:fc:b6:af:58:12:15:ed:
55:3b:10:ba:13:7f:fe:f7:8f:da:aa:b3:23:a5:d0:27:62:74:
af:58:55:8f:86:6d:a0:eb:08:a5:79:fc:fe:b8:2c:72:71:71:
67:63:5b:d7:49:2e:38:52:3f:6d:9b:f4:ca:86:37:09:9c:d8:
95:b1:a7:ed:31:4e:0d:19:7a:ee:41:64:0e:2f:50:e3:a6:e3:
03:3c:a5:14:d2:bc:c0:57:6e:f7:15:21:4c:36:50:89:6e:36:
5b:2b:30:79
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUK6+HDeIAq8NamQ6zAOxZDqRNmxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjUxNDVaFw0yNzA2MDIwNjU2NDVaMDMxMTAvBgNV
BAMTKDBERTE0RkE0RjYzQTIwMDg4M0FGMkI3NDc1OUUyRjAwN0MwOEZERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAy26MzayKVRpqaSra5xa/NK4
4nyfqWPo8gJ2sqGKbUWIPq1lPIfXyAzXFcr8bN3RzYBilUt0uedYPdM3TYDbzUuA
3ZT5bZuoarktFukcLitLI/76uKNpDVKe5TVJ61fXH4Fmmekb0ptZyaf9dyoNMNhS
l9ciqQ+MkYSw/lk/Z0JSjmCt5lWOheATDbqxe+XslzMJZnpfuRSf1T2SBuaGnJTq
cdtTUipaQPdZ61mGiYFt/Z4PIeX4HfZ9b0QgHnSCXOvvm8t89h+Mj+gHglS2GKU8
tdjcjN11IikvEGO84H760aZK2lK1Tkiwk3Ooymu9xzjGaSGrNzMuVBvfogiFAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUDeFPpPY6IAiDryt0dZ4vAHwI/fcwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzMxMzIzMDJlMzcz
MjJlMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM3MzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHhILDANBgkqhkiG9w0BAQsFAAOCAQEAy1gv6camT1PD0lEbwWhv4T6C
mijCHnldATGVygeInMpQi8KyKLmep/MMs+3j5t2vDHe65q1WzFU5ZqilADtIDTbt
nV9ZVMvHto1ZXbpyWkbWQkN8KTA7ilBnoQSWBv6VSrF9wAMIruWN8tfrTxJ65/qg
3G5ZFJGcRCbhyjhmqzSCJwyLSudpvdI7dQwxw3ILMwvPBaM4md6DTPb8tq9YEhXt
VTsQuhN//veP2qqzI6XQJ2J0r1hVj4ZtoOsIpXn8/rgscnFxZ2Nb10kuOFI/bZv0
yoY3CZzYlbGn7TFODRl67kFkDi9Q46bjAzylFNK8wFdu9xUhTDZQiW42WysweQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:59 2026 by rpki-client