
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35362e302f32332d3233203d3e20313430373136.roa
File: 3132302e37322e35362e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier: TeKZdABapRocayIDQeBqE4EhCkTcYkin+U1EFvnqHdg=
Subject key identifier: 3D:78:13:52:C1:F3:F5:90:55:87:C7:5E:47:F2:6F:47:3B:8E:E3:D9
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 1A67D687F052B523E95769D83A1B71E8266A0F6A
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35362e302f32332d3233203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:56:46 +0000
ROA not before: Wed 03 Jun 2026 06:51:46 +0000
ROA not after: Wed 02 Jun 2027 06:56:46 +0000
asID: 140716
IP address blocks: 120.72.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:67:d6:87:f0:52:b5:23:e9:57:69:d8:3a:1b:71:e8:26:6a:0f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:51:46 2026 GMT
Not After : Jun 2 06:56:46 2027 GMT
Subject: CN=3D781352C1F3F5905587C75E47F26F473B8EE3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:08:83:ba:06:45:3d:36:e0:88:36:9a:13:
be:f3:6a:d1:db:f0:f7:ac:91:b7:fd:a7:4d:2e:4d:
44:94:f2:b7:01:25:5f:22:c7:73:dc:95:b1:fe:96:
05:8a:51:8d:39:b2:3e:dc:02:60:15:37:af:08:2c:
46:5f:ff:2a:f3:68:59:cb:d7:b0:f6:d4:0d:f9:3a:
3e:90:0c:f2:b9:a2:f5:6f:fb:65:f0:10:93:3f:aa:
02:3e:73:c4:27:22:81:2d:1e:26:0a:40:09:30:7c:
97:38:62:43:ff:1d:df:f6:33:af:99:cf:53:8e:a6:
f8:1b:0e:fa:46:f5:2f:4a:17:8a:96:4a:0e:f1:9e:
de:fc:f4:a2:71:40:cd:9b:95:fd:89:02:c0:1f:65:
ca:0e:fd:91:35:f3:05:ec:6d:28:7e:4d:7b:8e:f7:
bc:bb:27:f0:8c:4e:1f:12:42:3e:56:47:9a:fa:23:
e3:bf:67:01:48:ad:95:67:e3:a6:a4:8a:b6:16:e5:
d6:97:ab:59:b4:c2:2f:10:53:78:7a:dc:ec:fd:91:
da:47:9a:b8:a6:44:39:1c:b7:92:37:62:80:a7:40:
31:b9:99:50:45:15:98:05:a4:a3:85:6b:8f:78:e8:
37:43:fd:c5:0f:79:d4:5a:82:48:ba:44:cc:ba:55:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:13:52:C1:F3:F5:90:55:87:C7:5E:47:F2:6F:47:3B:8E:E3:D9
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35362e302f32332d3233203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.72.56.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:a3:c4:c5:c4:48:31:7d:cd:a0:18:69:5a:ce:cc:65:fe:f8:
a1:01:4a:2b:5e:25:51:1a:90:c5:3c:f3:2e:3b:c6:37:ba:b6:
0c:df:df:be:e4:54:d6:c1:47:aa:43:7f:0c:0f:9d:24:e7:b0:
c0:9c:b3:f4:c5:0a:33:be:38:d8:9e:fa:a9:9c:33:c1:70:42:
67:8e:2d:9f:4f:f6:e5:e8:c0:92:a8:f3:b2:b3:d1:c3:d2:b8:
77:a9:69:33:5d:12:a4:e4:44:85:dd:f7:9c:60:c9:14:f2:fe:
a0:77:2c:dc:0a:98:6b:d8:d6:d8:84:1d:18:14:8f:7f:79:86:
66:2b:05:ec:95:a2:0d:94:90:c5:e7:24:43:98:08:54:f9:42:
e1:d6:b1:89:34:8e:37:19:63:05:65:5e:a9:9a:aa:80:ba:0e:
e4:22:cb:06:68:a5:1b:17:8d:cb:cf:81:c7:98:c0:8c:16:f5:
61:5a:89:91:91:c2:b7:8b:0b:51:40:96:e4:bc:24:ec:03:dc:
52:a2:6b:07:1d:5d:4c:86:73:a3:78:64:5a:16:02:4d:b4:1e:
e3:21:97:b0:1f:0c:7f:fd:04:c5:2e:d7:ee:fe:da:12:9d:10:
a6:ca:2e:f2:b4:1a:e5:ed:35:b1:5e:1f:19:9c:88:b7:47:fb:
45:23:18:bc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGmfWh/BStSPpV2nYOhtx6CZqD2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjUxNDZaFw0yNzA2MDIwNjU2NDZaMDMxMTAvBgNV
BAMTKDNENzgxMzUyQzFGM0Y1OTA1NTg3Qzc1RTQ3RjI2RjQ3M0I4RUUzRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerQiDugZFPTbgiDaaE77zatHb
8Peskbf9p00uTUSU8rcBJV8ix3PclbH+lgWKUY05sj7cAmAVN68ILEZf/yrzaFnL
17D21A35Oj6QDPK5ovVv+2XwEJM/qgI+c8QnIoEtHiYKQAkwfJc4YkP/Hd/2M6+Z
z1OOpvgbDvpG9S9KF4qWSg7xnt789KJxQM2blf2JAsAfZcoO/ZE18wXsbSh+TXuO
97y7J/CMTh8SQj5WR5r6I+O/ZwFIrZVn46akirYW5daXq1m0wi8QU3h63Oz9kdpH
mrimRDkct5I3YoCnQDG5mVBFFZgFpKOFa4946DdD/cUPedRagki6RMy6VQ79AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUPXgTUsHz9ZBVh8deR/JvRzuO49kwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzMxMzIzMDJlMzcz
MjJlMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzMDM3MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAXhIODANBgkqhkiG9w0BAQsFAAOCAQEAH6PExcRIMX3NoBhpWs7MZf74
oQFKK14lURqQxTzzLjvGN7q2DN/fvuRU1sFHqkN/DA+dJOewwJyz9MUKM7442J76
qZwzwXBCZ44tn0/25ejAkqjzsrPRw9K4d6lpM10SpOREhd33nGDJFPL+oHcs3AqY
a9jW2IQdGBSPf3mGZisF7JWiDZSQxeckQ5gIVPlC4daxiTSONxljBWVeqZqqgLoO
5CLLBmilGxeNy8+Bx5jAjBb1YVqJkZHCt4sLUUCW5Lwk7APcUqJrBx1dTIZzo3hk
WhYCTbQe4yGXsB8Mf/0ExS7X7v7aEp0Qpsou8rQa5e01sV4fGZyIt0f7RSMYvA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:27 2026 by rpki-client