
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35382e302f32332d3233203d3e20313430373137.roa
File: 3132302e37322e35382e302f32332d3233203d3e20313430373137.roa (raw, json)
Hash identifier: liu9LMzpMSuCXCg0dnDc2l/DD4ujE58PrMXp8kBcSZQ=
Subject key identifier: 08:41:10:06:B0:69:DD:AD:0C:E8:B8:F6:F5:95:8F:88:2E:07:D8:47
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 247959E7EA4EA25FB6AEFC03A6F7DD4CAC84F39F
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35382e302f32332d3233203d3e20313430373137.roa
Signing time: Wed 03 Jun 2026 06:56:46 +0000
ROA not before: Wed 03 Jun 2026 06:51:46 +0000
ROA not after: Wed 02 Jun 2027 06:56:46 +0000
asID: 140717
IP address blocks: 120.72.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:79:59:e7:ea:4e:a2:5f:b6:ae:fc:03:a6:f7:dd:4c:ac:84:f3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:51:46 2026 GMT
Not After : Jun 2 06:56:46 2027 GMT
Subject: CN=08411006B069DDAD0CE8B8F6F5958F882E07D847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:55:1c:8d:74:dc:62:e2:a0:10:df:5e:be:
3c:92:69:34:ec:9e:d9:ea:05:c6:a5:46:1e:61:c1:
3f:f2:0e:da:00:63:a1:6e:5b:24:e7:69:95:f2:cc:
bb:7f:b3:01:c6:7b:0b:fa:49:48:6a:7a:48:10:88:
5d:e8:60:a9:61:ba:e2:1f:27:0d:a8:18:85:a9:31:
d9:a0:3e:42:e8:87:8b:f7:9e:a8:fa:d9:09:38:1f:
7e:3c:c0:5b:7c:7d:6f:9b:e1:32:7d:a0:42:2b:90:
b8:a3:61:8a:a4:22:f6:dd:b2:04:17:a3:14:af:07:
bb:03:9f:b7:61:d5:f6:72:3f:6e:c6:a8:cc:d8:80:
e7:d8:89:16:90:69:96:c3:07:58:48:5e:95:20:8a:
96:cb:d1:c7:6c:5c:04:4c:af:e5:a0:d9:ef:51:9d:
98:b7:ad:d2:34:70:03:72:fe:dc:08:40:bb:ea:62:
81:57:4d:3a:a6:07:43:fc:5f:91:bb:14:ce:f7:77:
eb:d2:ba:36:92:1a:6d:c9:7f:79:11:2d:28:f2:8f:
32:9d:4a:b3:4d:46:a4:0e:58:1d:b2:c4:85:cc:bd:
c4:47:b7:3c:1c:82:8c:52:65:16:52:71:92:2e:38:
19:1f:71:f2:40:c9:8f:4d:6e:c9:50:62:35:20:7b:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:10:06:B0:69:DD:AD:0C:E8:B8:F6:F5:95:8F:88:2E:07:D8:47
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35382e302f32332d3233203d3e20313430373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.72.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:c7:19:4a:46:cf:e6:06:ee:6e:de:58:f1:d6:47:05:ce:6c:
32:18:b3:0f:e9:dc:7e:35:cf:2f:36:75:0d:99:9c:11:81:71:
1a:55:1d:7a:e1:68:97:9c:e5:6b:b3:ca:1b:7e:cb:69:1f:f8:
92:54:b3:ea:08:af:1e:13:20:ca:cd:c5:a6:66:2d:18:16:be:
af:81:68:47:6a:79:e3:b5:e0:de:2b:d0:fa:9b:3f:b6:2c:2f:
3e:79:84:35:99:2e:ef:a2:0e:20:e4:b2:3b:be:16:1b:03:84:
12:7d:09:96:c0:35:81:8f:2f:b1:23:06:ad:ed:d5:e9:92:bf:
63:8c:c0:29:0d:24:0c:29:9b:2c:cb:ec:57:73:20:9c:13:ca:
bc:33:14:a0:d2:e6:34:7b:80:80:d1:7c:d6:50:e3:13:9b:40:
97:3f:59:48:49:9c:07:2a:1e:20:54:3f:00:a6:fe:d5:9e:5d:
69:b6:d9:e0:b0:eb:e5:46:35:89:2f:d9:6c:c4:94:da:2c:7f:
d4:af:21:24:a4:10:0d:a7:0f:4c:c6:0c:13:9f:75:5f:8d:a3:
ad:19:05:ea:7c:a8:d9:33:2d:f4:d2:6e:a1:42:1d:e4:ad:7a:
83:08:b1:2c:dd:40:b1:a7:55:63:d6:bf:73:60:59:a3:b2:f0:
53:94:f1:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:26 2026 by rpki-client