
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3138322e35302e382e302f32312d3231203d3e2034383337.roa
File: 3138322e35302e382e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier: 7Y90AdFkd0go/NEpv7uz0IuCuiF36eds4f5cN2znNHk=
Subject key identifier: 2A:59:D7:80:C1:B7:24:96:77:51:C4:93:76:4D:5D:19:BD:29:03:32
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 264D3E8134F101AC2152073354A645565A317199
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3138322e35302e382e302f32312d3231203d3e2034383337.roa
Signing time: Wed 03 Jun 2026 07:30:33 +0000
ROA not before: Wed 03 Jun 2026 07:25:33 +0000
ROA not after: Wed 02 Jun 2027 07:30:33 +0000
asID: 4837
IP address blocks: 182.50.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4d:3e:81:34:f1:01:ac:21:52:07:33:54:a6:45:56:5a:31:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 07:25:33 2026 GMT
Not After : Jun 2 07:30:33 2027 GMT
Subject: CN=2A59D780C1B724967751C493764D5D19BD290332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:5b:b5:86:e8:27:27:15:6c:a2:c0:18:17:
51:6c:bf:e5:1c:19:8e:69:c4:37:14:93:8e:61:06:
78:b3:21:4f:f9:44:ac:80:2d:63:2e:b8:71:ed:83:
ee:32:44:4b:82:10:72:a5:4c:8d:fa:7f:e5:23:92:
b1:4b:ac:4f:5f:12:13:54:4e:9e:7e:b2:d7:17:89:
72:09:07:c0:b7:27:47:7c:9c:0a:38:f2:0b:1f:dc:
2b:ca:bd:d5:56:a0:b2:fd:54:04:c8:db:ee:57:3c:
68:e7:4b:57:60:f4:7b:3d:a1:63:b7:df:b2:91:03:
6b:01:58:5f:3e:ed:0a:64:ee:03:41:c6:45:38:f0:
ec:52:0a:fd:e7:f4:51:74:89:60:09:43:d9:45:e3:
67:f7:f3:d8:1c:c2:ce:1c:10:bf:98:1f:4d:a3:d1:
87:0c:7b:e3:23:2a:39:7a:1e:0a:98:58:f5:a8:c7:
d3:34:8c:04:dc:b1:d8:c9:7f:27:bf:d2:f2:af:00:
c2:b2:95:55:c6:6b:ab:c1:86:8d:8e:fa:39:13:d5:
00:0d:73:8a:17:3f:f3:7e:e1:ef:4d:0c:20:a0:bd:
5c:fe:e9:9f:34:e2:22:77:4a:ef:7b:50:4d:d9:63:
00:48:40:a0:06:c2:f9:7c:c1:47:07:0a:0c:52:d5:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:D7:80:C1:B7:24:96:77:51:C4:93:76:4D:5D:19:BD:29:03:32
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3138322e35302e382e302f32312d3231203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.50.8.0/21
Signature Algorithm: sha256WithRSAEncryption
68:c0:be:8a:9a:3e:dc:6a:9f:20:db:bd:31:6a:0f:40:35:c1:
8c:db:b3:d3:ec:cd:a7:7e:57:0e:0b:63:77:a3:fc:96:46:95:
70:08:4b:37:92:c7:51:cf:d1:fd:30:b7:68:da:20:84:19:8f:
47:23:1b:27:3e:5a:e3:c2:65:fc:2b:1c:44:74:73:39:13:0a:
4f:1c:2b:49:96:30:19:14:05:f6:a8:f0:e3:ed:ff:78:e9:06:
a4:e2:07:11:8e:3e:61:b2:a6:61:d8:e6:55:21:80:c2:b0:8c:
26:06:ae:be:75:5a:78:8a:0f:ac:34:c4:f5:d0:44:f2:84:45:
ec:c3:55:b9:7e:31:58:07:93:42:6f:84:74:5e:54:81:01:e5:
9b:78:36:21:87:50:60:4d:46:cb:70:3d:a4:54:6d:85:1c:94:
11:94:78:e1:4f:e2:4e:f2:ca:b3:b8:e3:29:68:c3:b2:8f:02:
68:94:34:00:22:09:62:ac:84:76:9f:a7:28:83:d8:5e:2a:f3:
bb:41:62:0d:18:aa:6a:b2:25:f3:44:0a:3c:61:e2:88:19:d8:
64:f7:6a:cc:57:86:0e:7a:6c:72:3c:c7:d4:44:94:16:50:07:
85:e2:98:f2:fe:58:be:24:4b:c6:8a:76:b1:e0:ac:a3:a5:5d:
4f:d5:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:39 2026 by rpki-client