
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31362e302f32332d3233203d3e20313430373136.roa
File: 3231382e39382e31362e302f32332d3233203d3e20313430373136.roa (raw, json)
Hash identifier: m6G6wL+pHGqobwybVJWJ6SRfRdvUJohx/OSjdwFrgzw=
Subject key identifier: 2A:7C:9D:F8:4E:A9:21:17:A1:C8:80:E7:E9:82:68:B9:56:06:41:CE
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 5A67F5792639823BC43C038DFE01A965AFC35B01
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31362e302f32332d3233203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 07:29:39 +0000
ROA not before: Wed 03 Jun 2026 07:24:39 +0000
ROA not after: Wed 02 Jun 2027 07:29:39 +0000
asID: 140716
IP address blocks: 218.98.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:67:f5:79:26:39:82:3b:c4:3c:03:8d:fe:01:a9:65:af:c3:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 07:24:39 2026 GMT
Not After : Jun 2 07:29:39 2027 GMT
Subject: CN=2A7C9DF84EA92117A1C880E7E98268B9560641CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:be:22:46:20:21:77:34:83:6d:0e:0d:ec:
b8:d4:92:6f:b1:bf:38:62:c3:c5:ff:c5:3e:1f:bf:
d3:26:e4:02:50:83:d5:64:1b:bc:cf:f1:ae:e9:14:
8c:e6:d8:29:34:d1:91:a4:d5:8a:0b:bc:c8:6d:77:
48:12:cc:c6:6f:2d:48:59:4e:f1:28:a6:f8:7b:fd:
70:2d:78:e9:72:57:c9:05:40:e5:83:d6:96:7e:64:
90:9b:68:3e:bc:2f:a3:61:ba:8f:1b:41:07:aa:a0:
13:f1:71:46:88:36:e1:4c:cd:e2:c8:f0:8c:9c:51:
f5:c9:3e:9f:20:d8:4d:62:9d:0f:2b:5a:7d:59:65:
ba:56:bd:9f:81:b2:db:f3:cc:ee:7c:f9:53:71:c7:
cc:66:c0:c3:f4:3d:23:6a:66:25:a4:0d:8c:d7:0f:
16:f0:95:ff:a5:85:93:6a:98:67:c4:a6:e1:7e:fd:
29:af:f8:45:94:89:d9:b7:1b:4f:8a:b2:1f:99:80:
34:05:f0:97:d7:67:20:8f:d4:bf:25:14:a3:f4:4a:
d3:b8:c8:d7:c2:e7:86:da:ad:b3:46:e3:50:3b:94:
69:9e:d2:a8:9b:b1:31:70:e2:6b:3e:da:4e:3d:17:
20:dc:21:20:bc:1b:e2:ae:45:77:19:f4:8c:72:3c:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:9D:F8:4E:A9:21:17:A1:C8:80:E7:E9:82:68:B9:56:06:41:CE
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31362e302f32332d3233203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.16.0/23
Signature Algorithm: sha256WithRSAEncryption
29:ce:bd:c9:0f:91:1a:d5:66:6f:2f:15:22:64:04:22:bf:de:
e7:95:fe:79:66:96:56:2d:29:2f:b4:4c:f0:e5:a5:dc:7a:32:
8e:98:c1:dd:d1:66:cd:68:6b:fb:fc:07:61:32:d2:80:36:d1:
13:f8:f4:bb:9b:7a:9d:b1:27:42:07:64:fd:7b:58:71:8d:a6:
98:d9:3a:f5:64:a7:7c:0f:40:4f:4e:07:36:62:19:7b:2a:f7:
e2:e9:98:4d:aa:c3:54:e3:76:61:d8:ee:7f:4b:70:4a:24:0f:
64:bf:0d:58:c2:57:66:00:9b:0b:87:ea:57:2a:ce:d3:c0:f0:
37:e8:1b:55:4e:d4:7f:86:fa:1c:dd:ad:49:08:3a:c4:2f:35:
ba:c6:2d:bd:7f:49:39:10:69:09:2c:2f:e7:10:eb:cc:56:41:
eb:cb:21:8d:95:45:51:39:a4:4d:35:63:f9:d1:f1:9c:fa:61:
e0:fc:e5:fe:14:3c:6b:b0:f4:5b:1a:7d:1c:90:71:ea:3f:ee:
b5:95:dd:eb:f2:72:a9:5e:b7:d9:f4:56:20:9c:ef:44:0f:5a:
05:25:b8:f2:cc:46:3d:ab:8d:b9:43:90:ca:b5:b0:33:0e:22:
ae:9e:7a:36:20:b7:19:a6:c5:98:f4:14:d8:ac:e7:3b:a8:51:
2e:e2:24:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:26 2026 by rpki-client