
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31382e302f32342d3234203d3e20313430373136.roa
File: 3231382e39382e31382e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier: YscbMyW19ehNjyIfC6GdVm+il5hF3tLYfq4vzbyAlHw=
Subject key identifier: 4E:E4:B0:A6:D9:C5:B3:A0:0D:D2:7E:2F:77:16:F9:9A:0C:1D:00:C6
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 1E76CE39C3651BC37DF833207DC663262BC18301
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31382e302f32342d3234203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 07:29:39 +0000
ROA not before: Wed 03 Jun 2026 07:24:39 +0000
ROA not after: Wed 02 Jun 2027 07:29:39 +0000
asID: 140716
IP address blocks: 218.98.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:76:ce:39:c3:65:1b:c3:7d:f8:33:20:7d:c6:63:26:2b:c1:83:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 07:24:39 2026 GMT
Not After : Jun 2 07:29:39 2027 GMT
Subject: CN=4EE4B0A6D9C5B3A00DD27E2F7716F99A0C1D00C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:51:39:30:98:ff:74:ba:85:6d:cf:7b:a9:
6c:d7:33:b5:65:8a:1b:8c:77:47:f2:b6:ee:28:72:
30:1f:03:0e:58:b3:6d:e2:fe:f0:aa:a4:95:5b:a2:
f5:e0:7c:c5:a7:61:61:7d:48:65:dd:7f:3b:a7:52:
ff:d7:54:6b:92:e1:1d:f5:da:a0:e4:3e:3d:69:62:
7b:11:8d:91:b5:5b:ab:83:cf:db:e1:93:a4:81:a4:
b6:53:bc:e0:ba:30:03:77:af:0a:d1:3d:bd:e1:94:
ae:55:e9:70:e0:24:98:83:c9:7d:08:19:c2:e4:50:
00:b6:33:2f:a8:d7:77:c4:6b:ef:9d:f5:a4:5c:aa:
93:f3:bd:da:ad:85:e5:6a:b2:22:78:46:06:c1:96:
87:32:0f:8a:ea:b6:da:41:02:73:57:39:9c:b5:a8:
44:a6:9e:a0:2e:aa:cd:c6:75:d7:40:08:45:09:cc:
fc:20:4f:35:e4:5b:4f:de:8f:c2:c3:92:cc:62:e1:
fe:31:da:e0:90:bb:cf:19:09:c3:72:1d:cd:79:54:
af:0e:50:8b:c0:63:9e:0c:6d:98:94:ff:f4:08:42:
43:ad:68:9a:ed:9e:98:d9:7d:de:04:73:4a:b7:21:
cf:0f:9b:75:8c:4e:a9:8a:6a:eb:c8:26:08:5c:1e:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E4:B0:A6:D9:C5:B3:A0:0D:D2:7E:2F:77:16:F9:9A:0C:1D:00:C6
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31382e302f32342d3234203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.18.0/24
Signature Algorithm: sha256WithRSAEncryption
42:90:04:3f:b3:15:f8:27:0b:d2:91:e6:a3:a2:90:cf:b5:58:
d1:18:11:fe:48:21:aa:78:f0:f5:38:eb:f4:2c:e5:0c:6c:8f:
dc:c8:3e:6f:5e:2a:21:36:68:bd:d1:f2:63:8e:4a:54:9d:92:
8f:03:3e:32:62:e3:5e:0e:f8:16:35:3e:f7:08:7f:99:02:c7:
a3:51:4a:83:cb:29:c8:74:12:45:9d:77:33:77:c8:9f:e1:e5:
80:7f:5b:07:07:13:f0:1f:93:87:81:5a:f3:b2:f6:cc:17:48:
cc:c8:53:2d:70:14:54:6e:3a:16:fe:c9:20:a9:5c:82:cf:93:
3d:73:57:f2:a4:fe:51:95:59:7f:3e:ee:21:3b:18:f5:fd:39:
cc:27:b8:e3:fb:0e:18:5d:40:8a:5a:8c:e6:06:06:29:68:16:
f7:53:e4:05:b0:b1:ef:71:52:1e:46:20:77:17:97:39:54:a7:
c8:d1:79:2b:a1:85:b8:bd:c4:1a:7b:f8:5e:cf:1c:ea:e7:05:
47:2c:1f:11:d6:e4:3c:0e:54:4f:9b:7f:0a:b4:a0:f7:e5:1a:
d4:ae:05:b3:24:de:bd:39:6e:a7:4b:d0:d5:0e:1a:b5:72:e8:
da:f3:82:4b:91:d7:0e:a1:af:8a:ab:20:26:01:7e:04:8e:96:
fc:33:54:5c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHnbOOcNlG8N9+DMgfcZjJivBgwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNzI0MzlaFw0yNzA2MDIwNzI5MzlaMDMxMTAvBgNV
BAMTKDRFRTRCMEE2RDlDNUIzQTAwREQyN0UyRjc3MTZGOTlBMEMxRDAwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfVE5MJj/dLqFbc97qWzXM7Vl
ihuMd0fytu4ocjAfAw5Ys23i/vCqpJVbovXgfMWnYWF9SGXdfzunUv/XVGuS4R31
2qDkPj1pYnsRjZG1W6uDz9vhk6SBpLZTvOC6MAN3rwrRPb3hlK5V6XDgJJiDyX0I
GcLkUAC2My+o13fEa++d9aRcqpPzvdqtheVqsiJ4RgbBlocyD4rqttpBAnNXOZy1
qESmnqAuqs3GdddACEUJzPwgTzXkW0/ej8LDksxi4f4x2uCQu88ZCcNyHc15VK8O
UIvAY54MbZiU//QIQkOtaJrtnpjZfd4Ec0q3Ic8Pm3WMTqmKauvIJghcHo0FAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUTuSwptnFs6AN0n4vdxb5mgwdAMYwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzMyMzEzODJlMzkz
ODJlMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM3MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANpiEjANBgkqhkiG9w0BAQsFAAOCAQEAQpAEP7MV+CcL0pHmo6KQz7VY
0RgR/kghqnjw9Tjr9CzlDGyP3Mg+b14qITZovdHyY45KVJ2SjwM+MmLjXg74FjU+
9wh/mQLHo1FKg8spyHQSRZ13M3fIn+HlgH9bBwcT8B+Th4Fa87L2zBdIzMhTLXAU
VG46Fv7JIKlcgs+TPXNX8qT+UZVZfz7uITsY9f05zCe44/sOGF1AilqM5gYGKWgW
91PkBbCx73FSHkYgdxeXOVSnyNF5K6GFuL3EGnv4Xs8c6ucFRywfEdbkPA5UT5t/
CrSg9+Ua1K4FsyTevTlup0vQ1Q4atXLo2vOCS5HXDqGviqsgJgF+BI6W/DNUXA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:58 2026 by rpki-client