
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e33372e302f32342d3234203d3e20313430373136.roa
File: 3231382e39382e33372e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier: 5oXteQY9JG0rVcD16sTyxY393qsWaGZ/V81UI5cfsG4=
Subject key identifier: 50:52:8C:36:C3:CE:36:48:DF:FB:ED:48:E1:3A:E3:13:6C:DC:AE:B5
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 687A8D0AFCB756B98797E3C6E232C72B877C661F
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e33372e302f32342d3234203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 07:30:33 +0000
ROA not before: Wed 03 Jun 2026 07:25:33 +0000
ROA not after: Wed 02 Jun 2027 07:30:33 +0000
asID: 140716
IP address blocks: 218.98.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7a:8d:0a:fc:b7:56:b9:87:97:e3:c6:e2:32:c7:2b:87:7c:66:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 07:25:33 2026 GMT
Not After : Jun 2 07:30:33 2027 GMT
Subject: CN=50528C36C3CE3648DFFBED48E13AE3136CDCAEB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:53:2b:5e:9c:c3:d4:59:a6:76:cb:c5:d0:
e0:f7:78:7a:57:c8:9e:0c:98:c8:25:37:78:e2:87:
05:71:d5:63:ab:8c:36:4d:0a:24:2a:f5:15:38:3d:
d7:7a:e6:15:84:37:47:87:9c:47:9f:c1:26:28:72:
13:26:3b:be:54:a2:90:e8:c5:cb:83:75:39:b9:b9:
3e:e5:97:40:a2:ec:3e:c1:6f:5b:63:aa:a3:dd:08:
3a:f0:ea:bf:24:e9:2d:5a:31:5a:00:36:f6:04:c2:
6d:20:e2:f3:06:78:c1:7a:ea:8d:2a:5f:14:85:20:
5d:12:d6:ba:c2:8e:43:bb:97:39:ae:f6:75:4a:4d:
aa:18:c8:32:b6:fe:d3:c1:71:31:8b:5c:d7:9f:08:
ab:74:c5:d6:e8:25:e4:70:54:8f:bd:33:bd:b4:ee:
74:4e:e4:c4:8b:40:ea:f4:7e:d5:14:8f:6b:ac:4c:
d6:b2:dc:b9:16:d2:18:21:98:64:b5:06:c0:18:93:
50:66:66:c6:c4:5e:98:d9:b6:fc:50:1d:56:83:77:
55:24:4f:e3:5a:30:76:57:45:2a:67:e5:bd:29:18:
86:49:b9:7d:72:bf:62:08:14:cd:60:69:8b:fd:4e:
93:62:cb:5f:ef:a7:ee:d5:0f:14:f5:c6:44:db:f7:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:8C:36:C3:CE:36:48:DF:FB:ED:48:E1:3A:E3:13:6C:DC:AE:B5
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e33372e302f32342d3234203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.37.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e5:95:6c:40:e5:61:03:aa:c9:d3:91:6a:55:e8:df:cd:dc:
fb:ac:69:99:60:63:06:3a:c3:2f:ab:3c:75:06:f8:d4:8b:88:
2c:6b:c6:2d:17:b5:2f:83:16:2e:5d:19:c6:5e:89:d9:9b:19:
eb:03:54:3d:8e:e5:ce:e7:bd:04:84:84:b6:f7:fc:a0:21:67:
64:f3:94:eb:ef:bf:0c:45:67:c8:56:51:7b:19:a4:59:90:43:
52:cb:e4:8a:b5:4e:9c:65:9e:cd:51:4e:1e:fb:cd:5f:11:22:
d8:58:c4:cd:8b:07:5d:d1:73:6f:0f:6e:66:68:e1:4d:7f:b8:
60:4a:b2:d2:a0:c5:5c:5e:6a:33:1e:ed:70:6b:48:b5:f2:c7:
46:00:d3:10:05:2e:4a:41:4b:1b:69:48:29:43:19:f9:61:59:
17:c6:5a:c4:35:03:a3:cb:e0:5b:f0:d1:7d:ee:74:22:9c:21:
54:1b:c5:ca:54:2b:bc:01:e0:4a:91:b4:7f:21:fb:a8:2d:0b:
40:d9:d4:ef:ce:11:71:af:b7:da:a7:8f:74:93:18:c9:b1:7d:
d0:fb:e1:96:1d:55:00:d4:47:e6:95:ea:04:47:8e:fd:c9:29:
43:c4:14:39:99:04:be:48:59:ed:37:e1:05:88:7d:c1:ed:ec:
67:61:59:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:24 2026 by rpki-client