
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32332d3233203d3e20313430373137.roa
File: 3231382e39382e382e302f32332d3233203d3e20313430373137.roa (raw, json)
Hash identifier: +/eNlx/Nc+n6qF0is48heaJfoxvcgjqohyBmel2ur1M=
Subject key identifier: CE:25:33:04:D9:37:A0:EC:94:3D:50:B3:B5:59:DF:F6:AA:E7:33:76
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 5C426C9125A1889E8DCC669BBD0581A26FF35E75
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32332d3233203d3e20313430373137.roa
Signing time: Wed 03 Jun 2026 07:29:39 +0000
ROA not before: Wed 03 Jun 2026 07:24:39 +0000
ROA not after: Wed 02 Jun 2027 07:29:39 +0000
asID: 140717
IP address blocks: 218.98.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:42:6c:91:25:a1:88:9e:8d:cc:66:9b:bd:05:81:a2:6f:f3:5e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 07:24:39 2026 GMT
Not After : Jun 2 07:29:39 2027 GMT
Subject: CN=CE253304D937A0EC943D50B3B559DFF6AAE73376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:60:94:4f:6b:9f:74:3c:20:bc:32:be:f9:
ee:7b:f6:31:53:bc:a0:45:85:98:d1:d3:bc:f4:4f:
71:de:8a:10:07:b8:d7:ed:e3:e6:38:fb:25:80:8c:
db:a9:ff:44:20:f8:51:3d:4e:f9:b4:40:90:73:66:
56:1e:97:fa:0b:4d:f2:01:4d:2d:87:f4:e1:ff:2e:
37:95:85:3e:19:eb:fa:28:57:52:75:aa:1d:ee:22:
81:8d:16:a5:6e:a8:13:af:ca:1e:29:18:fb:35:47:
e0:f3:e7:e2:79:fb:77:b9:6b:0b:fb:e6:fd:4f:78:
20:bc:92:8a:cb:70:fa:f4:94:1e:4b:66:28:f8:ce:
26:aa:95:ff:a4:ea:eb:16:31:ce:c5:ff:07:43:1c:
b9:9e:7f:d2:16:8a:f4:65:38:0d:b0:83:92:8d:80:
15:ed:3f:af:e4:8a:77:f5:d7:ff:8b:bf:ff:36:25:
c7:79:d7:f7:44:ee:6d:f5:e7:fb:25:bf:e6:27:d3:
97:1d:4b:98:55:ee:06:b5:7a:50:34:e2:b1:b4:35:
a4:be:3b:c9:4b:99:f7:99:ee:cf:05:ff:92:cf:93:
77:22:ca:fc:36:8d:61:4e:6f:4a:13:b2:39:23:2e:
16:27:3c:f7:c7:6d:4f:46:b4:d1:ad:d6:2a:b3:46:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:25:33:04:D9:37:A0:EC:94:3D:50:B3:B5:59:DF:F6:AA:E7:33:76
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32332d3233203d3e20313430373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.8.0/23
Signature Algorithm: sha256WithRSAEncryption
23:0a:ca:ad:a2:ed:b2:55:db:d8:44:06:49:47:17:ef:52:9d:
a0:25:4f:08:3b:06:df:cc:9e:c9:18:ae:45:46:38:38:30:c7:
5e:f8:18:59:c1:e0:59:53:f6:6f:10:50:5b:46:39:46:27:31:
17:bf:f8:49:02:61:b5:6f:a5:28:4b:0f:62:3f:0a:fe:e5:e6:
e0:1f:dc:01:17:40:11:68:01:3d:67:81:c9:3e:db:da:e3:cb:
14:76:dc:1a:68:b4:55:0d:0d:b4:0b:b4:ff:9d:61:61:bf:7b:
a5:be:f1:7b:86:9e:ac:07:02:ef:a3:16:b1:ab:bb:9f:29:8a:
b8:b5:46:6e:58:17:4c:22:14:7d:c5:a3:ae:0f:70:5c:80:50:
f1:63:1f:55:24:4f:5c:7e:cd:87:4d:f3:61:f5:5e:0a:46:a7:
6d:07:44:c8:ce:4f:d8:f6:31:22:98:40:a3:7a:a2:11:72:85:
20:f0:8a:eb:e0:50:83:38:dd:86:18:66:70:66:37:c7:41:50:
43:00:a3:66:31:46:f9:18:06:2c:d4:6b:0a:7f:a9:db:38:c8:
c9:6d:c5:46:e0:1c:6b:15:0b:46:87:7b:fc:17:b3:37:54:fa:
ec:8f:7e:f8:18:a3:8c:07:df:42:92:fb:08:96:30:a5:b9:20:
17:8b:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:26 2026 by rpki-client