
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31372e302f32342d3332203d3e2034383038.roa
File: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (raw, json)
Hash identifier: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=
Subject key identifier: 61:4B:FE:CD:2E:50:21:4E:40:F0:F6:BF:79:8D:94:6F:13:CE:A4:BA
Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Certificate serial: 313F325CEB2E83FE4A79311E4F40AD9C753EE782
Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31372e302f32342d3332203d3e2034383038.roa
Signing time: Wed 03 Jun 2026 08:27:57 +0000
ROA not before: Wed 03 Jun 2026 08:22:57 +0000
ROA not after: Wed 02 Jun 2027 08:27:57 +0000
asID: 4808
IP address blocks: 116.193.17.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:3f:32:5c:eb:2e:83:fe:4a:79:31:1e:4f:40:ad:9c:75:3e:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Validity
Not Before: Jun 3 08:22:57 2026 GMT
Not After : Jun 2 08:27:57 2027 GMT
Subject: CN=614BFECD2E50214E40F0F6BF798D946F13CEA4BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:7f:9c:e2:e7:a8:76:5b:29:2a:1c:8d:36:
3f:b8:ac:a6:7a:85:c7:cd:47:f2:90:a1:d3:5f:3a:
58:85:a9:f8:b0:7b:b4:a4:7f:bb:6c:ea:f4:cb:f6:
54:df:98:a0:d5:4f:19:08:89:5c:cc:cc:5b:5a:70:
ec:fe:0f:b5:76:34:68:fe:60:3c:da:84:2f:61:0a:
a9:e3:57:6c:05:34:d9:90:5a:74:8f:df:db:66:c3:
c4:b9:22:cc:d1:c2:5f:fd:86:1f:aa:18:39:4e:66:
80:4b:f1:c3:25:a2:eb:53:5b:01:85:7a:32:26:a5:
86:79:61:f0:67:c4:40:82:89:47:65:28:46:d8:75:
a8:b5:77:97:96:10:6c:1e:f7:59:0f:49:57:1b:11:
28:5b:65:c1:53:33:04:16:4c:b4:7b:9c:8d:53:fe:
d6:3a:b3:40:52:5a:d8:d4:ff:b7:80:af:1c:cc:41:
88:ed:bf:90:59:fc:48:de:2b:3e:bf:09:2d:e5:68:
17:e7:13:5d:e2:5a:58:a0:97:48:63:7d:c0:07:72:
b6:b2:a8:42:49:dc:a0:70:e5:1a:fc:ab:17:1b:dc:
1c:d2:5e:71:cc:de:16:ec:a6:0f:80:4c:c2:2b:df:
15:24:72:0c:ae:e7:be:ab:e1:35:5a:35:d1:1d:77:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:FE:CD:2E:50:21:4E:40:F0:F6:BF:79:8D:94:6F:13:CE:A4:BA
X509v3 Authority Key Identifier:
keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3131362e3139332e31372e302f32342d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.193.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b6:62:6d:35:48:0d:e3:a3:df:a0:0c:11:89:e8:d7:2a:10:
eb:02:d5:e0:0c:57:a8:1b:fe:55:d4:a9:5b:89:24:e7:c4:a9:
14:4c:09:af:fe:ee:5d:a3:08:43:53:40:d5:c4:c6:54:c4:e8:
23:97:0c:59:d5:4f:54:f1:f0:1d:7f:0a:db:9d:8a:2b:70:56:
98:7c:97:39:38:fc:bc:34:59:b5:87:44:fe:af:17:72:31:c6:
36:6a:e1:69:91:6f:40:c8:df:8d:f7:5c:b7:94:0a:c5:bc:c2:
92:4d:b8:55:a5:6c:03:be:f5:fe:75:ab:7f:25:f7:25:20:38:
78:4e:6a:65:be:a1:18:78:3e:a3:0d:7e:8f:76:74:5a:a4:3c:
e7:e6:4b:56:92:af:e1:0e:9a:aa:4b:01:d6:51:e2:87:7d:fd:
2a:01:59:2f:98:f6:96:30:fa:32:e7:c4:27:bd:2e:a4:58:46:
ca:dc:ae:ea:8a:58:7f:43:6a:42:38:be:f4:e2:cc:a9:b3:49:
42:10:46:6f:22:fc:be:ec:10:f2:bc:c1:55:be:dc:62:c6:17:
6c:62:fb:18:52:98:96:f6:2e:55:fa:45:29:38:ef:80:87:05:
14:f6:70:6a:1f:f8:3a:0f:56:e6:d2:1c:8c:06:a2:ab:a8:b3:
3b:ae:b0:15
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMT8yXOsug/5KeTEeT0CtnHU+54IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4
MzQ0QjM0ODAeFw0yNjA2MDMwODIyNTdaFw0yNzA2MDIwODI3NTdaMDMxMTAvBgNV
BAMTKDYxNEJGRUNEMkU1MDIxNEU0MEYwRjZCRjc5OEQ5NDZGMTNDRUE0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mX+c4ueodlspKhyNNj+4rKZ6
hcfNR/KQodNfOliFqfiwe7Skf7ts6vTL9lTfmKDVTxkIiVzMzFtacOz+D7V2NGj+
YDzahC9hCqnjV2wFNNmQWnSP39tmw8S5IszRwl/9hh+qGDlOZoBL8cMloutTWwGF
ejImpYZ5YfBnxECCiUdlKEbYdai1d5eWEGwe91kPSVcbEShbZcFTMwQWTLR7nI1T
/tY6s0BSWtjU/7eArxzMQYjtv5BZ/EjeKz6/CS3laBfnE13iWligl0hjfcAHcray
qEJJ3KBw5Rr8qxcb3BzSXnHM3hbspg+ATMIr3xUkcgyu576r4TVaNdEdd7gZAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUYUv+zS5QIU5A8Pa/eY2UbxPOpLowHwYDVR0j
BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC
QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE0NDY5MjMyMjE0NTQwMzExLzAvMzEzMTM2MmUzMTM5
MzMyZTMxMzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHTBETANBgkqhkiG9w0BAQsFAAOCAQEAfrZibTVIDeOj36AMEYno1yoQ6wLV
4AxXqBv+VdSpW4kk58SpFEwJr/7uXaMIQ1NA1cTGVMToI5cMWdVPVPHwHX8K252K
K3BWmHyXOTj8vDRZtYdE/q8XcjHGNmrhaZFvQMjfjfdct5QKxbzCkk24VaVsA771
/nWrfyX3JSA4eE5qZb6hGHg+ow1+j3Z0WqQ85+ZLVpKv4Q6aqksB1lHih339KgFZ
L5j2ljD6MufEJ70upFhGytyu6opYf0NqQji+9OLMqbNJQhBGbyL8vuwQ8rzBVb7c
YsYXbGL7GFKYlvYuVfpFKTjvgIcFFPZwah/4Og9W5tIcjAaiq6izO66wFQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:19 2026 by rpki-client