
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/3131332e3231332e302e302f31372d3234203d3e2034383337.roa
File: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (raw, json)
Hash identifier: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=
Subject key identifier: C6:EC:66:8A:04:3D:F8:23:54:DA:CA:27:02:48:18:4C:98:EA:94:80
Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5
Certificate serial: 409C7C0C1CA2630CF3E40144565F6A818A77B112
Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/3131332e3231332e302e302f31372d3234203d3e2034383337.roa
Signing time: Mon 08 Jun 2026 03:13:19 +0000
ROA not before: Mon 08 Jun 2026 03:08:19 +0000
ROA not after: Mon 07 Jun 2027 03:13:19 +0000
asID: 4837
IP address blocks: 113.213.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9c:7c:0c:1c:a2:63:0c:f3:e4:01:44:56:5f:6a:81:8a:77:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5
Validity
Not Before: Jun 8 03:08:19 2026 GMT
Not After : Jun 7 03:13:19 2027 GMT
Subject: CN=C6EC668A043DF82354DACA270248184C98EA9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:05:af:c7:31:2c:0c:ac:e2:b9:fb:b6:43:
44:59:bf:08:8e:31:d2:d9:b0:31:9f:7f:69:8b:df:
99:9a:17:fe:73:c4:97:5b:f1:d5:67:9d:b6:67:37:
e6:b7:fd:d7:e9:28:00:bb:6d:ce:21:24:43:a4:4e:
d9:57:e0:7a:74:a5:88:cc:68:9f:67:04:72:ed:05:
85:67:7e:f6:ab:c0:a2:a6:0d:98:13:8b:64:e6:9e:
f6:1c:5d:7c:7e:f9:01:13:61:55:db:b9:c8:1e:f4:
f0:d5:46:d2:8e:bb:3f:db:d6:5a:03:27:a6:31:cd:
1c:ce:1e:51:da:ae:5f:ec:3d:77:27:f3:9f:2d:e0:
59:2f:29:02:e7:b9:74:32:87:ff:3e:d0:ea:18:38:
25:fd:6f:e5:7d:ca:60:e2:ff:79:69:b3:14:ee:b1:
11:12:7d:f9:7c:67:ac:e7:49:5d:50:16:48:18:08:
86:17:14:9e:e4:70:c7:b0:d2:8f:25:d1:b4:3e:c6:
e0:79:c7:1b:c8:55:b6:b0:00:3e:9a:e5:8e:c4:d4:
76:a7:2d:7b:a5:ca:ed:59:da:42:a4:85:2a:2d:02:
4b:28:ab:20:67:53:09:31:be:19:6c:9d:75:74:b8:
a6:2d:c1:d8:7d:d0:26:0a:91:30:67:1f:a0:e1:97:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EC:66:8A:04:3D:F8:23:54:DA:CA:27:02:48:18:4C:98:EA:94:80
X509v3 Authority Key Identifier:
keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/3131332e3231332e302e302f31372d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.213.0.0/17
Signature Algorithm: sha256WithRSAEncryption
50:69:02:2e:f1:a3:19:d0:63:ff:81:6d:40:3f:a1:3d:3d:74:
1e:f8:4f:16:8e:92:98:52:60:a7:41:62:a2:26:55:b7:54:82:
48:4f:d9:6f:cd:14:34:ce:ea:0e:86:83:0d:25:12:d8:93:6c:
02:15:06:83:f9:6a:fd:ab:88:c5:db:2c:67:b3:ec:64:e3:f7:
0f:db:82:a5:a7:a7:d3:82:d2:da:ce:87:55:e5:de:d1:44:a2:
14:e5:e0:e6:34:91:f7:0d:59:da:30:c5:01:2e:ca:f9:22:cd:
63:07:c7:b0:aa:62:a2:58:51:1c:a6:5e:dc:13:6f:fc:2f:d3:
c0:14:49:70:3d:df:2a:83:0d:b7:69:23:a1:f1:e3:3a:18:81:
a9:eb:f0:72:4c:de:f7:9d:dd:24:68:54:0e:30:50:18:2c:2d:
52:e5:7f:94:6f:18:f6:ca:3f:58:74:44:15:30:30:ed:e1:c8:
49:d7:93:64:19:76:31:1d:b5:a6:a5:8f:28:aa:de:81:ba:a2:
28:ac:e3:d9:01:e0:c9:e3:73:32:66:a2:79:2f:94:bc:1d:45:
c0:90:d7:5b:9f:53:ad:a6:a0:6a:4e:04:3d:2d:c6:a0:79:15:
05:2b:6e:2e:21:9c:3a:a9:dd:9e:90:c4:09:f3:3d:57:c4:c7:
ec:5b:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:33 2026 by rpki-client