
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e332e302f32342d3234203d3e20313334373030.roa
File: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=
Subject key identifier: 5B:34:2D:91:C3:4B:FD:FC:58:B9:45:35:2A:0E:F5:76:CD:18:38:6A
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 30E92452946CA8ABDEBB50FCBFAEDDFFA9504D04
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e332e302f32342d3234203d3e20313334373030.roa
Signing time: Mon 27 Apr 2026 10:24:24 +0000
ROA not before: Mon 27 Apr 2026 10:19:24 +0000
ROA not after: Mon 26 Apr 2027 10:24:24 +0000
asID: 134700
IP address blocks: 114.112.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e9:24:52:94:6c:a8:ab:de:bb:50:fc:bf:ae:dd:ff:a9:50:4d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Apr 27 10:19:24 2026 GMT
Not After : Apr 26 10:24:24 2027 GMT
Subject: CN=5B342D91C34BFDFC58B945352A0EF576CD18386A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:84:91:41:a4:df:15:4c:72:38:17:96:d1:
83:02:af:8a:84:fc:fb:a3:90:fc:be:56:46:d2:76:
44:20:9a:43:b5:67:63:01:f3:33:33:d3:e9:da:4d:
20:c8:40:a1:26:ac:bf:4a:f8:43:d8:5b:9b:e5:02:
9c:26:3b:da:06:3b:26:51:19:75:9d:92:e6:64:55:
f1:d9:be:13:47:bc:a5:99:f7:57:e1:6e:79:29:15:
de:07:73:e6:47:37:23:91:ee:8b:4b:87:11:0f:b2:
78:db:1d:de:89:eb:15:21:79:94:95:24:79:2b:15:
8b:8c:00:fe:f0:6c:96:e9:f0:55:ee:24:48:23:cb:
72:b9:91:d0:09:e0:79:8e:a1:3f:7c:74:bf:29:e3:
b0:a0:35:57:6c:cf:da:ba:c4:6a:a0:48:90:c9:a8:
e5:99:c0:ed:ae:62:62:ca:84:d6:02:59:7d:ed:48:
f7:11:e0:b2:15:64:a8:c9:c9:3a:c0:84:84:8c:31:
58:fe:53:f1:db:89:2a:ae:65:c8:03:6f:f4:08:88:
f8:47:d2:e2:12:70:65:01:1d:d6:b0:63:1a:62:4f:
00:10:ef:b9:cf:08:e2:e5:33:fc:d4:5e:df:80:90:
5f:b8:60:eb:fe:ca:3b:65:83:42:87:e6:46:51:0f:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:2D:91:C3:4B:FD:FC:58:B9:45:35:2A:0E:F5:76:CD:18:38:6A
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e332e302f32342d3234203d3e20313334373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b4:19:7d:cd:b0:b2:88:aa:83:11:a3:6a:58:4b:b1:81:09:
13:ba:f1:90:50:52:c3:99:a9:c5:6b:7b:72:f7:db:e4:89:93:
8d:3c:44:ae:96:70:d1:8f:43:6b:80:15:98:9e:96:1a:d4:03:
10:09:7b:93:79:36:ca:5a:ac:9b:d8:d7:2a:30:21:2f:d5:5f:
6a:aa:ee:b4:a3:39:87:14:32:23:77:80:c1:48:bf:5f:99:f1:
95:91:aa:9b:f1:85:39:4e:eb:d4:7c:45:be:27:03:0c:d8:3c:
a5:62:14:75:a1:38:3b:1d:b2:dd:4e:13:04:67:24:59:87:18:
e0:28:db:a7:9f:09:d4:b5:04:14:aa:5f:42:28:3c:fe:8a:76:
c6:c0:67:b4:82:bf:4e:78:d2:19:83:07:22:28:2e:aa:70:fc:
b0:56:05:7e:25:c6:9d:bf:11:50:86:a6:59:4b:87:87:e1:ec:
5d:f2:10:21:55:cf:8b:03:80:f4:42:fd:79:9d:55:15:0b:fa:
b7:b0:da:b1:fb:95:79:00:82:dc:69:eb:4b:d2:ee:14:bc:e9:
86:a7:38:9b:76:35:92:51:f1:14:29:56:84:15:56:67:56:88:
10:e9:68:34:06:1c:70:a4:43:f3:bc:6c:7d:c0:7e:14:73:dc:
86:7f:d6:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:02 2026 by rpki-client