
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e2034383337.roa
File: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=
Subject key identifier: 35:B4:45:95:A2:33:9F:51:85:28:A6:68:1B:DA:93:22:71:F0:28:23
Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial: 0A9841310660C332250077D66EF6A30ADA64F131
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e2034383337.roa
Signing time: Fri 08 May 2026 08:21:07 +0000
ROA not before: Fri 08 May 2026 08:16:07 +0000
ROA not after: Fri 07 May 2027 08:21:07 +0000
asID: 4837
IP address blocks: 115.31.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:98:41:31:06:60:c3:32:25:00:77:d6:6e:f6:a3:0a:da:64:f1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Validity
Not Before: May 8 08:16:07 2026 GMT
Not After : May 7 08:21:07 2027 GMT
Subject: CN=35B44595A2339F518528A6681BDA932271F02823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:ba:49:05:26:28:30:34:1e:f5:9a:db:31:
23:39:4f:6f:8b:32:0c:46:c6:c9:99:65:a9:2a:ae:
d5:74:a7:52:1d:8a:de:87:82:e9:46:c1:2b:07:69:
6c:81:3a:44:69:2c:f1:f2:bb:1f:16:dd:6f:1e:e4:
08:d0:69:e1:9b:d6:6a:49:d7:e9:59:34:f3:74:b7:
c7:17:e7:a2:c0:8d:5a:9f:57:c2:b2:95:f3:91:d3:
10:c4:3c:cf:b9:d6:2f:74:d0:28:02:2a:c7:90:60:
9f:b9:bb:c6:ed:52:ee:0c:75:78:0d:cb:77:7a:37:
06:69:83:87:72:d9:49:20:63:eb:f4:a2:1d:f0:52:
fe:98:0b:50:cf:1a:bf:08:4e:34:9c:71:8e:c4:2e:
2d:ed:60:e0:af:aa:5f:11:f7:f2:bf:31:c3:a2:74:
ae:fd:ce:e2:82:4a:59:a2:e6:06:f2:7c:48:6c:56:
0a:dc:26:fb:d9:2a:29:16:6f:2e:95:40:85:3c:6c:
48:11:a8:da:79:56:a8:88:84:c1:2f:50:af:24:63:
30:11:21:cf:17:c1:3c:f1:26:71:cb:6a:74:53:78:
9e:06:43:f6:6c:86:dc:a2:68:a3:f3:4d:1a:f2:6c:
f7:51:7e:8d:11:73:f6:ef:f2:59:61:ab:c7:41:7e:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:45:95:A2:33:9F:51:85:28:A6:68:1B:DA:93:22:71:F0:28:23
X509v3 Authority Key Identifier:
keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.31.64.0/22
Signature Algorithm: sha256WithRSAEncryption
32:04:05:ad:05:7d:c7:d6:25:8e:0a:9f:c1:28:3e:0d:08:6e:
09:a2:ef:3d:ce:58:2a:6e:e5:78:ba:5e:24:69:9c:ff:c3:e2:
9c:45:19:07:03:ce:d5:19:7b:28:72:0b:d1:61:a1:fa:97:c4:
e6:7e:65:7d:4a:7f:48:50:e5:6a:69:cb:2e:fe:0d:1d:19:fe:
88:f3:f4:68:86:5a:af:78:18:4c:18:07:e9:09:69:ef:0e:d1:
27:02:59:ce:8d:41:36:04:18:47:61:ce:c1:57:8b:de:f3:93:
e5:91:ed:58:eb:5f:6f:13:d9:77:6a:cc:85:4e:d4:13:dd:5b:
ff:aa:53:dd:05:0a:48:0f:7c:0f:b9:96:2b:a0:3e:05:7f:1a:
bc:64:97:15:51:bd:9a:3c:0b:87:e7:1d:af:e8:24:2e:73:3f:
1b:51:f6:11:06:e9:aa:19:81:a0:a3:94:a4:0e:9b:94:d0:55:
68:da:fd:da:71:2c:4f:71:3f:eb:91:17:6b:43:5b:20:7d:bd:
5a:94:7f:4a:d5:85:b5:04:e0:c3:46:96:ca:5d:d4:fc:fc:a2:
84:a2:51:27:28:05:aa:b4:6c:db:1d:c4:5b:4f:66:db:3a:b9:
69:ce:bc:f3:0f:1d:5f:dc:2b:6d:df:d7:bc:47:ef:96:58:d9:
ed:e1:48:69
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUCphBMQZgwzIlAHfWbvajCtpk8TEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC
MUU0MjQwQTAeFw0yNjA1MDgwODE2MDdaFw0yNzA1MDcwODIxMDdaMDMxMTAvBgNV
BAMTKDM1QjQ0NTk1QTIzMzlGNTE4NTI4QTY2ODFCREE5MzIyNzFGMDI4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3bpJBSYoMDQe9ZrbMSM5T2+L
MgxGxsmZZakqrtV0p1Idit6HgulGwSsHaWyBOkRpLPHyux8W3W8e5AjQaeGb1mpJ
1+lZNPN0t8cX56LAjVqfV8KylfOR0xDEPM+51i900CgCKseQYJ+5u8btUu4MdXgN
y3d6NwZpg4dy2UkgY+v0oh3wUv6YC1DPGr8ITjSccY7ELi3tYOCvql8R9/K/McOi
dK79zuKCSlmi5gbyfEhsVgrcJvvZKikWby6VQIU8bEgRqNp5VqiIhMEvUK8kYzAR
Ic8XwTzxJnHLanRTeJ4GQ/ZshtyiaKPzTRrybPdRfo0Rc/bv8llhq8dBfuKXAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUNbRFlaIzn1GFKKZoG9qTInHwKCMwHwYDVR0j
BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw
MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA1MDQ2NDQ0MzcwMjk2ODM5LzAvMzEzMTM1MmUzMzMx
MmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJzH0AwDQYJKoZIhvcNAQELBQADggEBADIEBa0FfcfWJY4Kn8EoPg0Ibgmi7z3O
WCpu5Xi6XiRpnP/D4pxFGQcDztUZeyhyC9FhofqXxOZ+ZX1Kf0hQ5Wppyy7+DR0Z
/ojz9GiGWq94GEwYB+kJae8O0ScCWc6NQTYEGEdhzsFXi97zk+WR7VjrX28T2Xdq
zIVO1BPdW/+qU90FCkgPfA+5liugPgV/GrxklxVRvZo8C4fnHa/oJC5zPxtR9hEG
6aoZgaCjlKQOm5TQVWja/dpxLE9xP+uRF2tDWyB9vVqUf0rVhbUE4MNGlspd1Pz8
ooSiUScoBaq0bNsdxFtPZts6uWnOvPMPHV/cK23f17xH75ZY2e3hSGk=
-----END CERTIFICATE-----
Generated at Wed May 13 10:17:01 2026 by rpki-client