
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e203538353431.roa
File: 3131352e33312e36342e302f32322d3232203d3e203538353431.roa (raw, json)
Hash identifier: 09WuQ09lWRUKOZWiZwL14VPTUc9+Moiy9vuG05gPLRo=
Subject key identifier: 98:66:6E:9E:72:CE:77:C9:02:67:8E:CE:4B:74:C5:73:73:99:D4:B4
Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial: 5FB6C40998CB85FCF1FEE6F96107D4B2E4C085F4
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e203538353431.roa
Signing time: Fri 08 May 2026 08:21:29 +0000
ROA not before: Fri 08 May 2026 08:16:29 +0000
ROA not after: Fri 07 May 2027 08:21:29 +0000
asID: 58541
IP address blocks: 115.31.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b6:c4:09:98:cb:85:fc:f1:fe:e6:f9:61:07:d4:b2:e4:c0:85:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Validity
Not Before: May 8 08:16:29 2026 GMT
Not After : May 7 08:21:29 2027 GMT
Subject: CN=98666E9E72CE77C902678ECE4B74C5737399D4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9c:dc:e6:c1:ad:85:60:21:05:3a:1e:cb:ca:
18:e0:f5:27:9b:09:04:ef:97:f2:82:02:ea:c4:ca:
68:ce:9e:3f:df:28:37:01:3b:78:83:e3:e0:f7:5c:
54:9a:d9:f6:08:85:41:dc:cc:e8:47:6f:14:ca:79:
82:fe:6d:9c:5a:48:24:08:b1:d9:f7:61:da:b3:09:
48:d5:3d:12:95:03:0a:ae:b1:a1:35:22:4c:21:8f:
49:23:d6:bf:e7:2b:a5:28:c3:fc:0c:aa:d9:af:e8:
eb:1a:b2:ca:78:90:fb:5a:43:67:ae:1f:f3:27:ec:
dd:81:7f:a6:37:f9:6f:90:e2:c1:f0:e7:d3:11:57:
2f:6d:b3:87:22:01:7a:af:b2:a9:6c:2b:49:00:0b:
b4:95:1a:95:35:31:8b:01:25:50:2a:42:f3:5a:92:
e5:42:2d:a8:69:91:2c:c4:4c:21:f7:3f:74:11:c5:
cc:79:47:b3:b8:3b:61:9c:ff:90:24:bf:2a:80:35:
4a:b3:68:f8:0f:58:48:79:11:fc:e4:92:e7:27:7f:
4c:67:1e:d1:90:5a:6a:71:ca:6b:31:aa:21:fe:32:
0c:a0:18:10:b6:fa:3a:68:28:fb:b8:cd:b1:90:e7:
96:41:a1:e4:4b:c3:d4:dd:7f:58:40:d5:59:30:11:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:66:6E:9E:72:CE:77:C9:02:67:8E:CE:4B:74:C5:73:73:99:D4:B4
X509v3 Authority Key Identifier:
keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3131352e33312e36342e302f32322d3232203d3e203538353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.31.64.0/22
Signature Algorithm: sha256WithRSAEncryption
65:8d:ab:8d:cb:d6:2e:55:16:e3:59:4c:f6:0e:d4:43:9a:f6:
4f:e3:c5:74:71:fd:73:95:7d:e3:85:ba:61:86:42:a2:85:84:
05:e6:91:53:c8:41:19:68:26:7b:b6:97:be:cb:dc:fe:7d:0d:
47:11:11:f3:d7:c7:4a:34:7a:12:c6:88:77:e4:7b:e3:53:48:
03:fd:ea:ed:88:13:31:fb:d9:cd:f1:d0:21:e4:fd:05:4d:09:
18:5a:c2:f6:d2:25:e2:91:b2:e7:26:49:82:5b:42:31:0b:28:
a2:83:47:65:16:ac:6c:b1:ef:bd:e4:e3:f5:61:fb:ea:a3:13:
21:b9:4a:36:9c:6a:6d:e5:eb:e2:a4:24:08:ca:48:fb:23:39:
34:58:f6:de:39:f2:88:7b:f3:23:fa:47:a1:4c:b4:f7:b5:08:
6e:b3:49:bf:41:4a:29:26:02:c8:01:57:5c:89:7d:27:14:b4:
de:a0:34:82:c8:27:1c:20:30:78:20:60:56:57:10:1e:5e:5e:
71:9d:f7:11:c5:b7:5b:f9:c2:71:ca:d9:d5:fb:70:be:f8:d0:
e4:16:3e:6a:1d:3b:7b:43:18:74:18:f4:ad:fd:cc:d1:72:cc:
1d:e0:bc:ca:3e:68:22:0f:bb:78:96:52:4f:39:2a:27:ff:a6:
29:e1:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:11 2026 by rpki-client