
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31342e302f32332d3233203d3e2034383437.roa
File: 3131302e34302e31342e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: FCmR2p4ySSRyQPnTemqBbjgToDRRDpFDl/qQph1YdQU=
Subject key identifier: CF:BF:5D:68:DD:0F:98:4D:63:93:EA:D2:12:A9:CB:3D:51:3B:E4:0D
Certificate issuer: /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial: 19E0BA1E60F48CE73BE635F53047F34A0C42D3DD
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31342e302f32332d3233203d3e2034383437.roa
Signing time: Mon 11 May 2026 08:06:32 +0000
ROA not before: Mon 11 May 2026 08:01:32 +0000
ROA not after: Mon 10 May 2027 08:06:32 +0000
asID: 4847
IP address blocks: 110.40.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e0:ba:1e:60:f4:8c:e7:3b:e6:35:f5:30:47:f3:4a:0c:42:d3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Validity
Not Before: May 11 08:01:32 2026 GMT
Not After : May 10 08:06:32 2027 GMT
Subject: CN=CFBF5D68DD0F984D6393EAD212A9CB3D513BE40D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:5d:62:85:4d:a8:cc:9b:bb:da:7d:a3:55:
4b:6e:76:d3:27:dc:63:26:cc:51:dc:84:3c:a2:4a:
e4:7d:5f:46:f4:35:fb:8f:74:0d:86:0b:72:d3:bd:
31:96:70:dc:42:cd:0e:c9:ee:7e:9a:84:37:d3:ad:
e1:f9:26:db:21:40:2c:12:56:c2:94:cf:57:11:35:
88:12:9f:64:fc:8e:f1:d7:9c:08:e1:00:03:3c:22:
83:85:ee:f9:ba:aa:9d:60:5d:11:ca:64:16:0f:f6:
cd:4f:a8:4e:da:ce:7e:df:88:fe:8c:ca:7b:53:eb:
42:58:dd:d2:aa:7c:af:5a:b1:4d:0a:f2:94:88:82:
96:54:f0:3e:7b:3c:79:b0:57:f9:2a:a0:7b:fa:ee:
f0:0c:84:3f:3d:5c:2a:38:65:01:c5:42:bb:0f:8d:
53:5a:d6:eb:48:11:2f:8c:f9:6c:90:1d:5e:11:10:
02:cb:75:87:80:33:ec:30:be:ac:38:b4:0b:28:ed:
ca:13:92:1e:1a:bd:6e:0b:a3:2e:7b:3a:bd:8a:26:
88:00:dc:22:3c:f8:cb:c6:66:ea:f2:a9:14:e5:a8:
25:cc:48:0d:dd:76:eb:78:e7:d3:92:f0:44:7f:fd:
5c:4f:f5:5b:51:41:51:08:9a:3b:9d:7d:6d:5b:f0:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:5D:68:DD:0F:98:4D:63:93:EA:D2:12:A9:CB:3D:51:3B:E4:0D
X509v3 Authority Key Identifier:
keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e31342e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.14.0/23
Signature Algorithm: sha256WithRSAEncryption
96:36:04:5c:cd:dc:2f:30:3c:a0:23:6b:8e:d7:1e:5f:97:18:
5c:aa:e4:e5:9f:db:e1:6f:1d:09:15:a2:7b:b1:a7:b0:a4:2b:
dc:b7:f0:23:2c:62:a4:2a:2f:6a:d7:d4:c5:58:73:1e:40:1c:
01:c5:ed:57:78:e4:da:40:76:42:8c:7e:86:7b:bb:6d:e0:ce:
0b:5f:b8:88:53:a8:57:a4:51:0b:d3:cc:77:59:dc:d5:57:29:
cd:41:ec:ef:02:f0:2e:7d:2c:ec:09:26:05:76:36:60:13:3d:
d2:62:de:94:e3:63:f1:da:54:ee:00:30:65:44:59:8c:40:20:
5a:0f:3a:60:c5:74:45:d6:37:4f:5f:0f:b6:c8:d1:90:04:1a:
e6:d3:53:46:f8:2d:3c:ab:16:a3:33:87:1a:1b:21:52:48:f4:
07:8e:13:c2:2e:48:bb:13:f0:df:c3:f6:85:e5:bc:64:0e:81:
9d:67:53:4d:49:ec:d3:7a:30:60:39:be:63:4a:20:c6:b7:10:
30:87:8f:b2:85:e2:3a:e7:27:24:95:5d:3d:34:d4:c2:7d:6f:
bd:33:4d:0f:49:ea:f4:05:d5:11:22:93:49:15:40:80:76:0f:
dc:f1:fe:e4:3a:62:3a:d9:76:e3:6b:93:e2:ce:a0:d9:a3:d2:
8e:95:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:04 2026 by rpki-client