
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa
File: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (raw, json)
Hash identifier: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=
Subject key identifier: FF:E6:82:10:35:BE:52:EF:BA:75:79:2C:B3:33:E5:DC:28:5A:C9:AD
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 4A929E4C2D974FCF0464864B67F4225140BA67AB
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa
Signing time: Tue 12 May 2026 09:17:38 +0000
ROA not before: Tue 12 May 2026 09:12:38 +0000
ROA not after: Tue 11 May 2027 09:17:38 +0000
asID: 4808
IP address blocks: 114.113.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:92:9e:4c:2d:97:4f:cf:04:64:86:4b:67:f4:22:51:40:ba:67:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: May 12 09:12:38 2026 GMT
Not After : May 11 09:17:38 2027 GMT
Subject: CN=FFE6821035BE52EFBA75792CB333E5DC285AC9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:82:c4:7c:6c:7e:12:97:a8:7d:d5:d7:ee:
d7:fa:25:e7:91:10:8a:75:c3:d1:a8:76:63:44:f5:
7a:64:cf:6a:7f:83:32:79:be:eb:23:0c:72:62:77:
67:fd:25:c3:db:9d:de:6d:eb:62:af:6f:02:f2:be:
dd:50:a7:c8:09:cc:5d:05:00:49:67:5e:68:dd:f4:
d6:59:73:76:48:c7:c2:9f:5e:93:77:32:e7:0f:e6:
f6:c5:dc:15:fe:11:4d:9e:f0:40:36:8e:08:b7:99:
81:03:ff:aa:c3:13:02:4e:66:f8:38:f8:3d:a6:bd:
11:26:71:57:85:aa:5d:1a:6c:34:a0:38:56:cf:41:
a9:8c:25:ff:d6:50:65:dc:bd:a6:8c:cf:53:11:a8:
21:1e:3d:f6:e4:9a:f5:e8:79:13:3d:2d:9d:7f:98:
47:d5:7d:a4:d4:ba:b8:08:8d:10:f8:54:4e:6e:0e:
f7:cd:66:ff:38:c5:af:44:09:3d:18:5f:ab:4f:f3:
b3:d5:6f:6a:90:9f:27:a3:ef:81:39:96:61:53:d6:
aa:44:28:18:7b:d4:2f:9e:4b:f9:55:d9:ee:52:c4:
f5:98:21:35:ee:7c:62:11:20:b6:49:40:de:9c:95:
74:4e:d9:62:a5:c5:d6:73:61:30:da:67:f4:32:8a:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:82:10:35:BE:52:EF:BA:75:79:2C:B3:33:E5:DC:28:5A:C9:AD
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:fb:e6:6b:13:93:3c:db:7f:63:9f:6c:c7:fc:d2:c4:4b:a1:
cd:f8:1f:27:77:b4:e3:e1:65:f2:6b:74:9a:45:61:cb:4b:6b:
a9:0d:62:53:7f:1d:ac:70:ee:46:b5:5a:35:19:e5:77:92:bb:
a1:d4:3d:9b:b8:fc:22:5e:11:94:cc:8e:b6:6a:12:11:62:06:
03:4d:84:37:f0:c3:62:f5:c3:d0:54:3d:99:cb:a5:25:e4:99:
7a:16:9e:57:49:71:6d:0c:35:3b:bd:b9:db:03:7c:6d:36:42:
c4:0e:83:cf:1b:8a:15:c2:83:4e:05:3c:14:d0:1d:b3:04:a9:
c0:d1:71:eb:39:68:c8:84:b0:b9:b2:99:24:50:b5:eb:96:db:
db:d7:7d:a8:1e:f3:ec:11:c7:fa:e7:92:8d:c7:75:2b:e9:11:
29:cc:11:77:a2:12:0c:70:f4:e8:fd:61:2b:27:f7:32:46:bc:
c6:19:77:94:7d:e9:28:e4:c1:8f:63:60:d4:79:ae:f9:10:f3:
d1:d7:fb:8e:df:5d:21:2c:2d:84:b6:98:a7:7a:c3:07:b8:97:
d3:d8:b8:b1:15:b6:6a:9b:ed:41:fb:82:c6:03:ba:2c:b6:64:
e7:0d:60:d0:75:9a:0c:62:6f:70:ca:38:bd:7f:b2:76:23:96:
c5:00:7b:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:26 2026 by rpki-client