
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3131372e37342e36342e302f32302d3230203d3e2034383337.roa
File: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=
Subject key identifier: AE:64:37:13:82:E3:21:15:2C:EC:D6:0F:F3:B4:A7:89:9B:07:C1:E7
Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial: 106DDF03690ABF945F84CE26121A2202213F2AB5
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3131372e37342e36342e302f32302d3230203d3e2034383337.roa
Signing time: Tue 12 May 2026 09:43:20 +0000
ROA not before: Tue 12 May 2026 09:38:20 +0000
ROA not after: Tue 11 May 2027 09:43:20 +0000
asID: 4837
IP address blocks: 117.74.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6d:df:03:69:0a:bf:94:5f:84:ce:26:12:1a:22:02:21:3f:2a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Validity
Not Before: May 12 09:38:20 2026 GMT
Not After : May 11 09:43:20 2027 GMT
Subject: CN=AE64371382E321152CECD60FF3B4A7899B07C1E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:3d:6c:10:26:c6:d1:d5:1c:85:1e:0b:fb:
4d:d7:05:f4:14:51:3f:a2:b9:8d:94:b3:64:fe:8f:
15:0f:18:38:c0:17:df:14:2e:8f:ec:91:3d:95:a2:
a2:0d:13:d7:50:e3:65:ad:aa:58:e1:68:c3:04:11:
04:93:5b:30:8e:3c:3d:0e:f9:90:3a:0b:26:ce:0e:
4e:2f:0a:96:48:9f:21:7e:e4:dc:7d:3e:a6:14:90:
7d:bd:81:e5:91:0a:32:3e:26:b8:3c:82:33:f5:7b:
30:10:18:96:c4:42:dd:a7:9a:4d:e5:78:c8:ff:87:
fb:e6:05:aa:96:44:3d:a6:93:f8:fd:97:38:b2:cc:
84:dc:57:a7:f2:fb:41:51:65:8e:95:b0:83:e5:80:
30:35:94:8a:de:25:fa:d7:5b:6d:a5:b5:49:f3:0d:
2b:ee:c5:17:02:92:17:f1:02:f2:99:ea:10:2d:7e:
60:57:b1:d3:e2:30:35:17:56:cc:29:b1:82:5d:2f:
73:cf:38:34:13:25:30:67:e2:5a:9e:43:1e:06:2e:
fe:46:9a:a4:12:7a:ae:6a:e9:18:61:92:6c:71:47:
fe:e4:4b:a9:09:de:a3:ed:ed:f0:63:a5:c8:6d:42:
13:87:a1:85:51:82:ab:5a:b0:19:b1:48:d0:41:d7:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:37:13:82:E3:21:15:2C:EC:D6:0F:F3:B4:A7:89:9B:07:C1:E7
X509v3 Authority Key Identifier:
keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3131372e37342e36342e302f32302d3230203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.74.64.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:e4:7a:9f:6a:f7:fb:6d:42:f6:46:24:7d:92:6a:07:78:f1:
d6:54:70:18:9a:2a:fb:e6:a4:77:dc:93:2e:ee:a5:48:dc:65:
d9:f7:b8:15:81:fc:36:af:48:dc:05:17:a5:72:c2:21:e8:9a:
86:fc:14:71:87:2a:b6:f3:d4:e3:6f:c4:f4:f3:9d:33:ee:43:
fc:12:e8:2e:9b:dc:f6:00:ea:2e:e4:46:fa:cd:19:22:72:5e:
5c:76:6b:02:05:92:41:a8:99:d1:4b:21:b2:b1:3f:b0:75:f8:
17:d0:b6:4f:c8:40:9e:f9:ed:0c:6f:e4:66:76:a0:fd:46:f2:
03:63:00:2c:2d:81:48:fe:9b:7e:3d:65:6c:bb:74:44:94:a2:
83:c0:60:60:dc:f3:b7:ff:e1:4c:3f:ca:d2:6b:e7:9d:89:9c:
a2:c0:76:c6:83:bf:70:0f:01:df:25:02:be:cf:f0:85:93:19:
dc:40:f7:0e:25:e1:30:ad:25:bf:fd:02:4a:6c:d0:1e:fe:05:
44:5c:95:88:6a:05:b1:2f:9f:f2:b1:ad:83:47:de:39:f7:44:
14:af:a0:18:8d:39:5d:cc:91:34:29:a3:40:20:7a:5f:6e:ab:
57:d4:b1:be:b0:82:8a:17:bc:70:50:2c:05:c4:df:f7:87:f0:
f6:1a:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:51 2026 by rpki-client