
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32312d3231203d3e2039383038.roa
File: 3131332e31382e3132382e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier: gMy1rZqb+LzobrG1/I5mSHoehrX6jvVnxEDEXNbeSNI=
Subject key identifier: D2:D2:EE:D3:E1:3C:10:E7:F3:47:55:47:66:C8:C3:C6:10:01:BA:D1
Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial: 56C3003F9ECBE9633F921B586E81722E1AA63C32
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32312d3231203d3e2039383038.roa
Signing time: Mon 01 Jun 2026 08:24:23 +0000
ROA not before: Mon 01 Jun 2026 08:19:23 +0000
ROA not after: Mon 31 May 2027 08:24:23 +0000
asID: 9808
IP address blocks: 113.18.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c3:00:3f:9e:cb:e9:63:3f:92:1b:58:6e:81:72:2e:1a:a6:3c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373B103C68D9B84455801815E437C49839794406
Validity
Not Before: Jun 1 08:19:23 2026 GMT
Not After : May 31 08:24:23 2027 GMT
Subject: CN=D2D2EED3E13C10E7F347554766C8C3C61001BAD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:7b:6b:5b:b0:e9:5c:c8:a7:43:c7:04:8c:
75:d3:a0:f2:d4:a7:cc:64:74:c5:5b:30:4f:32:d1:
1a:10:1e:59:a9:16:f9:50:1e:a9:de:f7:d9:f5:0f:
b6:98:2b:c0:5d:bb:43:0a:a3:32:c0:6f:6c:f1:cc:
3b:e5:3e:6f:00:ad:c3:3b:b1:3f:30:88:13:d3:71:
38:c9:d2:67:84:ba:76:40:52:73:b6:23:6b:32:b6:
d9:0b:3c:71:9f:a7:fc:ad:6c:82:6b:15:75:09:84:
27:76:3b:1a:f5:b0:87:3b:57:46:2a:ea:75:50:65:
90:f2:af:c6:96:ac:00:17:eb:55:32:fc:80:03:05:
aa:3d:59:2d:36:b7:36:1a:a8:ec:f6:aa:5e:c1:5a:
78:95:7d:8d:09:1d:a7:6c:ae:20:3e:a1:d1:ad:96:
0c:49:87:e7:59:cf:61:47:7d:cf:ca:2f:c6:a0:34:
80:6d:67:c3:2f:de:02:13:5f:ce:cc:c3:bd:77:2c:
f3:d5:ee:93:33:f6:5a:de:e1:d7:88:5e:d7:c2:f4:
d0:f0:fa:c2:1d:40:7a:90:8f:39:4b:0d:40:8a:aa:
81:25:c2:31:73:0a:b7:16:79:99:65:8c:12:ca:de:
5a:74:28:af:13:8b:c4:2e:da:6d:c9:2f:7b:78:b0:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:EE:D3:E1:3C:10:E7:F3:47:55:47:66:C8:C3:C6:10:01:BA:D1
X509v3 Authority Key Identifier:
keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32312d3231203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.18.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:18:7f:9d:f5:e9:54:53:62:0f:b8:c9:ae:e7:e2:de:4e:db:
83:70:e6:83:70:3c:08:66:3c:0c:4e:45:e5:59:75:1e:69:35:
6f:32:c1:12:34:01:6e:f1:aa:ef:96:55:1c:16:14:c2:70:e5:
a8:b0:00:70:30:77:62:43:dc:0c:4e:03:85:c8:ae:1d:6d:7e:
da:da:82:64:bf:51:e9:34:43:34:f2:13:c0:a8:a0:06:94:dc:
c5:aa:97:2e:b1:87:ee:12:40:97:ce:a1:7b:05:80:95:06:8a:
5e:c8:b8:8f:f6:e5:5e:46:e9:c8:10:48:bd:a5:2c:11:86:a4:
b3:de:51:67:2a:c3:62:be:eb:a2:66:b9:e9:32:db:bd:b8:4e:
64:b6:3d:de:33:ec:7f:31:aa:dc:ce:a5:4d:68:a4:9a:25:d4:
d4:f0:01:d4:0b:03:2b:08:8b:cb:47:26:ca:bb:f8:0e:43:a1:
51:37:99:dc:a9:fb:c0:d4:2d:74:2c:c9:09:b8:1c:83:c7:78:
c7:fa:f6:5f:a8:b7:e1:8d:1f:09:3d:2d:46:10:42:d1:67:0b:
8c:ef:60:9b:65:4a:43:6d:fd:e4:c9:f5:84:28:6b:2a:f2:ed:
2c:04:6d:56:23:91:8c:79:d1:1a:49:80:13:40:82:33:53:a5:
0b:b4:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:42:11 2026 by rpki-client