
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32342d3234203d3e2039383038.roa
File: 3131332e31382e3132382e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: 9AsiBmigy2vbYDDQyZ6WOWkfNuChEfj5I7lasWP8F84=
Subject key identifier: 7C:4E:E9:17:14:3B:4B:58:24:3C:C7:97:9D:EF:43:1C:BB:08:71:26
Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial: 67B5D096F78B350C15732DD0FC83AED71AC7ED48
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32342d3234203d3e2039383038.roa
Signing time: Fri 17 Apr 2026 08:52:43 +0000
ROA not before: Fri 17 Apr 2026 08:47:43 +0000
ROA not after: Fri 16 Apr 2027 08:52:43 +0000
asID: 9808
IP address blocks: 113.18.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b5:d0:96:f7:8b:35:0c:15:73:2d:d0:fc:83:ae:d7:1a:c7:ed:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373B103C68D9B84455801815E437C49839794406
Validity
Not Before: Apr 17 08:47:43 2026 GMT
Not After : Apr 16 08:52:43 2027 GMT
Subject: CN=7C4EE917143B4B58243CC7979DEF431CBB087126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:db:6f:88:bb:34:d8:99:cb:7c:a3:e4:2a:
41:88:c2:dd:71:a7:b5:e4:4e:50:36:10:5f:b4:f0:
5b:c8:a4:8f:ae:c2:a9:62:e2:d9:a3:dd:97:cc:e1:
0b:1e:0e:4c:e6:c8:23:5d:3a:3e:ab:a3:5c:25:56:
fd:32:c5:00:60:24:5f:69:14:df:a5:70:86:e9:b2:
e8:28:23:f7:cd:5c:4b:30:9c:e8:ab:26:95:c6:db:
7a:0c:fc:af:d3:12:3a:28:96:9b:0e:9c:09:6b:4b:
b6:78:24:14:0d:70:f9:43:17:ef:b6:d5:ac:58:0f:
94:6b:88:fe:3e:fa:de:02:5a:4e:3f:32:b1:a9:12:
ff:8e:de:3d:93:74:2a:1d:38:c9:4f:e6:fa:81:2a:
0d:f1:9a:d4:44:1e:85:e2:66:c8:4c:bf:e4:a1:f9:
34:0f:85:61:a3:c1:7f:7a:4f:65:73:0a:61:e0:e6:
15:a2:84:ad:04:71:cd:c0:87:5b:e0:84:7d:75:e8:
e0:6e:9b:5a:55:63:a9:ac:db:14:84:8d:e8:bb:9c:
e5:06:d0:16:7f:1f:89:01:e1:a4:98:9c:3a:29:e1:
c5:6a:a4:34:ec:e9:45:f4:4a:e9:7e:78:d3:f4:21:
0a:7d:9c:74:8b:5d:cd:0d:33:3d:83:7a:42:3e:8c:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:E9:17:14:3B:4B:58:24:3C:C7:97:9D:EF:43:1C:BB:08:71:26
X509v3 Authority Key Identifier:
keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.18.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d0:e0:c5:1d:04:77:e5:b9:7c:12:12:db:e2:ab:08:7c:2d:
3a:59:97:d6:d3:bb:3e:ea:1b:dc:8d:9d:e8:29:70:0b:0e:04:
a7:ae:f8:a2:3b:a7:bd:a0:a6:e8:9f:c9:bb:ce:56:12:c4:33:
31:26:c1:c9:df:35:1f:09:41:20:69:e1:92:1a:b5:3b:e6:e3:
93:47:79:df:e0:58:06:b0:9a:f3:ca:e2:c0:2e:28:e4:bc:2a:
e0:46:a2:c8:78:d4:d4:3e:cb:d0:d3:39:17:d8:f5:05:56:55:
93:6f:a1:c6:13:6e:a6:8a:a9:9a:37:75:17:21:a6:cd:59:31:
56:c3:b7:b1:b9:18:e7:fa:95:07:2a:cf:ad:f8:bf:93:a4:14:
a1:21:1b:39:69:50:1b:dd:79:dc:05:d6:67:3b:86:c4:4a:18:
47:53:92:b4:2e:4c:da:e2:af:9c:e1:91:de:04:9e:6a:e2:94:
07:15:5a:77:ba:8c:da:29:08:39:64:f8:a5:e4:49:94:b4:ed:
20:9a:0b:1b:2c:12:0b:44:9c:9c:82:9a:ce:20:63:1c:97:d7:
c3:e1:fc:be:e8:9f:99:13:33:90:38:73:4b:e7:26:35:36:12:
49:65:71:0e:73:45:4d:ce:44:8d:e5:7e:46:c6:66:1f:45:5a:
38:20:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:37 2026 by rpki-client