
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131342e35352e302e302f31362d3234203d3e203337393633.roa
File: 3131342e35352e302e302f31362d3234203d3e203337393633.roa (raw, json)
Hash identifier: g8wkK1g2kNElzyj6dk/ukUFxRPxia6hbos25iyD1Eaw=
Subject key identifier: B0:02:73:55:F1:26:13:28:C9:A1:5F:55:90:D0:0C:BE:AD:EE:6D:23
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 54C84D8019DD0700D95C3DE9905C19AC10D870DF
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131342e35352e302e302f31362d3234203d3e203337393633.roa
Signing time: Thu 16 Apr 2026 08:03:32 +0000
ROA not before: Thu 16 Apr 2026 07:58:32 +0000
ROA not after: Thu 15 Apr 2027 08:03:32 +0000
asID: 37963
IP address blocks: 114.55.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c8:4d:80:19:dd:07:00:d9:5c:3d:e9:90:5c:19:ac:10:d8:70:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: Apr 16 07:58:32 2026 GMT
Not After : Apr 15 08:03:32 2027 GMT
Subject: CN=B0027355F1261328C9A15F5590D00CBEADEE6D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:2c:e2:ef:fe:f9:3d:49:e2:b9:f4:6c:e5:
76:94:1a:1e:4a:ad:15:08:48:d6:3e:56:30:fb:85:
31:36:ed:f5:0e:3b:ff:5f:98:93:8f:77:8d:06:8e:
46:bf:42:81:08:67:f8:9b:82:cc:c2:f0:bf:ae:0e:
33:da:f6:b3:61:96:37:64:d9:4b:4e:dd:b0:87:e8:
75:5b:6b:d1:af:36:13:3e:6a:36:e4:a7:51:23:79:
35:85:ee:1f:15:67:72:b7:d1:f1:80:96:64:b3:60:
e9:9d:78:e3:0e:7c:68:00:41:60:de:fa:8f:61:bc:
3c:f2:5a:a9:d3:1d:c2:f5:e0:74:6b:8c:db:ab:3f:
a6:30:05:f0:fd:7e:2f:73:9f:b3:98:0a:3b:f1:f1:
70:21:72:39:16:2a:f8:ae:66:b4:f0:2b:32:8b:d9:
04:8a:05:5f:de:d0:39:0f:bf:c0:01:6f:23:99:65:
5e:16:7f:f2:5c:10:d8:b5:b8:f0:56:d1:c3:4a:91:
ab:f6:d1:4e:7f:ef:46:51:89:43:f4:f1:70:9e:d2:
b0:21:ac:f1:53:9f:3c:c4:1a:c2:12:c6:22:d1:81:
83:88:d2:97:21:9a:b6:04:a9:aa:53:a9:02:ba:cc:
9c:d3:3d:c6:25:61:a6:5c:99:32:6f:d4:f5:46:05:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:02:73:55:F1:26:13:28:C9:A1:5F:55:90:D0:0C:BE:AD:EE:6D:23
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131342e35352e302e302f31362d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.55.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:9e:d3:0f:0c:9b:9e:c0:1d:e1:78:52:c8:fd:c5:16:85:f6:
6e:40:7e:80:67:67:30:fc:ab:e6:85:3b:df:bb:26:e9:17:51:
d5:db:d5:ad:86:ee:a0:ed:0e:45:6e:e6:c3:67:2f:5f:8f:38:
d8:63:4d:70:68:47:42:2a:5c:c1:27:16:3f:fd:16:d9:27:35:
c3:09:a6:36:90:40:7d:cd:79:53:b5:b0:d0:cb:3c:32:95:c7:
f1:c6:64:f8:a2:0a:ae:fd:f3:53:4d:81:aa:ec:ba:68:f1:9f:
e3:11:33:4a:f2:0b:44:00:4c:85:6f:f2:2b:30:2d:49:78:0e:
f4:ef:76:23:0c:65:d7:be:18:2a:29:49:dd:fb:49:a4:1f:fb:
09:68:3e:5a:91:fc:18:32:f6:f0:f4:62:c9:c3:be:e2:9e:45:
7f:3d:e3:20:5c:5f:5b:5b:c7:46:c4:2e:bf:80:bb:ed:e1:2e:
55:9d:86:c4:b6:07:1b:e3:72:29:8f:e7:59:ca:75:7b:8d:04:
7a:e1:6b:4f:2c:9e:b0:e4:28:52:68:fd:0d:44:04:2e:cd:50:
85:ae:12:6b:ec:5b:2e:95:22:e9:59:e7:5c:ba:3e:d1:b9:3f:
91:20:ac:2a:c3:3b:65:cf:d6:27:da:d0:5e:a5:2e:4d:05:ad:
8b:5b:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:31 2026 by rpki-client