
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232342e302f32342d3234203d3e203337393336.roa
File: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (raw, json)
Hash identifier: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=
Subject key identifier: 15:A8:F6:47:20:6D:5B:12:01:64:A6:5B:7B:EE:67:55:DD:79:B5:F9
Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Certificate serial: 26AD26DBEEC9A5071FD9DAED69DC89239F6A6A16
Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232342e302f32342d3234203d3e203337393336.roa
Signing time: Fri 05 Jun 2026 07:14:22 +0000
ROA not before: Fri 05 Jun 2026 07:09:22 +0000
ROA not after: Fri 04 Jun 2027 07:14:22 +0000
asID: 37936
IP address blocks: 36.51.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ad:26:db:ee:c9:a5:07:1f:d9:da:ed:69:dc:89:23:9f:6a:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Validity
Not Before: Jun 5 07:09:22 2026 GMT
Not After : Jun 4 07:14:22 2027 GMT
Subject: CN=15A8F647206D5B120164A65B7BEE6755DD79B5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:b8:f7:b9:43:6c:2b:aa:bf:70:e1:cd:b2:
df:07:3f:73:2a:45:1a:c2:37:1b:46:c3:94:07:cd:
82:c3:df:a4:1a:58:fa:74:8c:52:4e:5a:36:69:14:
6b:9e:7c:5a:5c:1f:a5:9b:c8:e1:88:55:e7:95:8a:
39:19:c4:9e:2e:6f:76:31:b6:95:36:89:59:a0:e6:
54:0f:8b:2e:93:53:f0:19:66:1b:59:03:0d:8a:a1:
d9:f6:9c:fb:27:f2:b0:ed:c7:4c:98:d2:ab:f0:e0:
1c:a0:b7:02:85:dd:62:74:ec:10:4f:ab:25:48:a1:
31:fd:10:d8:74:5b:87:37:e8:b5:60:c0:ee:78:a9:
29:1b:5a:2f:a0:02:20:80:77:4e:33:79:f4:ee:f5:
fc:42:16:c7:5a:eb:3f:67:9c:68:55:ae:ba:6a:81:
fd:68:69:23:c5:8b:d4:53:55:18:9f:0e:e0:51:c1:
30:b5:c0:1f:a0:a7:64:de:40:0d:b4:99:56:bf:17:
1e:80:26:7d:a8:11:cb:4b:12:bc:46:9f:8d:b2:2f:
64:d0:86:ac:df:12:7f:77:47:04:48:64:9d:f3:1a:
64:9a:ad:0b:8a:a3:7e:04:a8:69:2a:71:b8:7e:f5:
15:76:3a:de:5d:65:54:31:45:65:62:f3:97:f8:73:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A8:F6:47:20:6D:5B:12:01:64:A6:5B:7B:EE:67:55:DD:79:B5:F9
X509v3 Authority Key Identifier:
keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232342e302f32342d3234203d3e203337393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.51.224.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1c:a3:88:44:52:b9:f7:5e:ed:76:c6:26:61:12:3d:fa:0d:
ae:17:68:84:e8:24:7d:ed:83:7e:a2:85:69:b1:38:f9:09:02:
88:5d:11:52:75:d9:10:3b:3c:ad:ce:79:40:84:d8:f0:de:ed:
9c:30:d4:61:13:d8:8c:72:47:ff:89:cf:81:5c:52:45:26:e3:
51:96:87:ca:24:4e:9e:7f:02:fb:43:37:65:37:73:22:8a:ef:
b7:8f:b0:c7:c3:29:e3:bc:4e:90:aa:81:81:e2:9b:bd:ed:eb:
68:35:f4:89:5b:18:5b:67:61:81:7d:2b:d2:e6:28:fd:cf:1e:
49:68:16:55:44:e3:4a:74:31:4d:dc:ba:8c:74:c4:11:06:bf:
e0:d5:5e:8d:fc:51:e3:9f:58:63:a0:90:60:9c:72:0e:ec:d1:
a5:fc:fa:d4:22:a4:c8:e7:c0:16:89:df:2b:2b:cd:b4:24:90:
2f:ee:61:6e:44:83:f8:b5:51:c6:ce:a9:6d:b2:2e:7c:97:32:
2d:d3:c8:9a:b5:5a:21:d2:c4:e7:13:46:a3:71:f5:90:fa:2b:
d7:f4:b7:ba:ec:60:6e:d0:54:58:19:20:94:61:a4:0c:f0:98:
72:37:35:3b:1a:67:30:39:fb:a5:18:e3:d6:5c:a6:9c:87:51:
02:97:26:28
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUJq0m2+7JpQcf2drtadyJI59qahYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC
RkExOThENTAeFw0yNjA2MDUwNzA5MjJaFw0yNzA2MDQwNzE0MjJaMDMxMTAvBgNV
BAMTKDE1QThGNjQ3MjA2RDVCMTIwMTY0QTY1QjdCRUU2NzU1REQ3OUI1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Orj3uUNsK6q/cOHNst8HP3Mq
RRrCNxtGw5QHzYLD36QaWPp0jFJOWjZpFGuefFpcH6WbyOGIVeeVijkZxJ4ub3Yx
tpU2iVmg5lQPiy6TU/AZZhtZAw2Kodn2nPsn8rDtx0yY0qvw4BygtwKF3WJ07BBP
qyVIoTH9ENh0W4c36LVgwO54qSkbWi+gAiCAd04zefTu9fxCFsda6z9nnGhVrrpq
gf1oaSPFi9RTVRifDuBRwTC1wB+gp2TeQA20mVa/Fx6AJn2oEctLErxGn42yL2TQ
hqzfEn93RwRIZJ3zGmSarQuKo34EqGkqcbh+9RV2Ot5dZVQxRWVi85f4c1EVAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUFaj2RyBtWxIBZKZbe+5nVd15tfkwHwYDVR0j
BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF
RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTY0MTY5NjQyNjM5Mzc5LzAvMzMzNjJlMzUzMTJl
MzIzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNzM5MzMzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEACQz4DANBgkqhkiG9w0BAQsFAAOCAQEAchyjiERSufde7XbGJmESPfoNrhdo
hOgkfe2DfqKFabE4+QkCiF0RUnXZEDs8rc55QITY8N7tnDDUYRPYjHJH/4nPgVxS
RSbjUZaHyiROnn8C+0M3ZTdzIorvt4+wx8Mp47xOkKqBgeKbve3raDX0iVsYW2dh
gX0r0uYo/c8eSWgWVUTjSnQxTdy6jHTEEQa/4NVejfxR459YY6CQYJxyDuzRpfz6
1CKkyOfAFonfKyvNtCSQL+5hbkSD+LVRxs6pbbIufJcyLdPImrVaIdLE5xNGo3H1
kPor1/S3uuxgbtBUWBkglGGkDPCYcjc1OxpnMDn7pRjj1lymnIdRApcmKA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:39 2026 by rpki-client