
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232352e302f32342d3234203d3e203337393336.roa
File: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (raw, json)
Hash identifier: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=
Subject key identifier: F0:DC:D6:30:10:C2:C6:E6:29:29:4D:E8:18:D9:B2:2E:E3:D9:33:14
Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Certificate serial: 083E1961D5A6713EA77F93855783A984DA373C8D
Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232352e302f32342d3234203d3e203337393336.roa
Signing time: Fri 05 Jun 2026 07:14:54 +0000
ROA not before: Fri 05 Jun 2026 07:09:54 +0000
ROA not after: Fri 04 Jun 2027 07:14:54 +0000
asID: 37936
IP address blocks: 36.51.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3e:19:61:d5:a6:71:3e:a7:7f:93:85:57:83:a9:84:da:37:3c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Validity
Not Before: Jun 5 07:09:54 2026 GMT
Not After : Jun 4 07:14:54 2027 GMT
Subject: CN=F0DCD63010C2C6E629294DE818D9B22EE3D93314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:d7:39:bc:6d:90:03:d9:59:01:57:f0:be:
6b:59:92:29:55:32:60:be:3f:94:3d:d7:6b:fa:49:
4e:10:ff:fd:c4:66:a1:97:ad:00:35:6d:79:d3:a3:
91:f5:5f:b8:90:33:79:1d:e8:32:b9:fe:22:8b:cd:
04:4c:62:f2:ea:c1:3d:98:2a:70:fd:d0:46:f1:c0:
c1:3d:b2:db:49:76:14:b5:e3:05:6a:ca:56:a0:80:
05:42:45:33:7f:f1:72:00:85:aa:7f:d5:c1:9c:a1:
73:0e:56:b7:54:9f:dd:58:84:80:5c:66:d0:82:39:
b6:93:0f:18:3a:f8:b1:a6:d4:b0:00:6f:50:22:24:
0f:34:d9:65:14:e9:58:84:2a:d4:75:06:9a:ad:de:
8c:ae:a9:64:81:bb:81:ae:31:d8:e5:4e:0f:7d:24:
e9:6c:d6:55:82:d9:8c:5e:ea:f6:ab:78:ed:fb:dd:
76:34:b5:4e:15:7d:5f:fc:92:ef:70:5a:8c:35:0a:
be:c8:b5:10:29:6b:92:03:68:1e:16:be:73:45:db:
0e:00:8a:12:25:ea:2d:50:04:8d:2a:78:72:3a:f6:
77:3d:6a:9f:0d:18:20:28:79:5d:f4:46:2a:1f:7c:
52:c5:d0:0a:6e:01:4a:4c:5c:b1:96:2e:75:2b:7f:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:D6:30:10:C2:C6:E6:29:29:4D:E8:18:D9:B2:2E:E3:D9:33:14
X509v3 Authority Key Identifier:
keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232352e302f32342d3234203d3e203337393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.51.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:03:7b:4b:f2:9c:38:8f:77:4b:6f:0e:2f:16:4f:20:5b:fe:
54:dc:51:f2:46:3e:40:52:0f:b4:63:f7:52:f4:ee:0f:41:99:
90:18:2c:ef:41:db:13:b4:4b:4f:65:fc:f3:3b:05:d8:98:39:
d1:66:f9:c3:ad:7c:27:aa:28:ef:f4:72:07:65:2d:86:6c:4e:
af:55:b5:58:b4:fd:e0:05:1d:72:2c:ba:de:44:e9:97:1c:de:
77:7e:ff:36:6d:63:0b:26:07:f7:21:e8:ea:06:46:02:3b:09:
80:4c:1e:ec:83:66:55:47:88:2b:e6:80:b7:e4:d4:e8:cf:90:
e9:2a:a9:39:e3:59:3e:d3:8e:f1:10:82:31:47:0f:05:ba:07:
1f:77:b2:c9:69:99:c4:d5:63:00:3d:3d:d7:08:3e:16:8e:ea:
08:cd:4f:48:93:59:80:72:f7:cb:da:e0:a6:48:2e:73:22:83:
22:8d:ce:41:0b:fc:bf:f0:a3:33:06:2b:35:77:10:e0:8c:9f:
99:0d:f3:8f:8b:77:14:76:22:41:fc:13:67:7f:61:4e:ae:ea:
0c:90:8e:e7:70:09:bf:5d:3b:71:ce:fa:e1:cd:09:9d:8d:fa:
81:a4:f5:b7:ea:16:c7:91:68:09:2e:61:96:48:8e:96:ff:e7:
7c:da:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:38 2026 by rpki-client