
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e20313430323237.roa
File: 3231382e39382e3131312e302f32342d3234203d3e20313430323237.roa (raw, json)
Hash identifier: FUq717mohrRSv7lDlcdsCUqvw+A6f6orytDOfae6o7s=
Subject key identifier: B0:CE:78:61:F8:A9:50:20:07:13:F4:07:F3:03:4A:CE:66:09:97:3D
Certificate issuer: /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial: 3E7586C9760020FE1E5389C3C812141C2233C7C3
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e20313430323237.roa
Signing time: Thu 11 Jun 2026 06:44:52 +0000
ROA not before: Thu 11 Jun 2026 06:39:52 +0000
ROA not after: Thu 10 Jun 2027 06:44:52 +0000
asID: 140227
IP address blocks: 218.98.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:75:86:c9:76:00:20:fe:1e:53:89:c3:c8:12:14:1c:22:33:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
Validity
Not Before: Jun 11 06:39:52 2026 GMT
Not After : Jun 10 06:44:52 2027 GMT
Subject: CN=B0CE7861F8A950200713F407F3034ACE6609973D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:fd:6c:07:5f:8c:bc:1c:ba:0b:fe:09:07:
93:da:74:4c:0d:3e:28:23:bd:0e:bb:fc:03:1b:5b:
96:2f:51:38:aa:1d:a2:05:3d:76:ce:84:66:28:54:
bc:98:e4:26:86:02:60:79:cb:91:1d:aa:1f:26:b1:
05:1a:d5:dd:ac:0d:0e:77:9b:c1:ec:3a:a6:22:5b:
20:f5:1f:b7:52:03:3c:e4:47:22:68:e7:11:02:8d:
5c:7d:e8:91:ed:60:73:20:d3:91:00:39:5f:fe:e2:
08:46:6e:fe:67:5d:4f:0d:28:e1:f7:72:0d:57:21:
5e:a7:3d:97:8d:88:a2:27:71:05:ee:57:2f:50:3d:
17:5c:2f:19:57:99:35:0d:9c:7a:fa:6c:cb:8d:be:
3d:33:df:2b:5d:b0:c7:5c:91:0f:2c:1f:a5:a9:7b:
c3:33:3e:06:6c:56:cf:71:31:e2:3d:e0:dc:36:9e:
af:e3:c0:38:17:ee:6a:d2:c3:ae:17:06:a6:c4:0b:
de:69:f9:04:73:16:f4:fd:4c:b8:09:89:f6:fb:53:
00:79:ea:b5:7c:2d:15:fc:f5:9a:3c:1a:f5:b4:18:
36:77:82:bd:e4:db:da:36:1b:7d:12:ba:0c:d3:b0:
63:4e:f4:44:2b:c3:72:22:b7:3e:0b:fa:32:ca:7d:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CE:78:61:F8:A9:50:20:07:13:F4:07:F3:03:4A:CE:66:09:97:3D
X509v3 Authority Key Identifier:
keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e20313430323237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:31:77:85:08:2f:27:1c:fc:2f:b2:ee:64:da:0c:77:ec:09:
c2:b3:e4:d7:55:70:d5:02:08:d9:ad:bb:f0:9f:27:d4:01:7c:
b0:37:29:e3:f7:87:6c:de:63:d6:f6:d4:06:b3:d5:b6:7a:17:
a7:6c:ac:d5:ba:9a:84:a6:f5:31:72:38:af:8d:e5:07:05:68:
4c:f2:77:59:83:2d:ab:be:ea:78:02:04:94:74:05:c3:85:db:
37:26:f4:7c:87:80:62:7e:71:a4:b8:a8:d5:85:17:be:7e:38:
96:23:c9:f6:65:20:97:1f:98:c5:b7:de:db:da:58:88:c4:96:
a8:3a:97:1c:d5:a3:fe:8d:f1:d0:35:14:0b:39:51:bc:4e:ad:
b1:e5:41:00:51:02:a1:c5:5d:5b:7c:26:28:cf:95:fa:40:2a:
d9:a1:11:1a:16:d2:67:78:ed:9c:27:65:5e:d3:c2:4b:ac:4e:
84:a2:cc:66:93:6a:24:5e:41:1e:1f:ad:4f:13:62:8d:97:ac:
29:d2:59:bc:74:84:fc:80:f2:fa:fc:6f:7a:cf:42:69:0e:40:
83:4b:ed:91:fc:53:b2:d9:94:62:ea:df:0b:1b:c4:7f:b6:2e:
d8:62:8d:d1:97:51:6d:37:24:2f:79:52:f7:73:07:5a:12:d8:
e9:32:1b:dc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUPnWGyXYAIP4eU4nDyBIUHCIzx8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcx
NjY3OTA4OTAeFw0yNjA2MTEwNjM5NTJaFw0yNzA2MTAwNjQ0NTJaMDMxMTAvBgNV
BAMTKEIwQ0U3ODYxRjhBOTUwMjAwNzEzRjQwN0YzMDM0QUNFNjYwOTk3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLa/1sB1+MvBy6C/4JB5PadEwN
PigjvQ67/AMbW5YvUTiqHaIFPXbOhGYoVLyY5CaGAmB5y5Edqh8msQUa1d2sDQ53
m8HsOqYiWyD1H7dSAzzkRyJo5xECjVx96JHtYHMg05EAOV/+4ghGbv5nXU8NKOH3
cg1XIV6nPZeNiKIncQXuVy9QPRdcLxlXmTUNnHr6bMuNvj0z3ytdsMdckQ8sH6Wp
e8MzPgZsVs9xMeI94Nw2nq/jwDgX7mrSw64XBqbEC95p+QRzFvT9TLgJifb7UwB5
6rV8LRX89Zo8GvW0GDZ3gr3k29o2G30SugzTsGNO9EQrw3Iitz4L+jLKffZ/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUsM54YfipUCAHE/QH8wNKzmYJlz0wHwYDVR0j
BBgwFoAU51NJ++o5z+1luygKMgVetxZnkIkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkzMzM5Nzg0NTkzNDA5Ny8wL0U3NTM0OUZCRUEzOUNGRUQ2NUJCMjgwQTMyMDU1
RUI3MTY2NzkwODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcxNjY3OTA4OS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTE5MzMzOTc4NDU5MzQwOTcvMC8zMjMxMzgyZTM5
MzgyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDMyMzIzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANpibzANBgkqhkiG9w0BAQsFAAOCAQEAozF3hQgvJxz8L7LuZNoM
d+wJwrPk11Vw1QII2a278J8n1AF8sDcp4/eHbN5j1vbUBrPVtnoXp2ys1bqahKb1
MXI4r43lBwVoTPJ3WYMtq77qeAIElHQFw4XbNyb0fIeAYn5xpLio1YUXvn44liPJ
9mUglx+Yxbfe29pYiMSWqDqXHNWj/o3x0DUUCzlRvE6tseVBAFECocVdW3wmKM+V
+kAq2aERGhbSZ3jtnCdlXtPCS6xOhKLMZpNqJF5BHh+tTxNijZesKdJZvHSE/IDy
+vxves9CaQ5Ag0vtkfxTstmUYurfCxvEf7Yu2GKN0ZdRbTckL3lS93MHWhLY6TIb
3A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:28:03 2026 by rpki-client