
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e2030.roa
File: 3133392e3232302e3132382e302f31382d3234203d3e2030.roa (raw, json)
Hash identifier: OxvxQUrNQ+yti9QT7hISpNZBLqtlGgY601TrKIBaeL0=
Subject key identifier: F4:B9:DB:FC:DB:F1:08:10:93:AE:95:39:C7:36:FA:9E:D5:52:85:A9
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 790C90779827BED93CE6A9E7D54E60DE1DFEB574
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e2030.roa
Signing time: Fri 24 Apr 2026 06:49:59 +0000
ROA not before: Fri 24 Apr 2026 06:44:59 +0000
ROA not after: Fri 23 Apr 2027 06:49:59 +0000
asID: 0
IP address blocks: 139.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0c:90:77:98:27:be:d9:3c:e6:a9:e7:d5:4e:60:de:1d:fe:b5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 06:44:59 2026 GMT
Not After : Apr 23 06:49:59 2027 GMT
Subject: CN=F4B9DBFCDBF1081093AE9539C736FA9ED55285A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:e2:87:86:ed:0f:43:d0:30:3e:64:96:e4:
38:2d:62:e7:b4:16:c8:89:b9:d0:37:dc:af:02:6d:
49:5f:04:1e:18:ab:6f:ba:06:e7:a2:bf:6f:bc:cc:
04:39:27:32:d4:31:9c:0a:8b:e4:44:10:a0:7a:c4:
a1:56:89:0a:01:e2:7e:69:33:33:70:bb:e4:7e:41:
b6:38:9a:e7:2c:20:85:0a:24:8c:f3:24:14:79:52:
cb:de:26:34:be:3e:1c:79:6c:49:fc:68:3b:4f:6f:
5e:f1:0e:58:a8:ca:4c:fa:29:ce:8a:cb:cb:d6:12:
b6:63:e6:8d:ed:a6:ff:29:f4:86:b3:6c:fe:6a:b6:
c6:1e:7a:f7:27:66:b9:d0:a7:2a:80:ac:6c:61:b3:
be:a7:de:5a:a2:26:d7:55:0f:54:51:4c:50:4b:c2:
66:b1:2e:5a:a3:52:d9:1c:09:eb:5c:78:95:ef:3b:
e3:ba:ef:03:5a:b1:db:01:69:06:29:45:71:de:1d:
df:a8:33:79:4a:62:08:3f:1f:9e:6a:c8:3f:83:a6:
69:81:47:64:8f:82:64:00:ed:b8:f4:15:16:89:f6:
2b:5d:63:bc:d9:b4:08:cc:84:25:ff:b6:45:70:fe:
1f:b0:c8:02:77:75:c2:de:a4:00:aa:aa:20:b0:94:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:DB:FC:DB:F1:08:10:93:AE:95:39:C7:36:FA:9E:D5:52:85:A9
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:99:a7:7b:b0:32:49:da:bb:e2:5e:93:4b:f6:99:fa:f3:8a:
b3:7b:b6:f9:1d:76:a8:a1:b3:eb:29:5b:d7:83:78:a5:e6:a3:
94:ee:fb:8e:58:27:79:e8:6a:64:1d:ec:f9:09:e2:df:dc:c0:
ee:2d:35:15:30:4d:aa:9a:20:bd:a7:0f:f2:ba:02:58:1a:50:
f1:a0:23:91:78:b4:26:b7:c4:e6:2b:ce:50:fe:87:97:04:0c:
85:0d:fb:56:5c:e4:2a:40:83:29:67:29:b7:d0:5c:7e:a0:4c:
c6:0e:28:21:4b:56:4f:83:13:b8:46:f4:86:f3:62:b6:71:55:
75:5e:51:e9:58:f6:00:60:e1:af:a9:08:c0:3f:ed:44:64:9d:
7f:d2:4d:ce:6e:25:08:06:f2:c4:a8:84:07:af:10:29:cc:22:
ec:7f:da:c1:75:dd:4c:bf:d3:91:e0:b4:7a:32:91:85:5f:a9:
d2:96:2c:38:a5:cf:52:d1:ba:c8:ca:7c:39:09:0b:6a:3e:f3:
a0:c3:6a:a7:e6:67:ae:91:99:53:15:7f:5a:a7:8c:d8:a5:31:
c9:92:8d:62:a8:c1:21:58:e8:22:22:3e:2e:e1:35:17:c5:4d:
4d:1b:b4:aa:db:d4:52:60:5d:7e:6e:4e:c2:40:7f:ef:59:72:
6a:84:53:6f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUeQyQd5gnvtk85qnn1U5g3h3+tXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MjQwNjQ0NTlaFw0yNzA0MjMwNjQ5NTlaMDMxMTAvBgNV
BAMTKEY0QjlEQkZDREJGMTA4MTA5M0FFOTUzOUM3MzZGQTlFRDU1Mjg1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SuKHhu0PQ9AwPmSW5DgtYue0
FsiJudA33K8CbUlfBB4Yq2+6Bueiv2+8zAQ5JzLUMZwKi+REEKB6xKFWiQoB4n5p
MzNwu+R+QbY4mucsIIUKJIzzJBR5UsveJjS+Phx5bEn8aDtPb17xDlioykz6Kc6K
y8vWErZj5o3tpv8p9IazbP5qtsYeevcnZrnQpyqArGxhs76n3lqiJtdVD1RRTFBL
wmaxLlqjUtkcCetceJXvO+O67wNasdsBaQYpRXHeHd+oM3lKYgg/H55qyD+DpmmB
R2SPgmQA7bj0FRaJ9itdY7zZtAjMhCX/tkVw/h+wyAJ3dcLepACqqiCwlEVzAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU9Lnb/NvxCBCTrpU5xzb6ntVShakwHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjcxNjE5LzEvMzEzMzM5MmUzMjMy
MzAyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG
i9yAMA0GCSqGSIb3DQEBCwUAA4IBAQB6mad7sDJJ2rviXpNL9pn684qze7b5HXao
obPrKVvXg3il5qOU7vuOWCd56GpkHez5CeLf3MDuLTUVME2qmiC9pw/yugJYGlDx
oCOReLQmt8TmK85Q/oeXBAyFDftWXOQqQIMpZym30Fx+oEzGDighS1ZPgxO4RvSG
82K2cVV1XlHpWPYAYOGvqQjAP+1EZJ1/0k3ObiUIBvLEqIQHrxApzCLsf9rBdd1M
v9OR4LR6MpGFX6nSliw4pc9S0brIynw5CQtqPvOgw2qn5meukZlTFX9ap4zYpTHJ
ko1iqMEhWOgiIj4u4TUXxU1NG7Sq29RSYF1+bk7CQH/vWXJqhFNv
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:57 2026 by rpki-client