
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: 559V2ST55D7q7IXajt5kmcKULebt9VpNWdKbZhqOGvg=
Subject key identifier: FE:C8:51:46:E6:89:31:52:AF:85:3A:47:E0:1E:B9:02:B1:87:18:48
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 5C6230B143FCFEDA6538EDD7FF7586F582A71022
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 07:03:34 +0000
ROA not before: Fri 24 Apr 2026 06:58:34 +0000
ROA not after: Fri 23 Apr 2027 07:03:34 +0000
asID: 38019
IP address blocks: 139.220.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:62:30:b1:43:fc:fe:da:65:38:ed:d7:ff:75:86:f5:82:a7:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 06:58:34 2026 GMT
Not After : Apr 23 07:03:34 2027 GMT
Subject: CN=FEC85146E6893152AF853A47E01EB902B1871848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:3f:6d:c9:2b:4b:ea:d2:d0:ef:4e:f3:ea:
5b:68:f7:ee:c6:3d:89:bd:ba:3e:ce:6f:a3:81:08:
d5:0f:2a:17:c1:94:7d:c2:73:c1:5b:31:cc:0e:68:
9e:14:a3:b7:97:ab:cf:44:40:27:d1:b6:85:59:7b:
df:10:ff:b7:9b:42:95:2d:4f:10:e3:13:44:b4:d7:
45:c7:85:60:b2:5d:50:b0:5d:93:81:1e:30:a1:98:
2e:97:ae:88:dc:b4:a8:40:b4:37:ae:03:ac:c8:24:
f1:6e:0e:de:5e:7a:fe:da:87:38:75:12:2a:c8:47:
b0:cb:ea:45:4c:e0:ca:ee:04:6c:20:65:c1:b1:ea:
09:9b:0f:0c:19:aa:38:d8:11:42:92:8f:7e:ca:2b:
f1:f7:89:8a:5a:d8:a6:6f:fa:35:29:ae:3b:f3:14:
54:bf:eb:b2:0f:c8:0f:06:9b:25:2f:47:c0:be:54:
49:0f:e5:67:c0:8b:da:fa:c3:ef:5f:c5:6a:b1:13:
88:75:64:33:d2:51:da:94:55:d2:d2:99:e4:de:78:
32:7b:f7:9d:b5:6b:b1:19:4a:0e:c6:c8:ca:ea:02:
63:cf:e0:ac:6b:8d:64:5f:40:f7:52:9e:9f:48:b8:
8e:4a:7d:4f:bc:73:10:28:85:25:99:3c:3e:66:aa:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C8:51:46:E6:89:31:52:AF:85:3A:47:E0:1E:B9:02:B1:87:18:48
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134382e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.148.0/23
Signature Algorithm: sha256WithRSAEncryption
63:44:42:d1:5b:d9:ac:f5:0f:04:9d:76:36:15:46:25:9e:90:
84:e3:c1:b9:49:14:36:4c:6a:73:5f:bd:23:96:8d:55:1d:1e:
7e:36:20:3d:d6:c3:1d:32:07:2a:1d:ec:b4:ee:be:2b:cc:01:
24:38:01:ba:90:e8:c3:aa:9d:4e:9a:9a:79:38:c1:93:6c:dd:
4b:5e:57:1d:66:ef:e8:97:27:5b:e6:ce:a2:2f:f0:3b:dc:78:
d7:75:9e:2d:cc:42:aa:4a:1f:ba:f6:ca:a8:4e:13:76:ba:7e:
3d:aa:30:80:7b:c1:bd:7b:c5:4e:f0:11:30:75:1f:c6:24:5d:
6e:6e:f6:17:5a:14:08:0a:4e:6b:8b:cc:75:54:88:9f:a5:63:
36:ab:92:a0:5f:8a:c9:bd:33:9b:bf:b8:c4:a2:c4:4f:57:7e:
31:cc:6e:bf:48:97:08:7d:db:51:6b:9f:1f:60:fa:e8:31:95:
1a:86:6e:62:9c:51:19:66:40:e0:b5:14:b7:0e:73:87:43:fe:
fa:9f:2d:f4:b4:d9:3f:40:cb:71:ae:ac:d7:67:29:f6:d6:d4:
ab:68:c2:52:e4:1a:24:08:54:78:7e:6c:4a:db:ab:34:da:c6:
e7:a9:ed:51:5a:78:21:ad:e3:4d:4e:c4:63:b5:1b:13:25:01:
25:32:e4:de
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXGIwsUP8/tplOO3X/3WG9YKnECIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MjQwNjU4MzRaFw0yNzA0MjMwNzAzMzRaMDMxMTAvBgNV
BAMTKEZFQzg1MTQ2RTY4OTMxNTJBRjg1M0E0N0UwMUVCOTAyQjE4NzE4NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndT9tyStL6tLQ707z6lto9+7G
PYm9uj7Ob6OBCNUPKhfBlH3Cc8FbMcwOaJ4Uo7eXq89EQCfRtoVZe98Q/7ebQpUt
TxDjE0S010XHhWCyXVCwXZOBHjChmC6XrojctKhAtDeuA6zIJPFuDt5eev7ahzh1
EirIR7DL6kVM4MruBGwgZcGx6gmbDwwZqjjYEUKSj37KK/H3iYpa2KZv+jUprjvz
FFS/67IPyA8GmyUvR8C+VEkP5WfAi9r6w+9fxWqxE4h1ZDPSUdqUVdLSmeTeeDJ7
9521a7EZSg7GyMrqAmPP4KxrjWRfQPdSnp9IuI5KfU+8cxAohSWZPD5mqiI3AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU/shRRuaJMVKvhTpH4B65ArGHGEgwHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzEzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYvclDANBgkqhkiG9w0BAQsFAAOCAQEAY0RC0VvZrPUPBJ12NhVG
JZ6QhOPBuUkUNkxqc1+9I5aNVR0efjYgPdbDHTIHKh3stO6+K8wBJDgBupDow6qd
TpqaeTjBk2zdS15XHWbv6JcnW+bOoi/wO9x413WeLcxCqkofuvbKqE4Tdrp+Paow
gHvBvXvFTvARMHUfxiRdbm72F1oUCApOa4vMdVSIn6VjNquSoF+Kyb0zm7+4xKLE
T1d+Mcxuv0iXCH3bUWufH2D66DGVGoZuYpxRGWZA4LUUtw5zh0P++p8t9LTZP0DL
ca6s12cp9tbUq2jCUuQaJAhUeH5sSturNNrG56ntUVp4Ia3jTU7EY7UbEyUBJTLk
3g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:51:01 2026 by rpki-client