
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: as3meMOjGk/eh/TiP81KrdxU5M+I7laXfnBKZR6+brk=
Subject key identifier: B6:E6:C1:FB:99:50:79:CC:99:27:ED:62:FA:A2:81:51:BE:13:42:65
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 7B8FD13575ABBA8FB26AD7FB88F72F347AB83DDF
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 07:03:34 +0000
ROA not before: Fri 24 Apr 2026 06:58:34 +0000
ROA not after: Fri 23 Apr 2027 07:03:34 +0000
asID: 38019
IP address blocks: 139.220.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8f:d1:35:75:ab:ba:8f:b2:6a:d7:fb:88:f7:2f:34:7a:b8:3d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 06:58:34 2026 GMT
Not After : Apr 23 07:03:34 2027 GMT
Subject: CN=B6E6C1FB995079CC9927ED62FAA28151BE134265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:3a:4f:fd:58:9e:0a:12:16:46:63:35:19:
aa:41:c3:11:7d:57:c1:7a:a0:e3:26:c3:2c:6d:5e:
12:a6:09:6a:ca:e9:d5:7a:6a:cc:c3:4d:86:8e:86:
05:fb:ac:86:e0:08:6c:a9:cd:9d:8d:cf:f2:bf:f5:
98:fe:3d:ff:31:38:a0:d8:7b:43:e7:a2:ed:22:b2:
10:5c:ea:a2:70:29:37:a0:06:0f:98:7d:af:be:ed:
32:38:86:21:c4:80:e1:3e:d8:9c:2c:99:ea:85:22:
77:b0:a2:ce:a2:af:fe:cb:2d:f7:7b:1e:e3:ff:21:
62:55:1a:c5:d2:2c:c2:9e:ce:d5:ec:50:76:c2:d6:
fd:ea:3e:02:46:e9:b9:56:b9:70:20:25:16:04:90:
9b:6f:45:47:b1:35:9f:45:b8:9c:e4:b7:60:df:64:
98:8b:a0:32:6e:81:03:b5:f6:3d:69:7d:6e:32:16:
2e:43:fb:51:5e:cd:fb:6e:d2:26:41:20:f4:11:57:
dc:84:9b:fc:62:de:f4:58:6f:9f:a8:9e:ef:e5:16:
9d:1d:a3:18:de:cd:17:78:73:03:ab:10:e7:72:63:
ea:95:4b:a0:95:e7:60:b9:f0:7c:7b:4a:9a:eb:0d:
aa:02:2c:b4:7d:a7:0a:45:1b:fb:35:fa:61:7f:97:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E6:C1:FB:99:50:79:CC:99:27:ED:62:FA:A2:81:51:BE:13:42:65
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136322e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:90:44:1b:61:34:fe:2f:20:57:a4:5a:b1:52:aa:e7:26:6e:
6b:c0:4e:d2:ba:cd:a1:d8:d4:e7:a9:3a:84:5b:98:bf:c5:4a:
a4:b5:a3:f3:45:71:11:b3:0d:6d:a0:80:10:66:55:e3:6c:ce:
0d:37:43:f9:97:1b:8e:7e:d9:31:00:b6:bc:41:a6:d1:be:93:
3d:13:ae:ba:41:41:dc:c3:9d:aa:58:0e:20:17:52:d1:20:0b:
f5:18:3f:9f:17:10:f0:b1:6b:72:33:d0:20:11:54:c2:43:6f:
91:25:68:82:0a:7a:78:98:bc:da:d3:ec:8c:0e:2f:f7:7f:24:
ef:7d:30:36:ef:f8:c9:be:c7:c8:d1:b1:b2:81:c7:7e:10:0d:
34:08:9d:1e:1e:1a:75:0b:82:1a:84:f7:2d:3d:a3:b1:78:12:
88:b0:ca:c0:17:80:39:ea:42:37:e5:0b:3b:9f:32:4d:3a:c1:
d1:c1:c9:ea:aa:a9:98:04:78:a1:d9:74:16:42:f7:45:ef:df:
e4:99:11:b0:fe:bd:80:b3:2f:ef:c3:ea:cb:8a:66:fc:7a:d3:
a0:7a:b2:42:1c:47:c4:d7:59:41:13:41:d7:f0:95:cd:5b:be:
84:6b:e3:47:34:2f:f3:bc:3a:74:40:ad:19:94:ed:5c:91:74:
3f:0a:48:b0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUe4/RNXWruo+yatf7iPcvNHq4Pd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MjQwNjU4MzRaFw0yNzA0MjMwNzAzMzRaMDMxMTAvBgNV
BAMTKEI2RTZDMUZCOTk1MDc5Q0M5OTI3RUQ2MkZBQTI4MTUxQkUxMzQyNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqDpP/VieChIWRmM1GapBwxF9
V8F6oOMmwyxtXhKmCWrK6dV6aszDTYaOhgX7rIbgCGypzZ2Nz/K/9Zj+Pf8xOKDY
e0Pnou0ishBc6qJwKTegBg+Yfa++7TI4hiHEgOE+2JwsmeqFInewos6ir/7LLfd7
HuP/IWJVGsXSLMKeztXsUHbC1v3qPgJG6blWuXAgJRYEkJtvRUexNZ9FuJzkt2Df
ZJiLoDJugQO19j1pfW4yFi5D+1Fezftu0iZBIPQRV9yEm/xi3vRYb5+onu/lFp0d
oxjezRd4cwOrEOdyY+qVS6CV52C58Hx7SprrDaoCLLR9pwpFG/s1+mF/l6TTAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUtubB+5lQecyZJ+1i+qKBUb4TQmUwHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzEzNjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYvcojANBgkqhkiG9w0BAQsFAAOCAQEAqJBEG2E0/i8gV6RasVKq
5yZua8BO0rrNodjU56k6hFuYv8VKpLWj80VxEbMNbaCAEGZV42zODTdD+Zcbjn7Z
MQC2vEGm0b6TPROuukFB3MOdqlgOIBdS0SAL9Rg/nxcQ8LFrcjPQIBFUwkNvkSVo
ggp6eJi82tPsjA4v938k730wNu/4yb7HyNGxsoHHfhANNAidHh4adQuCGoT3LT2j
sXgSiLDKwBeAOepCN+ULO58yTTrB0cHJ6qqpmAR4odl0FkL3Re/f5JkRsP69gLMv
78Pqy4pm/HrToHqyQhxHxNdZQRNB1/CVzVu+hGvjRzQv87w6dECtGZTtXJF0PwpI
sA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:17:06 2026 by rpki-client