
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: inlVy7XCxYc11Y5KOA39S9xrb27qA9beyRNw24grw8k=
Subject key identifier: 52:EB:FF:34:F6:DF:D4:CE:CC:F7:91:12:96:38:96:2F:13:18:D6:3F
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 75EAF585AC544C383188C022D76930392387C453
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 07:01:17 +0000
ROA not before: Fri 24 Apr 2026 06:56:17 +0000
ROA not after: Fri 23 Apr 2027 07:01:17 +0000
asID: 38019
IP address blocks: 139.220.176.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ea:f5:85:ac:54:4c:38:31:88:c0:22:d7:69:30:39:23:87:c4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 06:56:17 2026 GMT
Not After : Apr 23 07:01:17 2027 GMT
Subject: CN=52EBFF34F6DFD4CECCF791129638962F1318D63F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:b6:39:11:c0:6f:ea:de:a1:9e:b8:96:c2:
b0:91:af:52:f3:08:59:28:0f:f5:a8:ed:d2:46:28:
9e:36:81:30:0d:84:59:5c:90:7c:60:69:85:bb:9b:
97:49:5f:e9:75:b1:00:98:6b:10:6a:69:73:d0:a6:
7f:83:b0:77:dc:fb:e8:bf:a0:ab:79:64:b9:09:7a:
b9:d8:ce:f4:ad:a2:f9:db:96:aa:d5:96:75:89:8f:
16:d9:37:8f:df:56:c6:9d:2e:cd:54:f3:2e:a9:c4:
ab:b4:39:93:20:7f:21:94:c0:dc:16:37:a8:25:10:
89:4a:2a:e3:6d:8b:02:9c:62:5d:73:56:10:d1:3c:
cf:b5:80:69:14:78:09:d1:b1:10:1f:5a:6a:03:01:
8c:c4:9e:f3:4d:91:1d:b0:61:0e:6a:6e:da:e9:d1:
86:74:7a:5d:69:15:d6:f3:b8:11:af:48:c0:de:b9:
d8:90:0d:63:a6:3b:77:2c:5a:d2:1a:da:f7:7b:30:
0b:17:e6:66:d5:c6:ad:6e:2b:51:8e:f7:f2:e9:41:
5f:07:52:1b:ef:c0:e5:c2:d4:e0:0e:6d:8c:a6:82:
74:d9:a9:c0:2d:9f:87:b6:d6:08:2f:cc:a5:da:ee:
b5:85:0d:a7:9b:19:34:71:fb:4d:be:8a:90:77:f8:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:FF:34:F6:DF:D4:CE:CC:F7:91:12:96:38:96:2F:13:18:D6:3F
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137362e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.176.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8e:b4:5b:c9:19:8f:a6:52:18:cf:7b:21:03:0e:6c:ca:70:
81:17:ba:0f:cd:09:80:94:c4:fa:a1:1f:91:e6:c5:e8:e5:a1:
87:6c:31:43:24:93:17:e8:0c:74:cf:e9:44:bc:1a:24:77:b9:
30:6a:76:c3:49:04:98:ea:3f:ee:9b:c5:61:53:54:1d:bf:b7:
62:e3:79:13:78:92:50:66:b8:35:3d:fc:d7:05:f0:71:f9:23:
46:76:94:f3:68:a0:20:68:25:d7:0d:07:37:0a:bd:a7:0a:43:
b4:55:1c:12:03:52:51:a8:37:a1:e0:d3:2c:32:40:c2:78:02:
d4:39:9c:8a:13:7f:e9:4b:fb:ff:32:9f:95:88:95:37:c3:dd:
87:06:fd:5a:f8:a6:f3:b6:cc:88:85:c6:f7:60:c2:13:69:94:
58:11:ba:85:a4:09:ef:a7:d8:59:49:f3:ba:3f:23:64:b4:97:
22:95:92:06:e8:e9:e7:57:5d:9c:7f:31:cc:75:04:a0:80:34:
4e:b4:da:33:d4:80:90:74:e7:38:f9:2c:00:b2:12:3a:2a:2e:
1a:40:dd:d5:c5:57:5e:68:d5:8d:c8:1f:01:0a:7f:9b:04:3d:
e7:41:ce:94:c7:41:f5:d1:3a:77:e9:00:ff:fa:f0:68:6a:f3:
0b:23:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:25 2026 by rpki-client