
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138342e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3138342e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: H34duMiFUurb+L/FY5vS3MnR6+76QtSALXJwpRYMYzw=
Subject key identifier: 4A:29:91:2B:C9:C6:18:70:C0:0F:08:3A:7A:4F:03:1D:23:9B:1D:C3
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 08054E57E74C7A373DBCD0D137046F430A77A27F
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138342e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 07:03:33 +0000
ROA not before: Fri 24 Apr 2026 06:58:33 +0000
ROA not after: Fri 23 Apr 2027 07:03:33 +0000
asID: 38019
IP address blocks: 139.220.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:05:4e:57:e7:4c:7a:37:3d:bc:d0:d1:37:04:6f:43:0a:77:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 06:58:33 2026 GMT
Not After : Apr 23 07:03:33 2027 GMT
Subject: CN=4A29912BC9C61870C00F083A7A4F031D239B1DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:93:7f:37:90:15:8a:48:34:a5:d2:83:31:
51:99:e7:9a:a0:4a:b9:70:ac:f0:c3:f0:2a:f2:4c:
49:0d:cc:53:d0:92:ae:20:10:0b:e7:4a:d9:4c:02:
01:c3:87:9e:c1:94:fe:25:d5:76:5d:64:85:dc:1b:
47:da:25:a1:55:01:8b:43:7a:e6:a6:c8:8f:b7:98:
ea:99:de:ff:88:63:26:40:ac:67:3f:42:e1:99:e0:
ad:c4:cb:15:5f:ff:b7:bf:53:7a:b9:e1:9d:7b:ac:
8e:6c:9f:07:5b:81:df:9a:3c:ca:69:b1:fd:e4:20:
53:a4:e6:db:49:31:54:6d:85:81:bc:23:c0:c5:47:
eb:b4:5a:32:39:97:ee:00:36:57:ca:d6:fa:31:68:
f9:9f:0e:33:7c:d6:6b:4c:20:3f:11:9f:9b:49:d4:
27:5e:10:04:55:8e:96:39:4c:25:2c:80:e7:b6:cd:
03:4b:2f:14:3d:4a:88:a5:c0:cb:f0:58:71:b2:c4:
2b:ac:63:64:bf:69:41:4e:48:3d:86:1b:a3:d7:fb:
e7:02:6b:5c:e5:4a:56:cb:ec:82:de:d7:29:c5:85:
16:72:71:76:3c:f3:b1:26:b2:c4:60:a4:1e:74:d3:
eb:e7:5a:16:25:1f:28:1a:1a:2a:3d:ce:d3:f0:ef:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:91:2B:C9:C6:18:70:C0:0F:08:3A:7A:4F:03:1D:23:9B:1D:C3
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138342e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.184.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:11:9c:6d:c7:0a:75:47:34:90:eb:a3:d4:ad:d9:7e:17:61:
45:3b:1c:34:48:4e:fb:32:ec:58:8e:ef:c6:89:b3:9b:c0:15:
ef:ca:c5:c2:40:e5:02:7a:1d:1c:91:15:eb:97:75:21:19:d2:
22:47:19:0e:36:2e:91:7c:b4:14:f5:82:14:c5:34:0b:c3:02:
a5:be:18:1b:a7:ac:8e:43:8c:ac:a0:69:35:68:48:93:b6:de:
f5:8d:18:54:e4:49:71:61:ce:89:08:3f:73:b6:55:58:50:c6:
79:71:08:81:2f:99:ff:87:91:6d:ff:64:7f:7d:49:9d:46:f9:
66:71:43:aa:40:27:93:87:ce:37:5a:0b:4f:d1:bb:90:37:0c:
41:17:8d:68:2c:a7:87:37:a8:79:2b:4b:44:29:96:10:4b:28:
a1:ff:14:06:e2:69:09:7c:53:38:0b:28:a0:48:fd:da:a0:30:
16:78:58:c8:94:4b:e2:e6:ee:45:f3:bf:31:24:f5:07:b7:f8:
88:3e:79:94:82:9b:0f:80:c2:17:95:89:d1:cb:1b:b2:a0:73:
5b:55:f2:e7:a4:07:39:28:32:ca:19:11:56:ec:64:d6:73:1c:
9e:46:ba:a4:a9:18:1c:01:77:8e:c1:70:67:16:52:d9:f6:c2:
22:07:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:26 2026 by rpki-client