
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: qZibMjlwg6CuxmeDIxCCU5R7syRMZWajB/xDzpV1RKY=
Subject key identifier: A8:4F:2E:FA:B3:58:0C:12:F2:AC:82:D2:14:D3:88:CA:AB:E8:88:BA
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 6F4582356515A3CCC4847E3857D0C837A76C6C45
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 05:45:54 +0000
ROA not before: Fri 24 Apr 2026 05:40:54 +0000
ROA not after: Fri 23 Apr 2027 05:45:54 +0000
asID: 38019
IP address blocks: 139.220.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:45:82:35:65:15:a3:cc:c4:84:7e:38:57:d0:c8:37:a7:6c:6c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 05:40:54 2026 GMT
Not After : Apr 23 05:45:54 2027 GMT
Subject: CN=A84F2EFAB3580C12F2AC82D214D388CAABE888BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:3c:f9:ef:ad:5a:b8:65:73:89:43:07:be:
42:b5:40:75:56:02:ff:65:da:49:42:02:58:a3:db:
ba:06:b5:f0:96:63:4d:eb:1e:19:4e:ef:a5:60:9c:
0a:14:58:8d:92:e7:04:4d:8a:79:67:f1:a3:cd:f8:
b3:6a:42:e0:84:fe:a2:d7:e5:92:eb:b6:93:d0:a6:
80:28:bf:7c:53:43:cb:74:8e:47:7c:42:91:ea:8c:
7e:8a:9f:b9:42:a4:58:f9:a3:07:f6:b1:cb:9c:f2:
ae:29:95:27:03:ab:a5:ad:12:94:89:fd:8b:b0:03:
4f:7e:7c:a3:fc:74:6d:c1:12:0f:13:48:52:6e:39:
18:25:f5:4f:67:4b:cc:a3:2b:e6:c8:02:ac:b7:df:
72:5e:1b:5a:6a:d2:8b:a1:a3:b9:ee:d7:61:d9:ea:
1a:09:ea:04:8b:21:1d:61:22:ac:89:60:22:93:d4:
bc:f8:c2:74:53:cf:41:f9:c2:15:c3:19:99:e5:80:
a4:1f:9f:35:0a:d3:21:ad:b3:37:96:2f:b4:0b:f8:
10:bc:d6:a8:08:6b:a8:a7:a0:7c:18:4b:60:9b:f9:
cc:fc:e2:65:ba:6f:10:fa:dc:59:77:29:4c:af:dc:
b9:ee:65:e8:ad:2a:cd:e0:13:5a:ee:8c:ce:e6:53:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:2E:FA:B3:58:0C:12:F2:AC:82:D2:14:D3:88:CA:AB:E8:88:BA
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.192.0/23
Signature Algorithm: sha256WithRSAEncryption
96:42:f8:8a:f5:d6:a3:7c:9f:64:be:31:ce:56:d6:4b:93:3e:
65:a2:5f:43:96:c5:c9:1e:d8:66:23:45:56:77:8d:8b:33:64:
28:9d:b6:5b:7c:7f:04:3f:00:8b:a0:d6:0a:40:83:1b:ff:90:
d9:cb:9b:d5:99:39:1f:55:3e:ab:e2:5e:1d:29:f3:d3:55:cf:
c1:61:23:6b:52:45:ef:40:02:8a:f7:39:57:72:42:f6:c4:a7:
c5:8a:3b:09:c3:45:7d:ec:e9:88:f4:b2:ec:91:14:f8:5c:2f:
9b:e4:98:d3:8c:de:e3:46:e6:ff:b5:0a:35:02:97:03:36:5d:
6e:95:7b:bf:67:49:e3:2f:af:79:14:2c:55:ba:60:54:8a:75:
cf:ad:0d:57:07:a1:ca:29:cf:e1:9a:ed:52:32:34:d7:b5:2e:
d1:80:fe:8b:52:fb:f8:24:b8:5a:73:1a:c6:af:d5:22:c9:46:
3d:41:87:44:f4:74:d6:46:ec:aa:c6:41:49:5a:05:ea:84:4f:
91:09:9f:51:37:11:79:70:7e:dd:1c:d3:7e:87:3d:42:ac:3f:
d4:4f:8b:77:be:47:c2:c1:cc:4b:2a:a9:83:1a:87:ab:4d:76:
b6:16:6c:97:2a:93:86:b6:c4:09:9c:60:48:65:d2:af:72:86:
eb:de:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:31 2026 by rpki-client