
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139382e302f32332d3233203d3e2037343638.roa
File: 3133392e3232302e3139382e302f32332d3233203d3e2037343638.roa (raw, json)
Hash identifier: +8yRNcjAt0/heoMRd1r3AvuNezB+H7f8RcSV7bzaLZM=
Subject key identifier: B0:1B:10:1A:53:70:03:DD:BD:0B:B4:8D:90:AD:3E:61:A5:DC:13:A0
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 26F2E7FED413E736B53C14286378A179FC91B324
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139382e302f32332d3233203d3e2037343638.roa
Signing time: Fri 24 Apr 2026 05:45:53 +0000
ROA not before: Fri 24 Apr 2026 05:40:53 +0000
ROA not after: Fri 23 Apr 2027 05:45:53 +0000
asID: 7468
IP address blocks: 139.220.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f2:e7:fe:d4:13:e7:36:b5:3c:14:28:63:78:a1:79:fc:91:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 05:40:53 2026 GMT
Not After : Apr 23 05:45:53 2027 GMT
Subject: CN=B01B101A537003DDBD0BB48D90AD3E61A5DC13A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bb:7e:4d:a2:c7:b1:9b:c3:3f:9d:3c:3b:98:
d4:4d:62:19:91:2b:61:3e:b9:a2:54:0b:8b:3a:c6:
bf:3e:2e:76:ac:5b:03:46:3b:f4:a7:e1:a2:61:60:
75:7c:5a:03:f0:b2:43:71:6a:03:e8:67:71:31:88:
d0:6d:ce:96:7b:af:59:23:a3:e7:a0:08:27:3f:3c:
e0:44:44:d6:19:a0:c2:a9:57:3d:f5:6f:5c:44:0f:
24:cd:c2:a9:d4:51:7e:09:eb:4f:8a:65:ee:db:7a:
dd:13:af:a8:76:5e:e3:58:83:59:2b:27:07:a7:9d:
d7:61:b3:7a:19:05:b9:de:c0:83:9b:e1:94:f8:9b:
fe:c0:6b:41:13:3b:87:b5:57:cb:ef:7d:62:da:16:
5f:31:3b:70:3e:49:81:f1:66:35:09:4e:49:1b:83:
60:50:c2:fc:53:c4:9a:3a:81:a2:0c:7d:40:d4:b9:
7f:64:fd:90:78:e6:5d:ee:25:37:58:08:0e:f8:7b:
db:89:e7:7f:82:ad:48:b8:42:91:bf:07:fd:14:ea:
2b:36:fc:76:33:4d:b3:6a:6c:42:72:7d:82:f6:1f:
16:d0:0c:8c:75:d9:28:e5:8d:54:e6:da:5f:b5:31:
3b:d1:81:9f:d0:1f:21:e2:03:d5:79:f0:97:4d:34:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:10:1A:53:70:03:DD:BD:0B:B4:8D:90:AD:3E:61:A5:DC:13:A0
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139382e302f32332d3233203d3e2037343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.198.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:e3:44:d7:67:36:4a:ff:d4:ce:56:19:0b:0a:06:de:c1:53:
00:3f:94:c0:25:e8:c0:f0:1b:68:1e:a7:43:a1:30:f7:7b:86:
6f:9f:74:89:01:c8:e3:f3:9a:65:b0:57:ea:47:63:9e:08:e9:
6a:e2:49:70:73:55:07:75:08:c4:f8:28:e8:11:02:65:bc:8f:
18:8b:13:7c:f4:47:ee:a2:94:6e:7d:82:f3:3d:be:a2:43:a7:
9d:2c:fd:af:72:e4:1b:40:fb:8d:5d:5c:c6:f9:53:d8:ca:3a:
df:4c:39:80:12:bb:be:91:9a:07:9a:f0:50:18:e0:b5:ba:2f:
8b:ae:6d:ed:3b:51:54:82:bd:c6:26:1c:3b:8a:fc:8e:0a:8d:
fd:04:01:e6:b5:36:f8:b6:1f:0d:6d:1f:86:d0:e6:f1:d0:db:
76:3e:44:21:74:71:a5:3c:32:d6:61:97:88:04:bb:f0:23:ef:
90:25:1a:d2:15:a4:c8:9f:e6:23:48:64:92:ec:7c:ee:bc:9a:
a4:56:84:45:ca:ca:69:81:90:43:84:98:e4:be:c3:85:4c:91:
e6:5b:ae:2a:37:40:0d:46:47:9b:78:17:65:60:80:76:29:56:
19:a1:b3:91:89:89:a8:e9:fa:27:c7:be:d9:55:82:13:85:53:
eb:57:2b:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:55:33 2026 by rpki-client