
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232302e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3232302e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: umXHY9U5+wnok54lRSf1FAwQyCC7rf7hf1SfimHtPAE=
Subject key identifier: 8B:A1:61:E6:76:F8:56:02:54:B3:AC:18:DB:29:D4:05:F9:1A:90:73
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 55E03C9AB28F04FE73BC117C14BAB2AEDC6DEF3C
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232302e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 07:05:36 +0000
ROA not before: Fri 24 Apr 2026 07:00:36 +0000
ROA not after: Fri 23 Apr 2027 07:05:36 +0000
asID: 38019
IP address blocks: 139.220.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e0:3c:9a:b2:8f:04:fe:73:bc:11:7c:14:ba:b2:ae:dc:6d:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 07:00:36 2026 GMT
Not After : Apr 23 07:05:36 2027 GMT
Subject: CN=8BA161E676F8560254B3AC18DB29D405F91A9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:84:e8:f3:f6:76:04:4f:7a:ea:bd:ff:3a:
38:bb:aa:ae:48:b7:5a:78:1f:f4:15:0b:6e:7c:26:
84:19:4b:12:43:cf:fe:d0:7a:88:31:c1:33:16:71:
23:1f:34:d5:d4:99:4e:5b:d5:c9:b6:2f:a5:ee:e2:
cb:a9:de:25:73:cc:6a:aa:9b:39:67:1d:3a:f5:3f:
39:03:25:1e:6c:68:e1:45:90:b5:7b:d9:d4:d9:5e:
95:3a:81:4a:8e:0c:59:03:34:9e:2c:2d:0b:16:87:
1b:85:f8:6c:13:5d:1f:ce:00:2b:8b:99:7d:4a:a0:
c1:6c:e0:d0:f4:cc:8c:6b:7c:7e:00:57:16:63:a9:
db:58:82:06:49:24:52:cf:d2:ae:85:5a:8e:b6:01:
bd:b0:9f:0b:e9:31:34:6e:2b:0b:4b:83:aa:b8:92:
7c:3b:77:13:71:00:fe:a7:ce:5a:ed:a2:a9:02:76:
a1:95:c9:93:da:de:ba:1a:a0:90:d4:0b:b6:ad:ea:
db:33:08:a1:d7:51:82:29:2c:54:b9:46:02:5b:b5:
10:6b:cf:e4:e5:16:7b:bc:80:14:ed:82:b9:b1:5f:
1d:4f:a6:65:ee:37:24:e1:d3:3b:61:29:ef:46:97:
ac:b4:ac:8a:4f:7c:33:fb:b6:d5:c5:4b:f5:93:4a:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:61:E6:76:F8:56:02:54:B3:AC:18:DB:29:D4:05:F9:1A:90:73
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232302e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.220.0/23
Signature Algorithm: sha256WithRSAEncryption
48:4f:fc:61:37:6d:91:3f:98:5c:8c:a8:42:b6:39:88:e9:ce:
cf:fa:f6:38:32:33:93:42:ec:e1:3a:e2:1d:90:cc:cf:1a:4f:
6e:1c:da:7c:20:3f:ee:ea:82:03:21:f3:08:8b:9b:84:c3:b5:
1f:91:0d:9b:67:ef:39:13:ae:c3:09:de:24:2a:17:e8:d9:30:
b0:e4:02:7b:7d:55:15:b6:42:a8:9f:91:2f:e6:e9:6c:3b:e2:
b9:4b:92:c2:15:c2:fd:09:9c:c0:7a:b5:13:25:a5:8f:3d:14:
3e:d4:8b:78:22:84:85:ed:e4:2f:48:54:6b:28:7f:36:bd:a7:
56:4e:db:01:07:1b:db:62:9e:21:75:18:d3:56:9e:c7:c6:27:
ea:6e:15:e8:97:cd:e7:a0:70:7c:f4:7a:b2:a0:6b:28:c7:e5:
84:59:98:31:f9:cc:df:e0:32:b8:f1:91:33:c8:ca:e2:44:ed:
65:29:57:ea:cf:8d:0a:94:7a:01:7c:3f:b7:f0:60:eb:3a:5e:
ba:fe:87:55:fd:f6:d4:b7:6c:31:f5:88:d7:ae:a7:c6:eb:2a:
24:d4:c8:fc:96:46:aa:4b:58:7a:38:f2:d1:4e:1d:ba:6c:43:
26:11:1f:49:6f:f8:88:e2:43:73:cd:2e:7b:b2:14:7f:e1:42:
20:9f:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:15 2026 by rpki-client