
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233302e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3233302e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: gwA9eZ8Z4yHNY0/cYbVFGxFyQmA1E0s72onMSV54/Gc=
Subject key identifier: 76:9D:85:F3:B8:BC:8C:D9:A0:54:77:FD:41:CD:9E:FF:B8:ED:07:BD
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 4AE3D2E04FEF0E19225AB24C506EBB791FAC48C0
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233302e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 07:05:36 +0000
ROA not before: Fri 24 Apr 2026 07:00:36 +0000
ROA not after: Fri 23 Apr 2027 07:05:36 +0000
asID: 38019
IP address blocks: 139.220.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e3:d2:e0:4f:ef:0e:19:22:5a:b2:4c:50:6e:bb:79:1f:ac:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 07:00:36 2026 GMT
Not After : Apr 23 07:05:36 2027 GMT
Subject: CN=769D85F3B8BC8CD9A05477FD41CD9EFFB8ED07BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:c3:5f:f7:99:14:3f:46:32:de:b9:48:51:
59:26:23:32:56:79:6a:21:f3:ec:88:12:0e:18:07:
a6:c6:2c:9d:6c:0c:5f:70:43:a7:04:7c:75:18:71:
ec:58:06:62:47:7e:80:a9:b0:0a:67:7e:8d:46:20:
fd:11:14:c5:8e:35:b5:1f:35:34:64:6c:60:fc:d6:
af:02:76:36:dc:e1:e4:fb:c3:41:8f:bd:d6:3b:61:
97:bb:7f:db:2b:4a:13:43:7f:32:cb:b6:7f:6a:82:
80:72:66:b6:0d:5f:50:c9:98:69:b5:10:a6:ba:96:
77:b8:53:67:b3:99:f2:87:10:b5:27:4a:e1:97:2a:
da:34:e8:4b:63:42:2e:70:d8:5e:d9:32:00:f4:ab:
7f:55:1c:b7:93:50:c5:d8:77:f0:f6:1e:ee:d6:21:
3e:51:20:8e:fe:d9:a0:88:06:4a:37:f6:0b:75:f2:
b5:79:4e:cb:d7:87:c9:ec:89:dd:9b:a4:05:46:24:
b3:7a:a2:96:57:01:bd:93:ed:4d:ec:d5:b1:32:5f:
a3:4f:5c:e3:72:fa:ca:8d:b9:08:e7:32:28:12:41:
ca:3d:1b:1e:e7:a9:5d:0c:23:97:22:d0:eb:dc:5d:
0f:40:5e:16:c2:c6:69:30:94:e0:a6:9f:4d:21:e2:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:85:F3:B8:BC:8C:D9:A0:54:77:FD:41:CD:9E:FF:B8:ED:07:BD
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233302e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.230.0/23
Signature Algorithm: sha256WithRSAEncryption
90:68:0c:bb:2e:e3:66:0a:89:66:7f:86:d4:28:8a:8b:97:65:
d2:7e:c8:0e:52:3a:09:3b:c5:45:60:0a:5d:b4:b2:09:8a:d9:
cc:4d:ea:8c:b6:c7:c9:b0:ee:a9:e3:7a:1c:ec:69:0c:72:3c:
50:82:4d:eb:c7:5d:62:d1:28:7c:6d:9a:15:fc:de:e0:88:fa:
20:20:18:44:41:0d:b2:9b:a6:05:9b:39:2e:fa:48:ff:fd:88:
3d:dc:5d:5a:63:d1:23:b9:63:26:5c:19:8a:a7:4f:de:ae:05:
98:f9:fa:8e:23:5f:7f:b6:78:0b:b0:c6:12:bb:6e:96:0f:8f:
6a:d4:7a:c8:98:8a:c1:04:af:0f:0d:15:a4:3e:ec:38:75:5a:
39:0a:5a:f8:ca:49:1a:9e:79:df:28:f5:7a:ab:17:06:28:c5:
d1:e2:3f:a9:40:93:19:5a:ee:46:21:d9:8b:df:72:c7:69:00:
bb:3b:c3:b8:2f:97:d0:f6:a3:e7:78:a0:a2:cb:6e:2c:46:79:
14:4a:40:19:85:6c:a7:87:65:c5:fa:7d:9b:3d:9c:62:fe:b8:
65:cb:e9:93:b6:dd:57:4b:6a:e7:e5:18:54:d2:a4:29:32:5b:
ba:0e:0f:cd:74:d5:91:11:7d:c7:d6:43:5d:e6:96:be:a6:60:
96:05:2d:47
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUSuPS4E/vDhkiWrJMUG67eR+sSMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV
BAMTKDc2OUQ4NUYzQjhCQzhDRDlBMDU0NzdGRDQxQ0Q5RUZGQjhFRDA3QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bcNf95kUP0Yy3rlIUVkmIzJW
eWoh8+yIEg4YB6bGLJ1sDF9wQ6cEfHUYcexYBmJHfoCpsApnfo1GIP0RFMWONbUf
NTRkbGD81q8Cdjbc4eT7w0GPvdY7YZe7f9srShNDfzLLtn9qgoByZrYNX1DJmGm1
EKa6lne4U2ezmfKHELUnSuGXKto06EtjQi5w2F7ZMgD0q39VHLeTUMXYd/D2Hu7W
IT5RII7+2aCIBko39gt18rV5TsvXh8nsid2bpAVGJLN6opZXAb2T7U3s1bEyX6NP
XONy+sqNuQjnMigSQco9Gx7nqV0MI5ci0OvcXQ9AXhbCxmkwlOCmn00h4o5lAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUdp2F87i8jNmgVHf9Qc2e/7jtB70wHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy
MzIzMDJlMzIzMzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYvc5jANBgkqhkiG9w0BAQsFAAOCAQEAkGgMuy7jZgqJZn+G1CiK
i5dl0n7IDlI6CTvFRWAKXbSyCYrZzE3qjLbHybDuqeN6HOxpDHI8UIJN68ddYtEo
fG2aFfze4Ij6ICAYREENspumBZs5LvpI//2IPdxdWmPRI7ljJlwZiqdP3q4FmPn6
jiNff7Z4C7DGErtulg+PatR6yJiKwQSvDw0VpD7sOHVaOQpa+MpJGp553yj1eqsX
BijF0eI/qUCTGVruRiHZi99yx2kAuzvDuC+X0Paj53igostuLEZ5FEpAGYVsp4dl
xfp9mz2cYv64Zcvpk7bdV0tq5+UYVNKkKTJbug4PzXTVkRF9x9ZDXeaWvqZglgUt
Rw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:00 2026 by rpki-client