
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233362e302f32332d3233203d3e203338303139.roa
File: 3133392e3232302e3233362e302f32332d3233203d3e203338303139.roa (raw, json)
Hash identifier: yiTXJaFCu7CnHd6CWV1arIoTHTQDSs8mH+HbSU1aUDg=
Subject key identifier: E5:EA:88:5E:66:BC:FF:74:A6:7B:00:C5:38:E4:FA:F0:94:33:6D:C1
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 711C5D42AB19D29AC1FF4D7B31B188310531CEC0
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233362e302f32332d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 07:03:34 +0000
ROA not before: Fri 24 Apr 2026 06:58:34 +0000
ROA not after: Fri 23 Apr 2027 07:03:34 +0000
asID: 38019
IP address blocks: 139.220.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1c:5d:42:ab:19:d2:9a:c1:ff:4d:7b:31:b1:88:31:05:31:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 06:58:34 2026 GMT
Not After : Apr 23 07:03:34 2027 GMT
Subject: CN=E5EA885E66BCFF74A67B00C538E4FAF094336DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:82:73:f7:b2:a5:2c:4b:3f:94:f4:b6:ca:
a5:9d:f9:c7:15:c6:85:16:77:eb:47:d1:7d:7a:03:
95:f1:57:7d:a9:c9:26:af:ce:e7:16:71:49:4e:48:
2d:1a:0b:7a:31:f1:d0:a0:ab:a4:c3:f5:5f:a8:8f:
14:a3:36:cd:a3:c0:e6:1a:cb:3d:d4:55:4a:46:c9:
4e:da:0d:b0:58:b6:0a:20:01:e5:d6:c8:68:95:52:
82:11:40:f3:e9:2f:81:a2:55:cc:62:09:02:53:79:
25:eb:a1:2d:45:b0:88:7a:d0:8f:d8:16:90:2a:e8:
24:78:e7:41:88:8a:f1:f4:87:18:20:2e:dd:6a:ad:
bd:68:7d:39:b3:dc:29:32:67:75:85:83:e0:9c:21:
22:b9:a5:75:a1:2d:3a:db:1f:d2:98:9f:a9:c9:88:
4c:63:72:13:37:5f:b5:22:2c:09:50:eb:e8:00:78:
9c:36:0c:7a:2f:78:af:39:1d:0b:cb:0d:87:5c:a2:
f1:5b:2f:89:c6:2f:60:a1:81:2b:a1:82:ce:b4:fd:
22:94:ae:1f:61:90:0f:dc:d4:cd:71:84:2b:dd:93:
10:44:cb:31:5a:df:e2:92:87:0e:fc:ec:f8:72:f6:
69:b8:52:bb:83:2a:c8:e1:28:70:21:76:1e:ce:96:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EA:88:5E:66:BC:FF:74:A6:7B:00:C5:38:E4:FA:F0:94:33:6D:C1
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233362e302f32332d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.236.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:6c:92:5d:8b:51:c2:9f:f5:87:8a:76:60:85:c1:1e:ed:5c:
73:2a:7e:01:cb:47:9f:9f:99:e1:e8:0e:97:ef:d3:85:5e:78:
8b:66:32:4d:fd:b1:f9:0a:00:37:06:94:fe:7c:3d:71:b5:d9:
24:dd:0e:06:d7:cc:7c:ac:f0:63:ac:7e:f7:96:d2:50:a6:1a:
fa:c2:d7:cc:c0:93:a0:c2:30:e3:ec:f2:62:b1:55:e6:e7:e2:
b4:d2:67:29:d9:5e:99:8e:56:ea:d6:d1:8c:d7:88:ce:9c:85:
bf:ad:04:4a:43:20:1f:95:05:ab:3e:81:b1:3d:c6:19:be:3a:
10:d8:5e:4c:fc:03:80:c9:53:9a:de:be:31:50:8f:68:4f:77:
f8:6f:fb:c9:e0:26:75:9a:2a:1b:66:41:11:4c:fb:12:9b:d9:
08:92:e2:7e:48:36:b6:dc:4f:5d:66:24:65:af:ff:f5:c8:52:
0a:0e:3f:44:3d:12:c2:21:f9:5f:4d:be:71:10:8d:0d:0e:33:
bd:44:a9:b3:ec:51:3e:04:30:fe:d4:a8:06:2a:2d:d3:21:02:
93:28:fe:2c:76:14:fe:f1:cd:d4:e0:cd:ae:f5:7f:f4:95:1f:
ad:0a:ff:b8:ec:4c:6f:a8:7a:0a:5a:76:b2:0f:cc:d3:bd:d6:
c6:6f:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:44 2026 by rpki-client