
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa
File: 3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa (raw, json)
Hash identifier: PsKMXsL3qW4zCFlCJE3zpizEHGjBCWZSu/u/1Z0CA9U=
Subject key identifier: B7:4A:73:34:66:00:07:7C:8C:EF:45:BB:30:8F:35:A8:97:5D:1F:A5
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 778DAF5B5BB5FEBB30104ECD280B55A838CE574B
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa
Signing time: Fri 24 Apr 2026 05:45:54 +0000
ROA not before: Fri 24 Apr 2026 05:40:54 +0000
ROA not after: Fri 23 Apr 2027 05:45:54 +0000
asID: 38019
IP address blocks: 139.220.240.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8d:af:5b:5b:b5:fe:bb:30:10:4e:cd:28:0b:55:a8:38:ce:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 05:40:54 2026 GMT
Not After : Apr 23 05:45:54 2027 GMT
Subject: CN=B74A73346600077C8CEF45BB308F35A8975D1FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:7d:0c:d6:cf:e3:28:2c:bd:35:2a:13:68:
08:2a:71:46:fc:13:31:a4:f2:30:da:59:0e:a6:2a:
96:7b:c1:87:f5:34:b4:b1:cc:48:73:35:cc:e9:5f:
de:ba:bd:86:6a:33:62:11:a3:d8:5b:5e:4b:75:57:
e2:ca:35:e8:df:c6:92:0e:81:66:20:04:7b:75:77:
db:83:65:15:3b:07:ab:17:30:59:9d:e2:d3:74:fc:
77:e4:0b:ef:ae:b4:bf:a6:77:72:ca:64:c8:92:a4:
d9:0f:1a:04:d3:43:c9:40:4d:b9:a0:29:4b:26:7e:
76:e5:b2:30:5a:88:8f:fd:0f:ea:51:3c:d5:22:0a:
2d:2b:ed:38:b8:31:b2:a8:88:03:35:56:cc:0c:3e:
fe:b2:83:1a:ba:af:52:48:5a:a7:8b:b1:65:fc:87:
09:fe:a9:be:c6:1e:41:14:2e:a1:49:a2:b4:0f:3c:
09:35:25:fd:78:a9:4a:f9:31:2e:04:d2:0b:03:ea:
54:c4:12:84:97:75:62:82:80:87:99:3d:99:91:20:
41:cf:0b:ce:84:34:9d:88:c2:86:3b:f7:34:40:59:
75:71:3b:4c:8b:a9:61:ec:86:0a:23:71:a6:02:53:
a9:1f:32:77:6e:fd:4b:85:70:a7:d4:39:e9:14:81:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:73:34:66:00:07:7C:8C:EF:45:BB:30:8F:35:A8:97:5D:1F:A5
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.240.0/22
Signature Algorithm: sha256WithRSAEncryption
00:7e:b8:e9:5c:74:77:84:8b:cc:1e:8c:2d:d2:0d:0c:5f:c0:
bd:1a:74:a6:22:11:9f:3d:28:b1:d3:4b:88:ee:51:07:f3:b5:
d6:04:32:7c:26:0f:39:34:04:01:77:da:fb:32:d2:00:28:a7:
13:d3:94:4d:a3:de:1c:b7:23:ca:97:9e:da:80:c1:42:fc:c4:
00:1b:4d:5a:66:ee:9f:0e:08:f9:ac:89:bd:23:0b:2d:d4:44:
88:61:d3:0d:4a:58:8b:3b:3d:4f:58:33:b0:5a:90:2a:6d:8c:
92:ae:2c:57:69:e3:6b:a3:76:18:16:f7:95:b7:5f:f2:59:4a:
17:8b:53:62:49:53:b5:75:d1:46:63:28:b3:e1:c7:c5:4a:b2:
05:85:6d:1c:29:54:ed:bf:e4:9b:ab:3d:4e:8c:f1:5a:14:64:
5c:cc:01:eb:8d:8c:a6:42:3c:97:63:22:77:44:e5:b5:a1:a0:
aa:69:d6:90:6f:d3:14:13:98:e9:a9:c4:d5:7d:cf:56:7f:51:
01:ea:49:ba:69:f0:7f:eb:6f:dc:0e:08:5a:01:01:ca:20:b0:
f0:ce:96:46:9a:8b:cb:23:b2:d4:0d:3e:10:3f:e0:ed:88:1e:
94:10:80:92:83:9e:70:c1:3f:80:49:cd:b1:3b:c9:e4:e8:55:
41:67:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:14 2026 by rpki-client