
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34392e36342e302f31382d3234203d3e203338333635.roa
File: 3132302e34392e36342e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier: GHp8gbettHzahZ0cjPFq3auJF2C2odIRjPIuMNgj/vo=
Subject key identifier: 81:E4:4E:4C:2F:43:FA:46:51:75:1D:8A:4D:2C:52:9F:3C:4C:93:2B
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 76C5ED67CBFCFECF2A12FBD4ED646EB2E30E6AD4
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34392e36342e302f31382d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 08:17:20 +0000
ROA not before: Sun 19 Apr 2026 08:12:20 +0000
ROA not after: Sun 18 Apr 2027 08:17:20 +0000
asID: 38365
IP address blocks: 120.49.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c5:ed:67:cb:fc:fe:cf:2a:12:fb:d4:ed:64:6e:b2:e3:0e:6a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 08:12:20 2026 GMT
Not After : Apr 18 08:17:20 2027 GMT
Subject: CN=81E44E4C2F43FA4651751D8A4D2C529F3C4C932B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:13:bc:28:c4:1c:ba:05:03:81:ac:1e:b8:
8e:b0:46:ac:35:ab:1a:77:7a:7d:6c:41:02:af:f3:
d3:fb:5b:4e:cf:1d:82:fe:f1:51:19:64:3d:9c:a1:
3a:e1:ff:e1:42:b2:6d:4d:93:c2:85:5c:97:ac:5f:
0a:28:36:99:22:c1:d3:a2:02:bc:06:2a:62:6b:98:
31:32:e0:aa:fd:d0:73:c3:03:e9:56:f4:dd:04:90:
10:8d:7a:9d:7f:c0:4a:f9:96:16:7d:c3:a7:06:0c:
18:75:fa:12:a0:21:a8:cc:04:84:ea:56:04:ea:db:
ed:56:42:e5:af:4f:06:99:5f:81:44:ee:68:16:26:
4e:6f:ec:09:61:30:d0:70:91:68:b2:d7:d9:9f:ea:
32:9f:04:5f:98:50:53:76:e9:b5:e3:bb:12:39:f3:
24:a6:54:d2:53:2f:f7:c9:0b:3e:6b:3d:19:ed:26:
f0:7d:5e:0d:f7:ec:53:86:a0:d7:6a:d8:76:4a:e2:
2e:c2:2b:88:17:11:82:28:bd:5b:19:5e:94:ba:65:
d0:67:16:a0:c8:db:8d:c1:4e:22:db:bc:59:4d:eb:
72:8f:31:90:65:76:4a:20:69:41:4b:84:50:d1:39:
b9:a3:9d:6d:51:61:c9:32:a9:7d:8e:15:92:45:b6:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E4:4E:4C:2F:43:FA:46:51:75:1D:8A:4D:2C:52:9F:3C:4C:93:2B
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34392e36342e302f31382d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.49.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:d8:7c:ff:45:9e:83:ac:c0:c3:66:ed:22:98:53:6b:51:81:
40:1d:38:97:ce:c2:69:1c:0b:7c:48:87:73:06:65:d3:03:62:
88:f0:aa:cd:d2:f7:fc:44:f4:99:43:14:42:28:fe:78:9c:54:
c9:77:39:ed:b9:df:18:ab:ef:4f:e5:af:28:cc:f9:6e:11:7a:
50:87:65:b2:6a:9a:f6:af:8b:94:8c:23:12:f1:3e:cd:04:e8:
49:99:4d:ed:41:72:12:52:69:44:c7:be:63:3a:1d:ba:bf:0b:
c6:20:99:9a:2f:b6:ae:76:20:ed:bb:67:a2:58:d9:43:13:7a:
2b:98:61:8a:64:e0:95:1c:99:38:24:59:47:af:35:bc:95:41:
23:2a:52:b9:91:fb:51:4d:f6:6f:d0:e3:f5:10:61:3a:c3:18:
3e:8d:b3:98:f9:16:16:4c:64:64:4b:60:87:a5:d5:c6:e0:dd:
90:53:ae:74:bf:27:e8:48:b0:31:e3:7e:ed:49:d9:7d:f2:bc:
26:94:7e:70:5a:70:47:78:5e:ab:8e:c3:38:70:b6:2b:3d:41:
a3:82:d0:ce:85:ea:49:e2:82:9b:3f:c4:97:82:42:06:58:7c:
87:f7:5d:57:30:0e:c5:96:fd:39:13:6e:68:6e:3c:55:dc:17:
ea:bd:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:16 2026 by rpki-client