
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139362e302f32332d3234203d3e203338333635.roa
File: 3138302e37362e3139362e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier: Hvo67BWKxvZfPAx327t6rz0pCFPt8Sv2ygiJM+Y0/w0=
Subject key identifier: D8:8E:B0:1B:04:62:3E:E3:E6:AE:FD:62:4F:26:28:2A:E8:4C:26:54
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 1C8591F2119AF39254036DA634D95AC9076D1102
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139362e302f32332d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 12:53:22 +0000
ROA not before: Sun 19 Apr 2026 12:48:22 +0000
ROA not after: Sun 18 Apr 2027 12:53:22 +0000
asID: 38365
IP address blocks: 180.76.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:85:91:f2:11:9a:f3:92:54:03:6d:a6:34:d9:5a:c9:07:6d:11:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 12:48:22 2026 GMT
Not After : Apr 18 12:53:22 2027 GMT
Subject: CN=D88EB01B04623EE3E6AEFD624F26282AE84C2654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:24:42:3b:7a:d4:9d:0b:3f:81:07:e2:71:
cf:17:48:00:08:f2:3c:ce:8d:2e:30:5e:a6:0d:9d:
2e:0b:a0:96:27:75:ba:c4:92:89:69:9b:dc:e7:20:
6e:b7:36:30:3a:6a:36:be:11:b8:f3:8e:e2:30:c8:
bf:fb:1c:c9:42:e7:b2:c9:76:a0:87:7a:97:14:9a:
6c:79:9a:82:63:61:c2:53:ec:19:33:e5:fc:93:2a:
bb:72:b7:13:31:92:d4:56:59:bd:92:b9:b4:89:a0:
0d:b9:8f:cd:0c:3e:7a:e0:37:69:34:af:d0:eb:bc:
44:8c:e9:71:a5:89:38:cc:c5:2b:42:3b:7e:9a:76:
27:55:37:22:63:6a:e1:82:1d:fb:3b:be:5e:7f:f4:
df:64:88:1b:36:c2:7c:30:79:0b:62:d8:37:64:ec:
39:13:2d:8c:a9:75:f0:27:47:19:e6:77:90:ae:45:
03:d1:61:12:95:62:e4:83:e6:d5:92:bd:04:16:20:
fd:07:e1:e6:cc:2b:a7:75:e0:fa:00:09:7a:9c:c7:
8e:04:7d:36:e6:31:d5:57:33:93:1e:ce:ce:85:2a:
0f:a9:45:b3:05:a9:1b:3c:1e:99:6b:fb:5f:ec:d2:
a0:d6:07:da:81:e9:64:55:9e:0a:68:21:f7:31:d1:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:B0:1B:04:62:3E:E3:E6:AE:FD:62:4F:26:28:2A:E8:4C:26:54
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139362e302f32332d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.76.196.0/23
Signature Algorithm: sha256WithRSAEncryption
06:7e:9d:ad:b9:86:b2:5b:0b:0d:0a:69:26:3a:a0:14:ac:56:
21:a2:22:81:df:82:ce:6a:2e:e7:9c:ed:04:e7:64:87:55:57:
13:ff:69:65:1e:8f:49:f4:d5:83:56:89:76:f7:ae:e0:c6:b0:
18:27:28:5f:d9:9c:1c:8f:26:b8:af:00:dc:48:dd:09:da:02:
ed:92:20:e0:20:ce:e9:a4:05:e4:91:25:c4:7c:89:66:0d:80:
cc:5c:45:8a:b6:ea:06:f6:1f:24:14:a3:1b:f7:bc:30:27:0e:
89:10:14:00:b5:b2:11:1a:6f:14:19:60:d6:5e:db:cd:8e:01:
69:22:72:5b:0c:c7:90:ea:6d:fa:2d:65:4d:2b:88:cb:6a:50:
24:a4:bd:9f:ec:2a:7c:6c:81:d9:37:74:12:ab:02:84:40:2f:
8e:1c:e9:15:86:8b:0b:9b:aa:ee:e4:6c:db:f6:14:25:77:5e:
f1:6c:e9:0e:83:f5:b6:3c:c1:73:9d:cb:04:af:d7:6b:6a:f3:
02:3a:50:62:7d:94:2b:fc:3f:e8:93:bf:a7:e0:1f:de:a2:27:
97:4d:04:22:14:ee:ec:3b:a2:8f:2c:b0:8a:fa:4d:a0:69:4c:
d0:41:a0:4b:6b:3c:dc:ae:50:51:f4:81:f2:bf:f8:8a:62:df:
b3:a1:4e:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:14:55 2026 by rpki-client