
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3230382e302f32302d3234203d3e203338333635.roa
File: 3138302e37362e3230382e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier: a0Usd3AUrhC1kZlOf26LratsfYw/4OiTaq8W/UtvFP0=
Subject key identifier: 88:A8:1F:8E:93:32:E4:84:BE:05:D0:09:03:E1:7C:CC:49:9C:AD:DF
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 3089682E029601C5A260F05C9AF916E01DDD6B74
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3230382e302f32302d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 12:53:22 +0000
ROA not before: Sun 19 Apr 2026 12:48:22 +0000
ROA not after: Sun 18 Apr 2027 12:53:22 +0000
asID: 38365
IP address blocks: 180.76.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:89:68:2e:02:96:01:c5:a2:60:f0:5c:9a:f9:16:e0:1d:dd:6b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 12:48:22 2026 GMT
Not After : Apr 18 12:53:22 2027 GMT
Subject: CN=88A81F8E9332E484BE05D00903E17CCC499CADDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:fc:f9:fd:42:8d:bd:11:db:dd:34:a5:aa:
73:77:a2:23:bb:ea:54:5d:c3:eb:ae:19:0c:b3:84:
18:c0:d4:27:4e:6c:d6:6e:4e:2e:19:47:b4:49:fa:
ab:73:d0:25:d1:98:8a:36:b8:0b:d9:46:f0:24:00:
8d:3a:f1:fb:67:65:b8:30:43:5d:24:cd:32:6a:51:
5f:69:41:dd:d0:cf:b3:6c:c9:f5:69:5c:af:29:2e:
8e:59:8f:1f:f0:c2:3b:f5:c5:ed:0a:c1:dd:28:2c:
fe:6a:95:0e:6a:74:3b:0f:9e:c4:71:21:d7:7b:e6:
2a:78:0c:df:57:4b:ea:da:e9:01:88:06:de:81:9e:
71:92:0f:71:7e:33:ee:60:4d:18:5b:6b:4e:06:f5:
8c:22:81:82:8c:d9:86:9c:2a:07:6d:ed:05:ba:ef:
99:ab:d6:16:61:ed:f6:25:36:ea:67:12:7a:33:f8:
2a:70:8a:2a:05:49:7c:9f:70:4b:f6:a0:35:8b:d8:
57:b7:60:37:04:6c:fe:f5:f3:62:93:0c:85:4c:70:
07:eb:4c:5a:78:96:ad:d5:01:9f:13:db:1c:a9:3d:
40:34:ff:c7:5e:5f:9d:aa:36:65:f5:a3:d2:b5:fd:
0f:2f:c4:db:f6:66:4a:3b:f6:89:b5:f7:06:d2:cb:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:1F:8E:93:32:E4:84:BE:05:D0:09:03:E1:7C:CC:49:9C:AD:DF
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3230382e302f32302d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.76.208.0/20
Signature Algorithm: sha256WithRSAEncryption
16:91:e0:22:d3:8c:d5:6b:a8:18:41:f6:48:95:62:71:b5:15:
66:4f:c5:0f:3a:82:8f:e6:89:df:ba:bc:0d:f5:f3:11:36:39:
ce:30:01:90:6e:26:27:5f:f9:78:6e:c1:96:55:ad:6d:fb:62:
11:2e:26:3c:e5:9f:6e:3d:38:44:8b:d2:84:fc:a7:3c:c8:a6:
cc:20:8f:a4:e3:07:83:56:a6:f9:0c:68:0a:22:a7:f0:1f:dd:
4c:7d:2c:52:80:26:26:df:bf:1e:1a:fd:d3:c1:85:fb:9e:0e:
29:45:94:04:11:fb:3a:0c:18:d3:af:66:dd:75:ac:66:02:be:
8b:44:f6:70:e0:81:8a:54:a6:15:d3:52:38:61:0c:2b:cb:52:
c0:15:fe:3e:1f:fa:cc:75:e6:0b:8d:5b:2c:15:b0:9e:68:63:
06:19:53:67:8e:7b:d9:49:c9:c7:b2:27:99:0b:c8:91:4e:67:
e5:67:b7:ad:7e:bf:9c:41:d2:c1:cc:88:49:ec:02:a7:ee:c9:
a4:4c:64:60:e4:e9:90:d2:80:5e:7b:a0:17:8e:25:76:13:99:
f1:d5:4d:58:0c:1b:c2:02:c8:68:a4:fd:55:87:1d:61:85:b4:
c8:4b:1f:1b:ae:2f:cd:d0:c8:18:4a:82:66:9c:fa:a7:06:c1:
e3:90:a5:49
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMIloLgKWAcWiYPBcmvkW4B3da3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MTkxMjQ4MjJaFw0yNzA0MTgxMjUzMjJaMDMxMTAvBgNV
BAMTKDg4QTgxRjhFOTMzMkU0ODRCRTA1RDAwOTAzRTE3Q0NDNDk5Q0FEREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkE/z5/UKNvRHb3TSlqnN3oiO7
6lRdw+uuGQyzhBjA1CdObNZuTi4ZR7RJ+qtz0CXRmIo2uAvZRvAkAI068ftnZbgw
Q10kzTJqUV9pQd3Qz7NsyfVpXK8pLo5Zjx/wwjv1xe0Kwd0oLP5qlQ5qdDsPnsRx
Idd75ip4DN9XS+ra6QGIBt6BnnGSD3F+M+5gTRhba04G9YwigYKM2YacKgdt7QW6
75mr1hZh7fYlNupnEnoz+CpwiioFSXyfcEv2oDWL2Fe3YDcEbP7182KTDIVMcAfr
TFp4lq3VAZ8T2xypPUA0/8deX52qNmX1o9K1/Q8vxNv2Zko79om19wbSy1MjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUiKgfjpMy5IS+BdAJA+F8zEmcrd8wHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzgzMDJlMzcz
NjJlMzIzMDM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBLRM0DANBgkqhkiG9w0BAQsFAAOCAQEAFpHgItOM1WuoGEH2SJVicbUV
Zk/FDzqCj+aJ37q8DfXzETY5zjABkG4mJ1/5eG7BllWtbftiES4mPOWfbj04RIvS
hPynPMimzCCPpOMHg1am+QxoCiKn8B/dTH0sUoAmJt+/Hhr908GF+54OKUWUBBH7
OgwY069m3XWsZgK+i0T2cOCBilSmFdNSOGEMK8tSwBX+Ph/6zHXmC41bLBWwnmhj
BhlTZ4572UnJx7InmQvIkU5n5We3rX6/nEHSwcyISewCp+7JpExkYOTpkNKAXnug
F44ldhOZ8dVNWAwbwgLIaKT9VYcdYYW0yEsfG64vzdDIGEqCZpz6pwbB45ClSQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:15 2026 by rpki-client