
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3232342e302f31392d3234203d3e203338333635.roa
File: 3138302e37362e3232342e302f31392d3234203d3e203338333635.roa (raw, json)
Hash identifier: Klho1BMtbfoa2PQMAV0ffa8ygAIy3SYJesov/12L9j8=
Subject key identifier: A8:CB:E6:D7:D9:6F:DB:BB:52:3A:5A:EB:4B:05:12:3E:D8:92:9C:84
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 25573FF93EDC9457144CAE91F1A64F4AF1FB2DCE
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3232342e302f31392d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 12:53:22 +0000
ROA not before: Sun 19 Apr 2026 12:48:22 +0000
ROA not after: Sun 18 Apr 2027 12:53:22 +0000
asID: 38365
IP address blocks: 180.76.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:57:3f:f9:3e:dc:94:57:14:4c:ae:91:f1:a6:4f:4a:f1:fb:2d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 12:48:22 2026 GMT
Not After : Apr 18 12:53:22 2027 GMT
Subject: CN=A8CBE6D7D96FDBBB523A5AEB4B05123ED8929C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:71:32:73:db:ba:6e:82:08:60:5b:c0:80:
b4:36:26:c7:5f:d0:5d:83:fc:90:2e:8d:81:54:ce:
e0:49:0d:29:6d:a6:26:18:ca:1e:b5:3c:54:5a:83:
aa:a9:79:25:05:c2:ea:5c:b5:58:64:a5:bb:a4:46:
e8:c6:49:db:45:93:ab:88:a4:b9:f5:95:2e:67:a3:
23:c4:a3:2f:a9:56:7f:06:7d:06:6e:0f:a1:ba:c9:
79:8a:67:cd:92:44:39:35:52:4b:5d:ad:f4:c1:94:
53:92:83:9e:9a:b4:12:94:f5:b5:8e:6a:0a:26:87:
39:57:fe:a8:5b:8a:46:36:ca:54:d4:56:87:ff:79:
e8:2e:44:29:7b:fb:12:d8:71:a0:11:15:2f:fa:68:
07:3b:06:d1:3f:95:d7:9a:57:05:60:bd:38:08:45:
c0:44:7c:42:50:cd:4d:71:0b:92:b6:e4:bf:40:ac:
cd:fd:5e:ec:67:4f:6d:ac:e5:aa:45:ee:fc:fe:c3:
a5:f3:01:8e:c9:7d:b5:37:5d:a4:46:ed:53:a0:e2:
01:4d:4a:8e:7c:3a:38:13:9d:00:db:77:8c:49:ce:
cb:cd:6b:3a:aa:ce:3e:c8:7b:04:37:87:bc:40:0b:
f3:08:b3:2f:ef:5d:6d:8b:89:8a:ad:48:0a:fc:d3:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:E6:D7:D9:6F:DB:BB:52:3A:5A:EB:4B:05:12:3E:D8:92:9C:84
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3232342e302f31392d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.76.224.0/19
Signature Algorithm: sha256WithRSAEncryption
55:cf:c7:85:9d:aa:24:93:1d:5e:f9:8e:2c:a2:3c:d4:0f:1e:
90:14:f1:9f:95:b5:aa:65:b9:5a:ea:49:e1:59:a5:ec:0f:4a:
b1:f4:c7:75:65:7e:c4:df:3d:b1:49:84:3d:9e:fd:6f:72:3f:
37:f3:be:5c:8e:70:b8:19:95:11:c0:37:7c:87:ac:50:06:12:
df:f6:6f:92:d2:78:de:76:e7:20:1c:48:bb:ac:01:a2:52:91:
44:37:18:bd:a9:06:41:a0:38:39:1a:87:c3:1e:d4:26:21:ca:
c8:f0:a3:63:d8:4e:8c:ce:c9:67:48:83:4e:4c:43:c3:4f:b6:
7f:bd:8e:36:29:67:e6:1d:46:1f:fe:ac:49:fe:ac:52:76:3f:
3f:40:ee:16:8f:91:83:d6:9c:3a:ad:7b:89:7a:c2:17:1e:73:
4d:eb:ad:3d:2c:c8:9c:54:a6:f8:5a:0d:0a:d7:f8:00:19:c1:
4a:5d:c0:cd:09:1e:f2:3f:a9:52:5c:64:f1:6a:80:da:b3:01:
bd:bc:f8:5a:c8:ff:50:61:57:9b:62:08:9c:af:22:16:3b:b4:
e7:b7:50:3d:c6:95:5b:71:d1:4e:71:d5:7f:76:27:7f:51:9b:
7c:34:b5:1e:00:3d:7b:82:e6:7b:22:ce:e1:99:c8:b8:e1:b1:
37:7a:bb:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:28 2026 by rpki-client