
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e33322e302f32302d3234203d3e203338333635.roa
File: 3138302e37362e33322e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier: 23mkkiuNbB2n1GjPsMKqBWxW8m3Yi9Q+fThvIaHGmm4=
Subject key identifier: 21:15:95:F7:6B:82:01:E7:4C:D1:6D:DD:F7:96:F2:EB:5E:99:23:DB
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 33FAB0E04E541676C5603B7061E3543B1D8A0B56
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e33322e302f32302d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 11:50:14 +0000
ROA not before: Sun 19 Apr 2026 11:45:14 +0000
ROA not after: Sun 18 Apr 2027 11:50:14 +0000
asID: 38365
IP address blocks: 180.76.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fa:b0:e0:4e:54:16:76:c5:60:3b:70:61:e3:54:3b:1d:8a:0b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 11:45:14 2026 GMT
Not After : Apr 18 11:50:14 2027 GMT
Subject: CN=211595F76B8201E74CD16DDDF796F2EB5E9923DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:ac:1f:08:98:50:e9:ca:78:11:4d:68:af:
9c:35:f9:6b:bf:64:da:ac:a7:d5:99:fe:79:41:6b:
ae:9d:74:07:d4:03:92:49:6f:e6:07:00:5b:a3:ce:
9e:94:03:55:95:e7:86:02:d4:4d:86:05:96:9f:70:
bc:8e:18:34:cd:c0:3d:37:a5:a6:ce:5f:69:39:6d:
1b:fa:b8:18:12:43:11:58:86:32:b1:79:70:ae:51:
42:50:86:04:f6:f7:e2:6d:b4:6b:f6:0f:97:26:d5:
9a:7d:45:53:5a:0d:df:b8:c9:97:5a:de:4a:cc:ce:
2f:b9:41:67:fc:7c:81:a7:90:65:c6:9f:a3:57:81:
10:97:ff:66:55:40:56:4d:41:74:31:73:ec:b7:f0:
fb:3b:15:f5:9d:ea:9f:f6:5d:87:b6:88:02:4d:42:
07:6a:fb:6d:d4:11:20:3d:60:d0:ec:dd:4e:c0:78:
19:69:c5:ef:47:32:4b:6a:84:b9:a8:cd:29:27:79:
3e:3b:19:e5:8f:bc:bf:14:db:3d:ce:64:21:a5:a9:
07:b7:4c:af:04:2b:f9:6f:03:09:d7:96:dd:85:63:
73:0a:86:2b:c9:0d:31:29:ea:1d:71:d3:70:44:48:
a7:c9:49:fe:4c:94:a4:b0:bf:c4:4a:89:77:5b:0d:
24:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:95:F7:6B:82:01:E7:4C:D1:6D:DD:F7:96:F2:EB:5E:99:23:DB
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e33322e302f32302d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.76.32.0/20
Signature Algorithm: sha256WithRSAEncryption
64:c5:56:81:c6:ec:21:15:b0:17:6c:55:87:3a:70:a7:63:45:
a0:84:20:d6:d6:e9:ce:ea:68:bb:c5:04:4f:ec:7a:d7:49:76:
89:20:88:93:d9:32:fc:ee:ce:0d:68:1f:d4:92:4a:0f:c8:f5:
4a:93:71:83:c8:66:78:9a:7d:bc:00:b1:16:c6:aa:01:e2:d4:
73:48:a6:ee:6b:60:c1:36:15:25:08:a0:da:c7:3c:90:72:95:
2f:34:8b:96:a1:d9:08:e5:a0:d0:57:f2:9a:b0:c4:c2:7c:6d:
f7:5a:5d:1a:41:73:7c:34:e8:a6:61:39:7a:f6:45:f7:2d:0a:
0b:33:ae:f3:7f:51:fe:7a:ef:01:7d:5b:97:47:a4:39:92:1e:
47:4d:f6:9a:2e:37:80:d1:2d:84:62:d6:e2:a7:55:ff:75:4f:
28:15:30:42:ac:59:43:65:7a:ec:5d:05:26:a0:7e:fe:a8:f1:
da:26:05:a6:72:af:9e:f8:58:57:be:a6:43:af:64:75:1e:d9:
f5:41:49:bc:b5:c9:e7:0a:ca:fa:94:0f:aa:02:99:e5:16:dd:
a4:59:7e:e2:d0:d8:39:ed:2e:89:e3:3b:a4:41:0f:33:39:a4:
87:ea:e3:8f:75:93:0b:a8:6c:c7:ec:58:1d:06:84:ac:6e:4a:
e4:48:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:15 2026 by rpki-client