
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e34382e302f32302d3234203d3e203338333635.roa
File: 3138302e37362e34382e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier: 8JREbibtMN9f2Pf+IMK5oldGF/sob3nCx6jeOWb2DLg=
Subject key identifier: FB:84:90:77:37:DB:37:D3:F1:A3:4B:EF:05:A1:E8:19:34:78:DE:4D
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 7EFEC59CF79370C780CA4EDB184A42885B1214B9
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e34382e302f32302d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 11:50:44 +0000
ROA not before: Sun 19 Apr 2026 11:45:44 +0000
ROA not after: Sun 18 Apr 2027 11:50:44 +0000
asID: 38365
IP address blocks: 180.76.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fe:c5:9c:f7:93:70:c7:80:ca:4e:db:18:4a:42:88:5b:12:14:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 11:45:44 2026 GMT
Not After : Apr 18 11:50:44 2027 GMT
Subject: CN=FB84907737DB37D3F1A34BEF05A1E8193478DE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:89:d1:23:89:07:75:c5:3e:a4:a8:7a:29:
ea:80:0c:da:86:ec:b9:92:28:6f:d4:fd:0a:5e:e6:
20:d5:2c:d1:6c:8d:34:30:0f:54:4f:ac:f7:2e:5a:
33:9d:d0:99:f6:74:70:89:f1:54:b0:19:46:bc:f9:
dd:46:54:51:18:58:f4:08:2b:40:e5:e7:ba:4b:6c:
07:1e:ac:60:e5:40:08:a8:3c:eb:6c:d4:6c:e3:14:
32:df:e8:50:5d:5d:e5:34:c4:5f:cf:33:dd:b5:b1:
91:60:48:cb:dd:b9:cd:ba:98:1a:a0:9e:59:c1:f4:
f8:b1:f2:f2:54:a6:cd:bb:83:0a:a3:27:4b:2d:2a:
ae:87:0a:fd:c8:6d:64:b9:f0:d6:4f:d5:c2:e7:68:
91:dd:11:6f:ae:a6:c2:dc:70:cd:a1:4d:b3:56:d7:
45:24:bf:ee:8a:52:0c:15:3e:02:6e:15:7f:ec:75:
0d:59:1a:2f:4a:30:02:dc:eb:a6:ed:39:60:f6:b0:
5a:d0:fd:67:b5:07:07:80:3a:59:b2:e5:7b:42:a3:
32:40:de:ff:08:ab:8e:ae:d0:07:0c:44:89:5a:82:
dc:c5:fa:fd:b4:16:96:4c:db:02:8e:f4:60:86:a5:
a3:8f:11:75:fd:47:c8:0a:33:40:c9:4a:c0:b8:8b:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:84:90:77:37:DB:37:D3:F1:A3:4B:EF:05:A1:E8:19:34:78:DE:4D
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e34382e302f32302d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.76.48.0/20
Signature Algorithm: sha256WithRSAEncryption
10:8b:d6:66:58:ea:a5:d0:36:0f:b8:72:a5:b1:f2:da:0a:40:
d5:36:2f:53:e2:59:02:ad:24:99:79:4b:56:d9:d3:75:87:32:
38:54:57:37:53:6f:93:a1:ab:88:f8:d7:be:ef:bb:1d:13:bb:
01:5c:75:8f:52:6c:02:aa:20:d1:06:a4:f7:2a:23:18:2f:38:
db:fd:08:01:26:d7:26:ff:fb:5d:51:e0:3a:8f:68:1d:2b:28:
8e:48:eb:6a:54:4a:cb:1d:dd:c7:e2:63:22:29:f3:0d:61:c0:
cf:32:77:3e:09:d3:c9:3b:e4:ab:d7:50:59:6c:b4:1c:3b:d2:
e2:b3:c4:b8:d2:c9:00:a0:d5:f6:08:55:a7:00:e0:cc:0d:1d:
93:93:8f:6c:63:9f:46:15:f8:68:07:9f:65:06:8e:3f:d3:f0:
5f:6d:0f:97:f3:17:81:a2:6a:36:3b:db:b1:e3:64:f3:6b:b6:
24:87:8b:c2:83:5c:52:7e:64:a5:56:6f:13:e3:0c:40:32:cd:
cf:04:35:24:1c:a7:b8:c8:dc:4e:de:4c:00:01:1c:92:ed:f0:
9f:17:85:f1:1d:90:0d:07:36:2b:dd:a5:ef:e3:37:67:fa:42:
79:6b:b1:42:92:0c:52:e4:43:67:27:2f:d1:b4:f1:1f:d2:1b:
cf:c3:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:16 2026 by rpki-client